0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:47:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06fea28e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62ff8b6f0d5f8ac79417a2f443a1b71e227c9a13ba254aed523657b17fd54fce619251a959992d648cdf085268c79df67f66cf5db9fb7617917c1eb20651fba15c3dda3250d212284e0f818a4efe5e2be2dcca3ffb58b044d9d593feea195ddab730a4ab5bb1a1273451568bedd0f6d589d1b9b6f45fa921f14da85d344238f877f3f4d554c2b8372ceab7fd4a43085d883c88e47ff84146afd93192798ebfcd98c82aa00c34e", 0x122}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 08:47:41 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0x0, {@in6_addr=@private1, 0x86dd}}}]}, 0x38}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) 08:47:41 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x0, 0x1}]}]}}, &(0x7f0000000380)=""/196, 0x36, 0xc4, 0xffffffff}, 0x20) [ 858.346780][T20178] usb usb3-port1: unable to enumerate USB device 08:47:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, 0x0) 08:47:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x13, 0x8, 0x20, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x40) 08:47:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) 08:47:41 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:47:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) [ 859.336666][T18578] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 859.538486][T18578] usb 3-1: device descriptor read/64, error 18 [ 859.806648][T18578] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 860.008071][T18578] usb 3-1: device descriptor read/64, error 18 [ 860.136660][T18578] usb usb3-port1: attempt power cycle [ 860.856590][T18578] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 861.026837][T18578] usb 3-1: device descriptor read/8, error -61 08:47:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) 08:47:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x131}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 08:47:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:47:44 executing program 4: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = open(&(0x7f0000000280)='./file0\x00', 0x1213fc, 0x0) flock(r3, 0x1) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) dup2(r3, 0xffffffffffffffff) [ 861.296566][T18578] usb 3-1: new high-speed USB device number 21 using dummy_hcd 08:47:44 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06fea28e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62ff8b6f0d5f8ac79417a2f443a1b71e227c9a13ba254aed523657b17fd54fce619251a959992d648cdf085268c79df67f66cf5db9fb7617917c1eb20651fba15c3dda3250d212284e0f818a4efe5e2be2dcca3ffb58b044d9d593feea195ddab730a4ab5bb1a1273451568bedd0f6d589d1b9b6f45fa921f14da85d344238f877f3f4d554c2b8372ceab7fd4a43085d883c88e47ff84146afd93192798ebfcd98c82aa00c34e", 0x122}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 08:47:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) 08:47:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x43, 0x0, 0x300) 08:47:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) [ 861.461512][T22536] IPVS: ftp: loaded support on port[0] = 21 [ 861.466924][T18578] usb 3-1: device descriptor read/8, error -61 [ 861.509290][T22557] IPVS: ftp: loaded support on port[0] = 21 08:47:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x33, 0x0, 0x300) 08:47:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) [ 861.586562][T18578] usb usb3-port1: unable to enumerate USB device 08:47:45 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:47:45 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x73], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:47:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 862.316503][ T9281] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 862.506466][ T9281] usb 3-1: device descriptor read/64, error 18 [ 862.776469][ T9281] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 862.966460][ T9281] usb 3-1: device descriptor read/64, error 18 [ 863.086463][ T9281] usb usb3-port1: attempt power cycle [ 863.796400][ T9281] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 863.966823][ T9281] usb 3-1: device descriptor read/8, error -61 [ 864.236373][ T9281] usb 3-1: new high-speed USB device number 25 using dummy_hcd 08:47:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x131}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 08:47:47 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) unshare(0x40000000) 08:47:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}]}}, &(0x7f0000000380)=""/216, 0x32, 0xd8, 0x1}, 0x20) 08:47:47 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x122}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 08:47:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:47:47 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x800}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40) unshare(0x40000200) [ 864.384744][T22597] IPVS: ftp: loaded support on port[0] = 21 [ 864.407508][ T9281] usb 3-1: device descriptor read/8, error -61 [ 864.449679][T22626] IPVS: ftp: loaded support on port[0] = 21 [ 864.452874][T22628] IPVS: ftp: loaded support on port[0] = 21 08:47:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000001180)="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", 0x108) 08:47:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000380)=""/196, 0x1a, 0xc4, 0x1}, 0x20) 08:47:47 executing program 4: syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) pipe(0x0) [ 864.526497][ T9281] usb usb3-port1: unable to enumerate USB device 08:47:48 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:47:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000180)=0x1, 0x4) 08:47:48 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/14, 0x20000, 0xa47e915258052228}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="0075000000000000000000000000000000000000060e0a52ee18d5a13cc50189515ab104c15710e1a5e61dcbea770fff447e4717ac"], 0x14}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x4) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x5) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r3, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0xeac, 0x18}, 0xc) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000580)={0x0, "73f8810ba6b6eaa1cd80b438c19e05a4"}) recvmsg(r8, &(0x7f0000000380)={&(0x7f0000000040)=@ethernet, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/40, 0x28}], 0x1}, 0x22) [ 865.396303][T20178] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 865.616355][T20178] usb 3-1: device descriptor read/64, error 18 [ 865.906265][T20178] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 866.096402][T20178] usb 3-1: device descriptor read/64, error 18 [ 866.216261][T20178] usb usb3-port1: attempt power cycle [ 866.926229][T20178] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 867.126225][T20178] usb 3-1: device descriptor read/8, error -61 08:47:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)) 08:47:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x131}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 08:47:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:47:50 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x122}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 08:47:50 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 08:47:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000), 0x8) [ 867.404549][T22711] binder: 22705:22711 ioctl c018620c 20000080 returned -1 [ 867.413243][T20178] usb 3-1: new high-speed USB device number 29 using dummy_hcd 08:47:50 executing program 4: shmget(0x3, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 08:47:50 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000080)) 08:47:50 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fa], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 867.596476][T20178] usb 3-1: device descriptor read/8, error -61 [ 867.716201][T20178] usb usb3-port1: unable to enumerate USB device 08:47:51 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:47:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae45, 0x0) 08:47:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4020ae46, &(0x7f0000000000)) 08:47:51 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40005504, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)) [ 868.366128][T18800] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 868.556103][T18800] usb 3-1: device descriptor read/64, error 18 [ 868.826095][T18800] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 869.016111][T18800] usb 3-1: device descriptor read/64, error 18 [ 869.136155][T18800] usb usb3-port1: attempt power cycle [ 869.846059][T18800] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 870.047605][T18800] usb 3-1: device descriptor read/8, error -61 [ 870.316014][T18800] usb 3-1: new high-speed USB device number 33 using dummy_hcd 08:47:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x131}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 08:47:53 executing program 1: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 08:47:53 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06fea28e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62ff8b6f0d5f8ac79417a2f443a1b71e227c9a13ba254aed523657b17fd54fce619251a959992d648cdf085268c79df67f66cf5db9fb7617917c1eb20651fba15c3dda3250d212284e0f818a4efe5e2be2dcca3ffb58b044d9d593feea195ddab730a4ab5bb1a1273451568bedd0f6d589d1b9b6f45fa921f14da85d344238f877f3f4d554c2b8372ceab7fd4a43085d883c88e47ff84146afd93192798ebfcd98c82aa00c34e", 0x122}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 08:47:53 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ff7000/0x3000)=nil, 0x5000) clone(0x0, 0x0, 0x0, 0x0, 0x0) 08:47:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:47:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4010ae42, &(0x7f0000000000)) 08:47:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20004000) 08:47:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20044000) [ 870.486148][T18800] usb 3-1: device descriptor read/8, error -61 [ 870.606026][T18800] usb usb3-port1: unable to enumerate USB device 08:47:54 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:47:54 executing program 4: process_vm_readv(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000029c0), 0x0, 0x0) 08:47:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x24040814) 08:47:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) [ 871.435949][T20178] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 871.646034][T20178] usb 3-1: device descriptor read/64, error 18 [ 871.925920][T20178] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 872.135888][T20178] usb 3-1: device descriptor read/64, error 18 [ 872.266127][T20178] usb usb3-port1: attempt power cycle [ 872.985873][T20178] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 873.205858][T20178] usb 3-1: device descriptor read/8, error -61 08:47:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x131}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 08:47:56 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) 08:47:56 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x122}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 08:47:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 08:47:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:47:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4008010) 08:47:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 08:47:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x800) [ 873.495801][T20178] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 873.715840][T20178] usb 3-1: device descriptor read/8, error -61 [ 873.845816][T20178] usb usb3-port1: unable to enumerate USB device 08:47:57 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:47:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 08:47:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={0x0}}, 0x20000000) 08:47:57 executing program 4: r0 = getpgrp(0xffffffffffffffff) prlimit64(r0, 0x2, &(0x7f0000000040), &(0x7f0000000080)) [ 874.445770][T20178] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 874.725776][T20178] usb 3-1: Using ep0 maxpacket: 16 [ 874.866115][T20178] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.876243][T20178] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 874.976192][T20178] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 874.985349][T20178] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 874.993813][T20178] usb 3-1: Manufacturer: syz [ 874.999173][T20178] usb 3-1: config 0 descriptor?? 08:47:59 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) 08:47:59 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x131}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 08:47:59 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x122}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 08:47:59 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, 0x0, 0x0) 08:47:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:47:59 executing program 1: socket$inet6(0xa, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) get_mempolicy(0x0, &(0x7f00000002c0), 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad403e850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_es_insert_delayed_block\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x19404, 0x5) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000300)) 08:47:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001300)=ANY=[@ANYBLOB="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"/2007], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x37cb1133) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x6, 0x6a, 0x7, 0x7fffffff}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0xc004000) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) 08:47:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) 08:48:00 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000440)="7800000018001f05b9409b0dffff00000212be0202000605040003004300040003000000fac8388827a685a168d0bf46d32345653600648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000000000000400160012000a000000000000000000000000f6b4f8eca0faed", 0x78, 0x0, 0x0, 0x0) 08:48:00 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 08:48:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x5437, 0x0) [ 876.993361][T18800] usb 3-1: USB disconnect, device number 38 08:48:00 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$SIOCSIFHWADDR(r0, 0x40305828, 0x0) [ 877.044956][T22898] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 877.445612][T18800] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 877.705578][T18800] usb 3-1: Using ep0 maxpacket: 16 [ 877.835584][T18800] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.847037][T18800] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 877.966040][T18800] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 877.975367][T18800] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 877.983484][T18800] usb 3-1: Manufacturer: syz [ 877.988736][T18800] usb 3-1: config 0 descriptor?? 08:48:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x131}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 08:48:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x122}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 08:48:02 executing program 1: mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee01}}) 08:48:02 executing program 4: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)="e6", 0x1, 0xfffffffffffffffe) 08:48:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:48:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000440)="7800000018001f02b9409b0dffff00000212be0402000605040003004300040003000000fac8388827a685a168d0bf46d32345653600648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000000000000400160012000a000000000000000000000000f6b4f8eca0faed", 0x78, 0x0, 0x0, 0x0) 08:48:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b32, 0x0) [ 879.601567][T22930] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 08:48:03 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000440)="7800000018001f02b9409b0dffff00000212be0402000605040003004300040003000000fac8388827a685a168d0bf46d32345653600648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000000000000400160012000a000000000000000000000000f6b4f8eca0faed", 0x78, 0x0, 0x0, 0x0) 08:48:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 08:48:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000440)="7800000018001f02b9409b0dffff00000212be0402000605040003004300040003000000fac8388827a685a168d0bf46d32345653600648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000000000000400160012000a000000000000000000000000f6b4f8eca0faed", 0x78, 0x0, 0x0, 0x0) [ 880.027103][ T9281] usb 3-1: USB disconnect, device number 39 [ 880.055989][T22942] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 08:48:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000440)="7800000018001f02b9409b0dffff00000212be0402000605040003004300040003000000fac8388827a685a168d0bf46d32345653600648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000000000000400160012000a000000000000000000000000f6b4f8eca0faed", 0x78, 0x0, 0x0, 0x0) [ 880.132428][T22951] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 880.218724][T22960] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 880.425412][ T9281] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 880.665405][ T9281] usb 3-1: Using ep0 maxpacket: 16 [ 880.785754][ T9281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.797263][ T9281] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 880.885714][ T9281] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 880.894948][ T9281] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 880.903254][ T9281] usb 3-1: Manufacturer: syz [ 880.909951][ T9281] usb 3-1: config 0 descriptor?? 08:48:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x131}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 08:48:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x131}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 08:48:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 08:48:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 08:48:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:48:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) 08:48:05 executing program 3: io_setup(0xcbbd, &(0x7f00000002c0)) 08:48:06 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:06 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x3, &(0x7f0000000c40)=[{&(0x7f0000000a00)='\'', 0x1}, {&(0x7f0000000b00)='1', 0x1}, {&(0x7f0000000bc0)='H', 0x1}], 0x0, 0x0) 08:48:06 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x80200, 0x0) 08:48:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000000500)) 08:48:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000980)='vfat\x00', &(0x7f00000009c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000c40), 0x0, &(0x7f0000000cc0)={[{@shortname_winnt='shortname=winnt'}], [{@fowner_eq={'fowner'}}]}) [ 883.063062][T20178] usb 3-1: USB disconnect, device number 40 08:48:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000056c0)) [ 883.465244][T20178] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 883.705224][T20178] usb 3-1: Using ep0 maxpacket: 16 [ 883.825230][T20178] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.835572][T20178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 883.847215][T20178] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 883.935299][T20178] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 883.944394][T20178] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 883.955876][T20178] usb 3-1: Manufacturer: syz [ 883.962358][T20178] usb 3-1: config 0 descriptor?? 08:48:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x131}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 08:48:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000005500), 0x0, 0x0, &(0x7f00000056c0)) 08:48:08 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000080c0)='/dev/zero\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x16) 08:48:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:48:08 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000080c0)='/dev/zero\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x16) 08:48:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f00000056c0)) 08:48:09 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:09 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000080c0)='/dev/zero\x00', 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x16) 08:48:09 executing program 1: pipe(&(0x7f0000002540)={0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 08:48:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000001080)=@abs, 0x6e) [ 886.103769][T20178] usb 3-1: USB disconnect, device number 41 08:48:09 executing program 1: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x81031, r0, 0x0) 08:48:09 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KDSKBENT(r0, 0x4b47, 0x0) [ 886.535033][T20178] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 886.775032][T20178] usb 3-1: Using ep0 maxpacket: 16 [ 886.895692][T20178] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.905860][T20178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 886.917190][T20178] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 887.006559][T20178] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 887.015638][T20178] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 887.023736][T20178] usb 3-1: Manufacturer: syz [ 887.031352][T20178] usb 3-1: config 0 descriptor?? 08:48:11 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x131}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 08:48:11 executing program 3: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x3) 08:48:11 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x608c2, 0x4) 08:48:11 executing program 4: openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0xc4180, 0x0) 08:48:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:48:11 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x55d943557c124dcc, 0x0) 08:48:12 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:12 executing program 3: open$dir(&(0x7f0000000140)='./file0\x00', 0x488c2, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='user.incfs.size\x00', 0x0, 0x0, 0x1) 08:48:12 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x44307, 0x0) 08:48:12 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) [ 889.141644][T18578] usb 3-1: USB disconnect, device number 42 08:48:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000080), 0x0, 0x81, &(0x7f0000001080)=@abs, 0x6e) 08:48:12 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={[{@session={'session'}}]}) [ 889.251768][T23102] ISOFS: Unable to identify CD-ROM format. [ 889.312612][T23102] ISOFS: Unable to identify CD-ROM format. [ 889.554887][T18578] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 889.794866][T18578] usb 3-1: Using ep0 maxpacket: 16 [ 889.915133][T18578] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.925361][T18578] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 889.936116][T18578] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 890.025206][T18578] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 890.034242][T18578] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 890.042553][T18578] usb 3-1: Manufacturer: syz [ 890.049279][T18578] usb 3-1: config 0 descriptor?? 08:48:14 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x131}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 08:48:14 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x20000, 0x0) 08:48:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), &(0x7f00000004c0)=0x10) 08:48:14 executing program 4: pipe(&(0x7f0000002540)={0xffffffffffffffff}) fchownat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0xee01, 0x0) 08:48:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:48:14 executing program 3: pipe(&(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_STATFS(r0, 0x0, 0x0) 08:48:15 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:15 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x488c2, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U-'}, 0x16, 0x1) 08:48:15 executing program 1: socketpair(0x2, 0x2, 0x11, &(0x7f0000000140)) 08:48:15 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) 08:48:15 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x10, 0x1, 0x2}], 0x10}, 0x0) [ 892.172161][ T35] usb 3-1: USB disconnect, device number 43 08:48:15 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x12, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000006110a4000000000073013500000000009500000000000000f1dd3582e4f5b72a16768b3bd9d948e7ab9a7d2125889528ea2e854de432a51acfcb2daa108c309d95944a55718228ca0df25ba4a944e7b6bedc7ea2c37ff2881ad9ee97c3ca7cb5070b027ada2cbdfe167751fd78d74da318b8baa5c2e530ee51951b6028fb745b1db82bb5613616f435f3f379f9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x6, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000e7ffffff851000000300000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000095000000000000009500003f000000000000005300094d5e3690e9a652125c3512eda0ba6704cc8cda606cc86a07f964db1b8a9a3f39d206f4620cb4619b39124d883d35dfefbee97fc2a674f09682e07f13f3f4c81b34a7d24fc5d11f61cb2a00a19725dd58261e073b54240fb89b45be230bbdf94705bcfdd9186505cea1e18796189aa78edd6013b20c285456896dc9c7050516cabe1a43d771aba031a0a987be19f2059bdf45df9ab1945e6f42ce3e65d59ed4a0ff0d92b794a0dd43574dd0fc030050b3bab17faf5bd5f0a1362ee1d42f07a2859004b47e9bacc7fcb27dbfc52435f3aaef8b0000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) [ 892.604672][ T35] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 892.884674][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 893.034928][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.045049][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 893.057621][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 893.164731][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 893.173782][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 893.183898][ T35] usb 3-1: Manufacturer: syz [ 893.189474][ T35] usb 3-1: config 0 descriptor?? 08:48:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:48:17 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, &(0x7f00000000c0)=""/193, 0x32, 0xc1, 0x1}, 0x20) 08:48:17 executing program 4: r0 = perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x541b, 0x0) 08:48:17 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x202201, 0x0) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x110, r0, 0x3) sendmsg$IPVS_CMD_SET_SERVICE(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 08:48:17 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x141180, 0x0) 08:48:17 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x2, 0x400, 0x8}, 0x40) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x1c) 08:48:18 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:18 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x4018920a, &(0x7f0000000100)={0x0}) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) 08:48:18 executing program 4: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000180)='syzkaller\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) 08:48:18 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x9, 0x1, 0x3, 0x0, 0x2, 0x3ff}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_setup(0x5, &(0x7f0000006880)=0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r2, 0x1, &(0x7f00000012c0)=[&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000011c0)="af", 0x1}]) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4008000) io_destroy(r2) write$cgroup_freezer_state(r4, &(0x7f0000000000)='FROZEN\x00', 0x7) 08:48:18 executing program 0: syz_emit_ethernet(0x52, &(0x7f00000001c0)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "279936", 0x18, 0x11, 0x0, @local, @local, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) [ 895.210531][ T9281] usb 3-1: USB disconnect, device number 44 08:48:18 executing program 0: request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) 08:48:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:48:18 executing program 4: syz_emit_ethernet(0x52, &(0x7f00000001c0)={@broadcast, @broadcast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "279936", 0x18, 0x2f, 0x0, @local, @local, {[], {0x0, 0x883e, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 08:48:18 executing program 0: syz_emit_ethernet(0x52, &(0x7f00000001c0)={@broadcast, @broadcast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "279936", 0x18, 0x2f, 0x0, @local, @local, {[], {0x0, 0x6558, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 08:48:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) recvmmsg(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x40000040, 0x0) 08:48:18 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0x2020) 08:48:18 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000440)={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "9b09ff", 0x0, 0x2f, 0x0, @local, @local, {[@hopopts={0x0, 0x0, [], [@pad1, @pad1, @generic={0x0, 0x0, "2145cfafbab68bdfdff32f9831e2619fc2c565b3fddfcc604645d893f4fbceb46ba199caeca52df0666de96b7a0105e2cfbeb12e56c18e82858adad9e167b648e15d1fa40b40d7e67e6df14bf840afb7a659fc3f77172ecaeec8bc97ddb66b3590beaf699040f553d679a8ba7be7c61c7e90d44f541f340ee07a5e3b13adba726e50ceb6b393f869e1db08d26ba1b8f131b7175573e0e4478669682e27d03aa2c7ea3d1acada9a1978df5ee040c4719f0df0e9fbf7f5e0d2dcf6a7f1ab5c"}]}, @srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, [@remote, @private1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @private0, @empty, @dev]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {[@window]}}, {"52fec150e9278d25c9036afb4f3c3cf3457b5bd5b5f17e0947bf75719b7f0b3cd23a792d41fae2857fe1badfaa74d68a91cd2d24147fd61b2f7bb30bb8a43a8df3c8d5ca797bebfb583327a9acd73e24a51530155813359c62fd265757a9718e545a6c99ca74bdb34317c4a171c5f1ebd91f4d550cf371bedd24dfd7aa6cfc2e92"}}}}}}}, 0x0) [ 895.541850][T23218] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x2 [ 895.562752][T23218] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x2 [ 895.614502][ T9281] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 895.854501][ T9281] usb 3-1: Using ep0 maxpacket: 16 [ 895.974512][ T9281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.974538][ T9281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 895.974564][ T9281] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 896.084846][ T9281] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 896.094292][ T9281] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 896.103746][ T9281] usb 3-1: Manufacturer: syz [ 896.110299][ T9281] usb 3-1: config 0 descriptor?? 08:48:21 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:21 executing program 4: syz_emit_ethernet(0x52, &(0x7f00000001c0)={@broadcast, @broadcast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "279936", 0x18, 0x2f, 0x0, @local, @local, {[], {0x0, 0x883e, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 08:48:21 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:48:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x4020940d, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 08:48:21 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000440)={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "9b09ff", 0x4c, 0x2c, 0x0, @local={0xfe, 0x80, [0x3]}, @local, {[@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@remote, @private1, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:48:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) [ 898.242960][T20178] usb 3-1: USB disconnect, device number 45 08:48:21 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)) 08:48:21 executing program 3: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffe02) 08:48:21 executing program 4: syz_emit_ethernet(0x62, &(0x7f0000000440)={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "9b09ff", 0x28, 0x29, 0x0, @local, @local, {[@hopopts={0x0, 0x0, [], [@pad1]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 08:48:21 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000440)={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "9b09ff", 0x2c, 0x3c, 0x0, @local, @local, {[@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@private1]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 898.295344][T23250] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x2 08:48:21 executing program 1: syz_emit_ethernet(0x78, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "279936", 0x42, 0x11, 0x0, @local, @local, {[], {0x0, 0x0, 0x42, 0x0, @wg=@data={0x4, 0x0, 0x0, "80081ca44e1a54fb196f5ee2b25aa9022abd8e7ba9fb39a0016e53f80297f3fcc10c44b700317c8d159b"}}}}}}}, 0x0) 08:48:21 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "812904", 0x8, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) [ 898.694551][T20178] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 898.954439][T20178] usb 3-1: Using ep0 maxpacket: 16 [ 899.104328][T20178] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.114457][T20178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 899.127129][T20178] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 899.234525][T20178] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 899.243783][T20178] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 899.253387][T20178] usb 3-1: Manufacturer: syz [ 899.258878][T20178] usb 3-1: config 0 descriptor?? 08:48:24 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:24 executing program 4: syz_emit_ethernet(0x52, &(0x7f00000001c0)={@broadcast, @broadcast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "279936", 0x18, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 08:48:24 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x16}]}) 08:48:24 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x56, 0x0, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x7, 0x0, 0x8}}}}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 08:48:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:48:24 executing program 3: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffe02) [ 901.292602][T18578] usb 3-1: USB disconnect, device number 46 08:48:24 executing program 4: syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @broadcast, @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @remote}}}}, 0x0) [ 901.335934][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 901.335945][ T36] audit: type=1326 audit(1608713304.475:44): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23285 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 08:48:24 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9804, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x402, 0xdb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:48:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x25, &(0x7f00000000c0), 0x4) 08:48:24 executing program 4: syz_emit_ethernet(0x55, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "279936", 0x1f, 0x2f, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[], {0x2000, 0x0, 0x1f, 0x0, @wg=@data={0x4, 0x0, 0x0, "0fbc9df8f7f89f"}}}}}}}, 0x0) 08:48:24 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0xa6f}) 08:48:24 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0xa6f}) [ 901.615455][ T9281] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 901.724149][T18578] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 901.874124][ T9281] usb 1-1: Using ep0 maxpacket: 32 [ 901.994592][ T9281] usb 1-1: config 1 interface 0 altsetting 86 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 902.007791][T18578] usb 3-1: Using ep0 maxpacket: 16 [ 902.015701][ T9281] usb 1-1: config 1 interface 0 has no altsetting 0 [ 902.124994][ T36] audit: type=1326 audit(1608713305.275:45): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23285 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 902.145442][T18578] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.179999][T18578] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 902.201872][T18578] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 902.314594][T18578] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 902.323773][T18578] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 902.332664][T18578] usb 3-1: Manufacturer: syz [ 902.339996][T18578] usb 3-1: config 0 descriptor?? [ 902.387250][ T9281] usb 1-1: string descriptor 0 read error: -22 [ 902.393443][ T9281] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 902.404231][ T9281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.656082][ T9281] usb 1-1: USB disconnect, device number 10 [ 903.424040][T13420] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 903.694032][T13420] usb 1-1: Using ep0 maxpacket: 32 [ 903.824278][T13420] usb 1-1: config 1 interface 0 altsetting 86 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 903.837303][T13420] usb 1-1: config 1 interface 0 has no altsetting 0 [ 904.124280][T13420] usb 1-1: string descriptor 0 read error: -22 [ 904.130504][T13420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 904.141297][T13420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.318405][T18578] usb 1-1: USB disconnect, device number 11 08:48:27 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:27 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0xa6f}) 08:48:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:48:27 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r1) 08:48:27 executing program 3: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffe02) 08:48:27 executing program 0: pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWALK(r0, 0x0, 0x0) [ 904.361801][ T9281] usb 3-1: USB disconnect, device number 47 08:48:27 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RWALK(r1, 0x0, 0x57) 08:48:27 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0xa6f}) 08:48:27 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup3(r1, r0, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) 08:48:27 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2a440, 0xa4) 08:48:27 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) dup3(r1, r0, 0x0) 08:48:27 executing program 0: socketpair(0x1d, 0x2, 0x7, &(0x7f0000000280)) [ 904.793970][ T9281] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 905.033974][ T9281] usb 3-1: Using ep0 maxpacket: 16 [ 905.154437][ T9281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.166182][ T9281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 905.179691][ T9281] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 905.283955][ T9281] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 905.283981][ T9281] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 905.283999][ T9281] usb 3-1: Manufacturer: syz [ 905.307642][ T9281] usb 3-1: config 0 descriptor?? 08:48:30 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:30 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@alg={0xe8, 0x10, 0x1, 0x0, 0x0, {{'sha1-ni\x00'}}, [{0x8}]}, 0xe8}}, 0x0) 08:48:30 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={0x0}, 0x10) socketpair(0xf, 0x0, 0x0, &(0x7f0000000280)) 08:48:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x22, 0x0, &(0x7f0000000a80)) 08:48:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580), 0x0, 0x0) 08:48:30 executing program 3: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffe02) [ 907.404897][T13420] usb 3-1: USB disconnect, device number 48 08:48:30 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x20) 08:48:30 executing program 4: pipe(&(0x7f0000000000)) socketpair(0x1a, 0x0, 0x0, &(0x7f0000001140)) 08:48:30 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x925, 0x8888, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000001580)=@string={0x2}}, {0x2, &(0x7f0000001640)=@string={0x2}}]}) 08:48:30 executing program 1: syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x2940) 08:48:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf241, 0x210200) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/56) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1000, 0x8000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x6) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000100)={0x1ff, 0x4, 0x9, 0x4, 0x3f, 0x80000001}) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000140)=""/44) syz_usb_ep_write(0xffffffffffffffff, 0x1, 0xea, &(0x7f0000000180)="ee61039aba8b8ad9b3c3c48ab076ac3aab19ddcd79a16be4c64c1a4a0b2004ff68d856a24fae01ef1b3b709d497efa713d2049312fd3b7000b99775ac88c1be63d38ca5b36fb2017c170467fb78266b967c0673b1d205d737295718fffc19048e3c4104ff32a0eebb05970de2c76dc5b8ab5c0fbbf94b04291e5e38a4f71742098d567a5bd27172473b9a5f3575e40979092965e78bee177de43c9594006a707b49c64f12fd49b5745a4b6cd6de99650fa3c01b0d6d50f05c6726d26849580bbba6e99a0d14f090c583111eaad8688bd831435d1b1339a21b39c997a089ab9d457156dda721f3fc6a393") syz_usb_connect$cdc_ecm(0x3, 0x12f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0xc1, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x45, 0x2, 0x2, 0x6, 0x0, 0x3f, {{0x9, 0x24, 0x6, 0x0, 0x0, "516a9843"}, {0x5, 0x24, 0x0, 0xa3d6}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x20, 0x6, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x4, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x20, 0x7, 0xff}, @ncm={0x6, 0x24, 0x1a, 0x1, 0xc}, @mdlm_detail={0xc2, 0x24, 0x13, 0x80, "7571612c5b77cddf8d9ab4e728110e1b6e6ab321c2bfaf149e7fbf4c4edef11cc2c04f1951ac009f4f2390fb30d186f58e903831ca5e32e1a876ac6cc40baca9eb84b9a0d4a6dbc280def92a24ff6dc96fbbb5fbec88cf7f92c34c7a55fb37a6e138e7da34dd3b27664f3a186655e5e5292b1d9b785f825c7797b11115ad81d1565f79e01fecd8170f9490b30d0a633e78f05f9a16232b87280ac1492278ef924da73e37a3e6a91ee5374e1f702e71a5bc307c3a9d421bc990596e672589"}, @mbim_extended={0x8, 0x24, 0x1c, 0x2c3, 0x20, 0x400}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x1, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2c, 0xfa, 0x5d}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x3f, 0x20, 0x8, 0x20, 0x1f}, 0x1d0, &(0x7f0000000400)={0x5, 0xf, 0x1d0, 0x4, [@generic={0xe7, 0x10, 0x4, "2d39e21dc28ce71e909e10b4d9def5e2d6e9b99f23e123ce110e1e5208f77acca7687f35fb31ba8a6611f1531ac3f966128796d2da6fa52dc2d6f103e30be791961ea0195fb878a694676cf741cc02bad615fdc774e11d154fc9612d010c51af31a82c6f7ea69159fe9ca4154b6e7ca40410c7f96cf347351534ae927fcd37aec144814160ea3f7f232680f12376869b4c18db7043dd3145524e4843cd27c86e321e95798e5aa8ef7d3b7da34e0d100d5e2bddbae7ab7bd13db32d56935673b6867a91775880d345ce967d421979b73b5ecbbd1dd1a4475512afb239cb60af2942fb976c"}, @ss_container_id={0x14, 0x10, 0x4, 0x56, "202a8daff51e51602d22afb737822fc0"}, @generic={0xc6, 0x10, 0x3, "f3e922db85254f60e8284f58cfb8e2a7c3aa0d6f365c761d866a662e842e5bb6fc7152b89e58f63b964119c9ac9173fe991801c5d87b2bd114d57d3bb895991fb9cb42953d51c1fd0454566eb96b0cb817f6b7f868271353f849674d2e91d314ffbdc576cef20cb8fa9ab661cc43248253d9dd95cf394adb4613bfc5c3e5f4c2c7c8d88028e87a05dd8ff92b5b763d2666e573609857785c6bc4783576e9a25f8dbde9ff59587ba89ac4919775987a32c0fe11cc31b158714e854f8a78d00bd702f947"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x6, 0x9, 0x1000}]}, 0x4, [{0x2d, &(0x7f0000000600)=@string={0x2d, 0x3, "4293f2a3e4f341f3a3b0e7ab2e1a9c3d43afc7f76805158fab2ce8756343c325967f03da3aadde5a83a01c"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1407}}, {0xd4, &(0x7f0000000680)=@string={0xd4, 0x3, "f7636cf903281f938cd35b7e2db0e28a422ae58763264032b861fcdc073b663f07059cc89f4e84ec280ef160072a3d37733046522a48b6066bd1461df529e102067010b5a1250ddc177ec56cd9606319ec5dfdfdafe964ca30b09232b1eeceaa92a0338a22859db9dc6434d00c9bfc30138a14efe4bace526ba26459333280c23faa5706b8af571e160166a92ada42f100151c2ad3315ca227179f2efc765f4d49f76c1840ed37a7daf344b1b9074a847019b35abd4d18acf6081338e33875d2ff8cd5ec59115f2eaeec4128c3d5914a4ed2"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x458}}]}) r2 = syz_open_dev$evdev(&(0x7f0000000840)='/dev/input/event#\x00', 0xfe, 0x4000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000880)={0x0, 0x19, 0x1, 0x246, "7506adfafe0e0f484d3f839c552e7f09179f583d917f617c45b585d5f86a3a90"}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000018c0)={0x1, 0x1000, &(0x7f00000008c0)="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"}) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000001900)={0x6, 0x200, 0x5, 0x1}) syz_usb_connect$cdc_ecm(0x0, 0x6f, &(0x7f0000001940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x3, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x3f, 0x2, 0x2, 0x6, 0x0, 0x8, {{0xa, 0x24, 0x6, 0x0, 0x0, "ebee5c8384"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0xfff, 0x7f}, [@country_functional={0x8, 0x24, 0x7, 0x9, 0x3, [0x8]}, @mdlm={0x15, 0x24, 0x12, 0x1ff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xd1, 0x3, 0x50}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xce, 0x0, 0x80}}}}}]}}]}}, &(0x7f0000001f40)={0xa, &(0x7f00000019c0)={0xa, 0x6, 0x110, 0x8, 0x3, 0xff, 0x20, 0x3d}, 0x168, &(0x7f0000001a00)={0x5, 0xf, 0x168, 0x5, [@generic={0x8f, 0x10, 0xa, "f98203b289c6a48a368ff73bf2d28117d1c470be5be12d63f23974cda9992237a11c8492771de74ba35aa746e0fbdbff458e689428f4b3ae61efa3fa318879bf4f7a0b9fdb586b908cc4c8a4bba1a6e9a9a3343db2179c54ae978230fa099b5c80499c2ba68d8cf805b9f2960dd766d2cd7e4fe636de00744f2b416fbe5cddc02f45af70bde36aaee00fb9e4"}, @generic={0xba, 0x10, 0x4, "81d11085feb81055d6df824cc69c2e3c2a4701da2c698918d086e29343538e16f0c2ccfe25f40e3765e0817f110d3a31c5cef77db8aa5fe8ef0d513540febac90600f4deccf964a1d942e315d0cd405631f56fd0a00b046749aed69e6bf8ff8e443735f0fcf61317892e79aaa9ee75ad56838c940b8aead06f11609f886df764e53625c74a29828826420c22c0d277292fca2a136a6f529870cb9ee477ece2145047664e0aeb84d3593c9b9387ec7577cbefd6457fdcfc"}, @generic={0x8, 0x10, 0x2, "1151f6a737"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x81, 0x81, 0x1a2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x1, 0x3}]}, 0x4, [{0xc1, &(0x7f0000001b80)=@string={0xc1, 0x3, "d45e0a6cfa07e0bed3d576c321e6887dd914546a544e86f926c2630563d0fe5d9e72c5d940f5a1d9619bbab43370a9e802db6dbdc40fc0b7e43c8e9079de4feab867daf9b23bab787005cb1b8765886bbebf97e97af50c20c30fa19d79501a87cc22f00a778aea3b15704ba08b598c0a049c13f88fe6ab01dc11a45135962582e7bded31f0a69dc3bd4e41a0614ecc5ac6a5d6d84aa341672bb12a5177d9f0f7914c4b8e6f3d38a687a27bb679f05c85d7f581ddc6df085208c2eb76b188a7"}}, {0xc9, &(0x7f0000001c80)=@string={0xc9, 0x3, "9f9480bc9b6f58ce188510df0a2a630e17a70ada5710dac5af204d0cac2725a4b550294948bed1886175f92b8e073d7373cb70f14832f338cb3b75979428158eee1c542dc72f3e585f5bf0a82760561026ec9ded9539a8444271ccbe5bd989a39695be44560483934b1341bb410920a6e9f9d9e63eb9a692a114972bb913606b76d56596966788542ca81b7a31b94206633b547bff52980f6f157b782e8abdbdde892d7201448fb2aab481e056c3a0a8b5d673d94867a68b9f4622930af97adff1f3888444c027"}}, {0xa3, &(0x7f0000001d80)=@string={0xa3, 0x3, "78568d8e3cf50ee77294edac9961dd1091fc96d3ce5dbbca96a55bd340ed86477a1de15718590ea7b8e8420324715541bcfdbdcb0649682e9414e4ab4828b1d7e074d40182f12df0883a53d0bbfa99612770796df99b7b6416f3a361b1259818fc836ca480b1d523ed06b6be325d874a22363f2640d202b1c5ed1e0a2184a408cab48e3541011fa14ff52b3ed6c74834c0921d56d52049d2c8155a60fc27284036"}}, {0xcf, &(0x7f0000001e40)=@string={0xcf, 0x3, "55035690ebeced9b49dd6828b823721fa065efcee1adca869024eb9a69fa8fa994f9786d7d481a2d42efd83c263c0e43f927517616baf5f792548d82f4110c64835334654af283a81120531c9de09e57b0d475021bd9fc492e256f77b63eefb1aa6dc1d250a0536f60a4be52503fcae86d7eed3eaf741121cd9bd029e511c9db7e7ed93742d5235b7553696b2858e1029423180489cd5db17c5aded0f54db2b14b4440386619416dab9894cda5c4a71fb5eb3ec9dbb41e87555f07fe48c3113a02a61541441b3ba21d2a654811"}}]}) syz_usb_connect$uac1(0x4, 0xf2, &(0x7f0000001fc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x9, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x20}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x100, 0x3, 0x0, 0x0, 0x8, 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x200, 0x6, 0x7, 0x8, 0x5c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x3, 0x3}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x8, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x66, 0x1, 0x0, 0x81, "ec89"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x400, 0x8001, 0x4, ';6'}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8000, 0x2, 0x8, '+vt'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x6, 0x3, 0x7, 0x20, "36f05f1045086ce2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0xf7, 0x2, {0x7, 0x25, 0x1, 0x2, 0x7f, 0x3f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x7, 0x1001}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xfb, 0x1, 0x1, 0x4, 'G', '6j'}, @as_header={0x7, 0x24, 0x1, 0x1f, 0x6, 0x1001}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x400, 0x6, 0x40, "4fa2cc7be29735a5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x4a, 0x8, {0x7, 0x25, 0x1, 0x3, 0x8c}}}}}}}]}}, &(0x7f0000002140)={0xa, &(0x7f00000020c0)={0xa, 0x6, 0x300, 0x1, 0x35, 0x1f, 0xff, 0xcf}, 0x1e, &(0x7f0000002100)={0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0xec, 0x4, 0xfa, 0x3, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x0, 0xbc, 0x7ff, 0xff}, @ptm_cap={0x3}]}}) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000002400)=""/4096) read$char_usb(0xffffffffffffffff, &(0x7f0000003400)=""/160, 0xa0) r3 = syz_open_dev$evdev(&(0x7f00000034c0)='/dev/input/event#\x00', 0x40, 0x10000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000003500)=0x6) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000003540)=""/206) 08:48:30 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) [ 907.803778][T18800] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 907.843766][T13420] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 907.873759][ T9281] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 907.923790][T18578] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 908.043750][T18800] usb 1-1: Using ep0 maxpacket: 32 [ 908.083888][T13420] usb 3-1: Using ep0 maxpacket: 16 [ 908.123829][ T9281] usb 5-1: Using ep0 maxpacket: 16 [ 908.163767][T18800] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 908.176889][T18578] usb 2-1: Using ep0 maxpacket: 16 [ 908.214839][T18800] usb 1-1: language id specifier not provided by device, defaulting to English [ 908.234175][T13420] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.245675][T13420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 908.253798][ T9281] usb 5-1: config 1 interface 0 altsetting 69 bulk endpoint 0x82 has invalid maxpacket 1023 [ 908.258961][T13420] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 908.288504][ T9281] usb 5-1: config 1 interface 0 altsetting 69 bulk endpoint 0x3 has invalid maxpacket 1023 [ 908.303954][T18578] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 908.319249][ T9281] usb 5-1: config 1 interface 0 has no altsetting 0 [ 908.353801][T18800] usb 1-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.40 [ 908.364695][T18800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.372763][T18800] usb 1-1: Product: syz [ 908.377182][T18800] usb 1-1: SerialNumber: syz [ 908.383761][T13420] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 908.392811][T13420] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 908.402074][T13420] usb 3-1: Manufacturer: syz [ 908.407984][T13420] usb 3-1: config 0 descriptor?? [ 908.415949][T18800] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 908.483967][T18578] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 908.493132][ T9281] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 908.502186][ T9281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.512491][T18578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.521474][ T9281] usb 5-1: Product: æ·ï¥¬â ƒéŒŸíŽŒç¹›ë€­è«¢â©‚蟥♣㉀憸㬇㽦ԇ좜亟ศ惱⨇㜽ã³å‰†ä ªÚ¶í…«áµ†â§µË¡ç€†ë”□縗泅惙ᥣ巬﷽쩤뀰㊒꫎ꂒ訳蔢ë¦æ“œí€´é¬Œãƒ¼è¨“뫤勎ꉫ奤㈳슀꨿ٗ꾸ṗĖꥦᔀ⨜㇓ꉜᜧ⺟盼䵟ï‰á¡¬îµ€êœ·ïšë…„޹葊ᥰ媳䶽갘ࣶ㠓㣣퉵賿ᅙ⹟â¡í—ƒäª‘퉎 [ 908.552899][T18578] usb 2-1: Product: syz [ 908.557932][T18578] usb 2-1: Manufacturer: syz [ 908.562510][T18578] usb 2-1: SerialNumber: syz [ 908.568870][ T9281] usb 5-1: Manufacturer: ᇠ[ 908.574768][ T9281] usb 5-1: SerialNumber: ј [ 908.596008][T23435] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 908.603084][T23435] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 908.614198][T18578] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 908.622125][T13420] usb 1-1: USB disconnect, device number 12 [ 908.815574][T18578] usb 2-1: USB disconnect, device number 14 [ 908.817564][T23435] udc-core: couldn't find an available UDC or it's busy [ 908.832882][T23435] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 908.933743][ T9281] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 908.942704][ T9281] usb 5-1: USB disconnect, device number 18 [ 909.352298][T23485] udc-core: couldn't find an available UDC or it's busy [ 909.359591][T23485] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 909.403719][T18765] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 909.583796][ T35] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 909.643676][T18765] usb 1-1: Using ep0 maxpacket: 32 [ 909.763954][T18765] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 909.814113][T18765] usb 1-1: language id specifier not provided by device, defaulting to English [ 909.843638][ T35] usb 2-1: Using ep0 maxpacket: 16 [ 909.934047][T18765] usb 1-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.40 [ 909.943171][T18765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.951205][T18765] usb 1-1: Product: syz [ 909.955525][T18765] usb 1-1: SerialNumber: syz [ 909.995843][T18765] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 910.013953][ T35] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 910.203813][T18765] usb 1-1: USB disconnect, device number 13 [ 910.215240][ T35] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 910.224900][ T35] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.233029][ T35] usb 2-1: Product: syz [ 910.238782][ T35] usb 2-1: Manufacturer: syz [ 910.243717][ T35] usb 2-1: SerialNumber: syz [ 910.304232][ T35] cdc_ether: probe of 2-1:1.0 failed with error -22 08:48:33 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10000000010200090502"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580), 0x0, 0x0) 08:48:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001180)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x1, 0x0, 0x8001, 0x0, "833305bc114ca9cb6cac37cd8c15801984265bc2656e83b74594dad1f28a3410"}) 08:48:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001180)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001600)=""/139) 08:48:33 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000840)={0x1f, 0x0, 0x0, 'queue1\x00', 0x8001}) [ 910.452824][ T35] usb 3-1: USB disconnect, device number 49 08:48:33 executing program 3: r0 = add_key$keyring(&(0x7f0000002280)='keyring\x00', &(0x7f00000022c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 08:48:33 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r0, 0x7ff, 0x0) 08:48:33 executing program 4: select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x2}, &(0x7f0000000180)) 08:48:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000040)=0x64a, 0x28) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 910.519051][ T9281] usb 2-1: USB disconnect, device number 15 08:48:33 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r0, 0x7ff, 0x0) 08:48:33 executing program 4: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 08:48:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={0x0, 0x48}}, 0x0) [ 910.903581][ T35] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 911.183572][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 911.323618][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.333753][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 911.346404][ T35] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 911.358007][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 911.455188][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 911.464367][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 911.472389][ T35] usb 3-1: Manufacturer: syz [ 911.481198][ T35] usb 3-1: config 0 descriptor?? 08:48:36 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10000000010200090502"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:36 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFCONF(r0, 0x8903, &(0x7f0000000100)) 08:48:36 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r0, 0x7ff, 0x0) 08:48:36 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000180)={{0x3, 0x20}, {}, 0x2}) mkdir(0x0, 0x0) 08:48:36 executing program 4: syz_mount_image$squashfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0) 08:48:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580), 0x0, 0x0) [ 913.498076][T20178] usb 3-1: USB disconnect, device number 50 08:48:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_open_procfs$namespace(0x0, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x1000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000680), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:48:36 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r0, 0x7ff, 0x0) 08:48:36 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010044) ioctl$CHAR_RAW_ROSET(r0, 0x125d, &(0x7f0000000080)=0x1) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) r2 = creat(0x0, 0x0) write$9p(r2, 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x40, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="460806516fc79189da38afaad2b48a03c34120f4360eee2d0ce4f6a10d82aac4de0646b84812635457ee1fd396bad5f859bb1665d05766385fa15e9a99b872a86b4822eb03000000000000006b5b4897577a21ff68a8b4159440f6126296d881241e805af10c6ff76fe1453337e9ac1235228820220e41cdb6d99221eefa3d8687d95d401289438917dfa35d041a562e889e89fce5c5daed3c618bbf26d780bfba9f84abfd5c2acec918bb7b277089731c1e304689d6b31b9854c9cadf3e353be40071fd44ccb9f49f49", @ANYRES16=r3, @ANYBLOB="08042cbd7000fbdbdf258600000008000300", @ANYRES32=r4, @ANYBLOB="080027000300000008009f00000000000500180139000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) [ 913.583166][ T36] audit: type=1326 audit(1608713316.726:46): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23582 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 08:48:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8993, &(0x7f0000000100)={'gre0\x00', 0x0}) 08:48:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000001300)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000001300)=@abs={0x1}, 0x6e) 08:48:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r1, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) [ 913.685371][ T36] audit: type=1804 audit(1608713316.836:47): pid=23589 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir047723143/syzkaller.OSLxnF/800/bus" dev="sda1" ino=16069 res=1 errno=0 [ 913.749864][ T36] audit: type=1804 audit(1608713316.846:48): pid=23595 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir047723143/syzkaller.OSLxnF/800/bus" dev="sda1" ino=16069 res=1 errno=0 [ 913.983406][T20178] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 914.243400][T20178] usb 3-1: Using ep0 maxpacket: 16 [ 914.383564][T20178] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.387304][ T36] audit: type=1326 audit(1608713317.536:49): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23582 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 914.394974][T20178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 914.425782][T20178] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 914.437550][T20178] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 914.534520][T20178] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 914.543945][T20178] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 914.552532][T20178] usb 3-1: Manufacturer: syz [ 914.560943][T20178] usb 3-1: config 0 descriptor?? 08:48:39 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10000000010200090502"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x3a, 0x0, &(0x7f0000000440)) 08:48:39 executing program 0: syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x40000000) 08:48:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r1, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) 08:48:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:48:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_open_procfs$namespace(0x0, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x1000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000680), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 916.544080][ T9281] usb 3-1: USB disconnect, device number 51 [ 916.584880][T23627] IPVS: ftp: loaded support on port[0] = 21 [ 916.595100][ T36] audit: type=1326 audit(1608713319.746:50): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 08:48:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x3d, &(0x7f00000003c0)={'security\x00'}, &(0x7f0000000440)=0x54) 08:48:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r1, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) [ 916.641657][T23627] IPVS: ftp: loaded support on port[0] = 21 08:48:39 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1d) close(r0) setreuid(0xee00, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 08:48:39 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='#\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) 08:48:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r1, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) 08:48:39 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 '], 0x191) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r5 = signalfd(r1, &(0x7f00000000c0)={[0x2]}, 0x8) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000400)={0x0, 0x0, [0x0, 0x6, 0x4, 0x6, 0x200], 0x800}) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f00000001c0)={'macvtap0\x00', @ifru_flags}}) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 916.983247][ T9281] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 917.243242][ T9281] usb 3-1: Using ep0 maxpacket: 16 [ 917.383335][ T9281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.396244][ T9281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 917.409861][ T9281] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 917.423292][ T9281] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 917.513617][ T9281] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 917.522680][ T9281] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 917.532386][ T9281] usb 3-1: Manufacturer: syz [ 917.539755][ T9281] usb 3-1: config 0 descriptor?? 08:48:42 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:42 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1d) close(r0) setreuid(0xee00, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 08:48:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) 08:48:42 executing program 0: syz_mount_image$udf(&(0x7f0000000040)='udf\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@session={'session', 0x3d, 0x1}}]}) 08:48:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_open_procfs$namespace(0x0, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x1000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000680), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:48:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) [ 919.575615][ T35] usb 3-1: USB disconnect, device number 52 08:48:42 executing program 1: fsopen(&(0x7f0000000080)='pipefs\x00', 0x0) 08:48:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) [ 919.624809][ T36] audit: type=1326 audit(1608713322.776:51): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23719 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 08:48:42 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) 08:48:42 executing program 0: syz_mount_image$udf(&(0x7f0000000040)='udf\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@session={'session', 0x3d, 0x1}}]}) 08:48:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) 08:48:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x8, 0x101}, 0x14}}, 0x0) [ 919.993752][ T35] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 920.233037][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 920.353044][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.363329][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 920.375934][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 920.386671][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 920.397278][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.483406][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 920.492475][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 920.502528][ T35] usb 3-1: Manufacturer: syz [ 920.509888][ T35] usb 3-1: config 0 descriptor?? 08:48:45 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:45 executing program 0: syz_mount_image$udf(&(0x7f0000000040)='udf\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@session={'session', 0x3d, 0x1}}]}) 08:48:45 executing program 4: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r0, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) 08:48:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffe) 08:48:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_open_procfs$namespace(0x0, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x1000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000680), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:48:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:48:45 executing program 0: syz_mount_image$udf(&(0x7f0000000040)='udf\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@session={'session', 0x3d, 0x1}}]}) 08:48:45 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x6, 0x3}, 0x8) 08:48:45 executing program 4: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r0, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) [ 922.656176][ T36] audit: type=1326 audit(1608713325.807:52): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23764 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 08:48:45 executing program 0: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000180)='1', 0x1, 0xfffffffffffffffc) [ 922.722888][ T35] rc_core: IR keymap rc-hauppauge not found [ 922.729346][ T35] Registered IR keymap rc-empty [ 922.754401][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 08:48:45 executing program 1: r0 = getpgrp(0xffffffffffffffff) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, r1, 0x0, 0x0, 0x0}, 0x30) [ 922.802926][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 08:48:46 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)=@abs, 0x6e) tkill(0x0, 0x37) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x8, 0x99af, 0x14, @remote, @private1, 0x0, 0x20}}) [ 922.842987][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 922.884517][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24 [ 922.917800][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 922.927222][ T36] audit: type=1804 audit(1608713326.077:53): pid=23797 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir908257190/syzkaller.4RNY7t/449/bus" dev="sda1" ino=16064 res=1 errno=0 [ 922.932911][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 922.957035][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 922.965125][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 922.972881][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 922.992870][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 922.998834][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.012865][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.032863][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.037819][ T36] audit: type=1804 audit(1608713326.177:54): pid=23800 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir908257190/syzkaller.4RNY7t/449/bus" dev="sda1" ino=16064 res=1 errno=0 [ 923.038743][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.061662][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.074551][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.092912][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.112907][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.132955][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.152876][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.160044][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.172874][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.192879][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.198717][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.212946][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.232901][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.238784][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.252862][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.272902][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.278860][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.292923][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.312851][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.318833][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.332849][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.352844][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.359039][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.372853][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.392844][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.399142][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 923.410687][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 923.419068][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.432838][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.452891][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.462044][ T35] usb 3-1: USB disconnect, device number 53 [ 923.472835][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 923.710527][ T36] audit: type=1804 audit(1608713326.857:55): pid=23800 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir908257190/syzkaller.4RNY7t/449/bus" dev="sda1" ino=16064 res=1 errno=0 [ 923.760164][ T36] audit: type=1804 audit(1608713326.907:56): pid=23797 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir908257190/syzkaller.4RNY7t/449/bus" dev="sda1" ino=16064 res=1 errno=0 [ 923.784617][ T36] audit: type=1804 audit(1608713326.907:57): pid=23800 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir908257190/syzkaller.4RNY7t/449/bus" dev="sda1" ino=16064 res=1 errno=0 [ 923.852843][ T35] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 924.102831][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 924.242859][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.253136][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 924.264729][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 924.274723][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 924.284446][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 924.393184][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 924.402408][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 924.411326][ T35] usb 3-1: Manufacturer: syz [ 924.417841][ T35] usb 3-1: config 0 descriptor?? 08:48:48 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:48 executing program 4: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r0, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) 08:48:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) read(r2, &(0x7f0000000040)=""/4096, 0x1000) 08:48:48 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 08:48:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:48:48 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)=@abs, 0x6e) tkill(0x0, 0x37) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x8, 0x99af, 0x14, @remote, @private1, 0x0, 0x20}}) 08:48:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r1, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) [ 925.730278][ T36] audit: type=1804 audit(1608713328.877:58): pid=23829 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir908257190/syzkaller.4RNY7t/450/bus" dev="sda1" ino=16145 res=1 errno=0 08:48:48 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)=@abs, 0x6e) tkill(0x0, 0x37) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x8, 0x99af, 0x14, @remote, @private1, 0x0, 0x20}}) 08:48:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r1, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) [ 925.802721][ T35] rc_core: IR keymap rc-hauppauge not found [ 925.813385][ T35] Registered IR keymap rc-empty 08:48:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000800)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x637d4991d917b267, @hyper}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 925.882865][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 925.902855][ T36] audit: type=1804 audit(1608713328.957:59): pid=23841 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir908257190/syzkaller.4RNY7t/450/bus" dev="sda1" ino=16145 res=1 errno=0 08:48:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r1, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) [ 925.932725][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 925.972810][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 926.013936][T23855] binder_alloc: binder_alloc_mmap_handler: 23850 20ffa000-20ffe000 already mapped failed -16 [ 926.028776][ T36] audit: type=1804 audit(1608713328.997:60): pid=23845 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir463949845/syzkaller.Tpk8e1/502/bus" dev="sda1" ino=16152 res=1 errno=0 [ 926.045866][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input25 08:48:49 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r0, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) [ 926.158140][ T36] audit: type=1804 audit(1608713329.097:61): pid=23848 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir463949845/syzkaller.Tpk8e1/502/bus" dev="sda1" ino=16152 res=1 errno=0 [ 926.187838][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 926.202680][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.222695][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.235682][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 926.242858][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.272678][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.292730][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.299138][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 926.312740][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.342731][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.348859][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 926.362703][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.392720][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.398905][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 926.408271][T23855] binder_alloc: binder_alloc_mmap_handler: 23850 20ff9000-20ffc000 already mapped failed -16 [ 926.418597][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.442655][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.462663][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.468516][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 926.492660][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.502703][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 926.512806][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.542655][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.572678][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.578713][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 926.592686][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.622658][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.628853][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 926.652673][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.672686][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.692673][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.698979][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 926.712699][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.732833][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.739282][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 926.753930][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 926.762685][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.782669][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 926.798769][ T35] usb 3-1: USB disconnect, device number 54 [ 926.804703][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 927.242645][ T35] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 927.502905][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 927.632943][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.643041][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 927.655907][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 927.667950][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 927.678687][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 927.782900][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 927.791969][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 927.800036][ T35] usb 3-1: Manufacturer: syz [ 927.806449][ T35] usb 3-1: config 0 descriptor?? 08:48:52 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) 08:48:52 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r0, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) 08:48:52 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)=@abs, 0x6e) tkill(0x0, 0x37) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x8, 0x99af, 0x14, @remote, @private1, 0x0, 0x20}}) 08:48:52 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:52 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)=@abs, 0x6e) tkill(0x0, 0x37) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x8, 0x99af, 0x14, @remote, @private1, 0x0, 0x20}}) 08:48:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) [ 929.102147][ T36] audit: type=1804 audit(1608713332.247:62): pid=23893 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir908257190/syzkaller.4RNY7t/451/bus" dev="sda1" ino=16177 res=1 errno=0 [ 929.144682][ T35] rc_core: IR keymap rc-hauppauge not found [ 929.150598][ T35] Registered IR keymap rc-empty [ 929.220644][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 08:48:52 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r0, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) [ 929.312617][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 929.340115][ T36] audit: type=1804 audit(1608713332.287:63): pid=23891 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir463949845/syzkaller.Tpk8e1/503/bus" dev="sda1" ino=16176 res=1 errno=0 08:48:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, 0x0, 0x0) [ 929.433799][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 929.477153][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 929.513592][ T36] audit: type=1804 audit(1608713332.357:64): pid=23929 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir463949845/syzkaller.Tpk8e1/503/bus" dev="sda1" ino=16176 res=1 errno=0 08:48:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, 0x0, 0x0) [ 929.592710][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 929.612477][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 929.642477][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 929.652487][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 929.662472][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 929.680325][ T36] audit: type=1804 audit(1608713332.377:65): pid=23932 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir908257190/syzkaller.4RNY7t/451/bus" dev="sda1" ino=16177 res=1 errno=0 [ 929.703382][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 929.711392][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 929.722480][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 929.742472][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 929.762507][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 929.782462][ C1] mceusb 3-1:0.0: Error: urb status = -71 08:48:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, 0x0, 0x0) [ 929.788650][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 929.802462][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 929.832514][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 929.838595][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 929.862492][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 929.882466][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 929.892889][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 929.902466][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 929.932470][ C1] mceusb 3-1:0.0: Error: urb status = -71 08:48:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) [ 929.942470][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 929.962500][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 929.982471][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 930.002487][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 930.009688][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 930.032462][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 930.042475][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 930.052471][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 930.072483][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 930.080241][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 930.102512][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 930.122454][ C1] mceusb 3-1:0.0: Error: urb status = -71 08:48:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) [ 930.152444][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 930.160364][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 930.172457][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 930.192468][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 930.200889][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 930.212448][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 930.232461][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 930.252466][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 930.267857][ T35] usb 3-1: USB disconnect, device number 55 [ 930.273836][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 930.673674][ T35] usb 3-1: new high-speed USB device number 56 using dummy_hcd 08:48:54 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) 08:48:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 08:48:54 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)=@abs, 0x6e) tkill(0x0, 0x37) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x8, 0x99af, 0x14, @remote, @private1, 0x0, 0x20}}) 08:48:54 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)=@abs, 0x6e) tkill(0x0, 0x37) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x8, 0x99af, 0x14, @remote, @private1, 0x0, 0x20}}) [ 930.942479][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 930.976543][ T36] audit: type=1804 audit(1608713334.127:66): pid=23993 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir908257190/syzkaller.4RNY7t/452/bus" dev="sda1" ino=16158 res=1 errno=0 [ 931.064369][ T36] audit: type=1804 audit(1608713334.167:67): pid=23996 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir463949845/syzkaller.Tpk8e1/504/bus" dev="sda1" ino=16160 res=1 errno=0 [ 931.092330][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.111964][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 931.135164][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 931.147041][ T36] audit: type=1804 audit(1608713334.217:68): pid=23998 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir908257190/syzkaller.4RNY7t/452/bus" dev="sda1" ino=16158 res=1 errno=0 [ 931.174463][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 931.184891][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 931.199994][ T36] audit: type=1804 audit(1608713334.277:69): pid=23999 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir463949845/syzkaller.Tpk8e1/504/bus" dev="sda1" ino=16160 res=1 errno=0 [ 931.304104][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 931.316469][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 931.335851][ T35] usb 3-1: Manufacturer: syz [ 931.351053][ T35] usb 3-1: config 0 descriptor?? 08:48:55 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:48:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 08:48:55 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) 08:48:55 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) 08:48:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000), 0x8) 08:48:55 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) 08:48:55 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) 08:48:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 08:48:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000), 0x8) [ 932.718822][ T35] rc_core: IR keymap rc-hauppauge not found [ 932.724837][ T35] Registered IR keymap rc-empty [ 932.745767][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 08:48:55 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) 08:48:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x4440, 0x0, 0x7}, 0x18) [ 932.814042][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 932.862355][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 932.902440][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input27 [ 932.968982][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 932.992277][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.022283][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.028545][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 933.042354][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.062296][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.069214][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 933.082282][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.102289][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.109482][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 933.122306][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.142314][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.149411][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 933.172279][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.192293][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.198098][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 933.212319][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.232264][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.252273][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.259459][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 933.272273][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.292287][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.298162][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 933.312264][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.332314][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.338210][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 933.362279][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.372324][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 933.382260][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.402310][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.410197][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 933.419518][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 933.427949][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.442289][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.461534][ T35] usb 3-1: USB disconnect, device number 56 [ 933.467482][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 933.852315][ T35] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 934.112259][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 934.232582][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.244059][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 934.256453][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 934.267575][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 934.277242][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 934.362622][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 934.371735][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 934.381758][ T35] usb 3-1: Manufacturer: syz [ 934.389262][ T35] usb 3-1: config 0 descriptor?? 08:48:58 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:48:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 08:48:58 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000000)={'veth1_to_bridge\x00', @ifru_ivalue}) 08:48:58 executing program 0: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000300)) 08:48:58 executing program 3: syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x103001) 08:48:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, 0x0, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:48:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) 08:48:58 executing program 1: socketpair(0x2, 0x2, 0x88, &(0x7f0000000000)) 08:48:58 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000040)={'wlan1\x00', @ifru_ivalue}) 08:48:58 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f0000001040)) 08:48:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) 08:48:58 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000140)) [ 935.763735][ T35] rc_core: IR keymap rc-hauppauge not found [ 935.769650][ T35] Registered IR keymap rc-empty [ 935.797572][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 935.882122][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 935.912194][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 935.938006][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 935.987243][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 936.012126][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.022661][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 936.042103][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.052231][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 936.072139][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.092138][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.097990][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 936.112705][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.132095][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.137886][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 936.152100][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.172095][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.177974][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 936.192132][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.212102][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.218053][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 936.242084][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.253735][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 936.262097][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.282112][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.289549][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 936.302108][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.322092][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.328958][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 936.352089][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.362557][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 936.370667][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 936.379062][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.392116][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 936.398511][ T35] usb 3-1: USB disconnect, device number 57 [ 936.782100][ T35] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 937.022069][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 937.142475][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.152749][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 937.166045][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 937.177092][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 937.188101][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 937.282401][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 937.291545][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 937.301798][ T35] usb 3-1: Manufacturer: syz [ 937.308577][ T35] usb 3-1: config 0 descriptor?? 08:49:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x8a5a5fff373f3f8d, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) 08:49:01 executing program 0: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = gettid() r2 = dup(r0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000013) 08:49:01 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000840)='/dev/sequencer\x00', 0x0, 0x0) 08:49:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000000)) 08:49:01 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:49:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, 0x0, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r1, 0x0, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) 08:49:01 executing program 1: syz_genetlink_get_family_id$ethtool(0xfffffffffffffffd) 08:49:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 08:49:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r1, 0x0, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) [ 938.755990][ T35] rc_core: IR keymap rc-hauppauge not found [ 938.764562][ T35] Registered IR keymap rc-empty [ 938.772820][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 08:49:02 executing program 1: syz_mount_image$ext4(&(0x7f0000001ec0)='ext3\x00', &(0x7f0000001f00)='./file0\x00', 0x0, 0x0, &(0x7f0000003300), 0x0, &(0x7f00000033c0)) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 938.823305][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 938.852120][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 08:49:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') readv(r0, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) 08:49:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r1, 0x0, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}}, 0x0) [ 938.924906][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29 [ 938.990607][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 939.001984][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.021938][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.035681][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 939.042830][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.061941][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.081923][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.087770][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 939.101927][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.121928][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.127787][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 939.141931][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.161928][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.169160][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 939.181964][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.201941][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.209401][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 939.221940][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.241917][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.249110][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 939.261927][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.281935][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.289165][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 939.301938][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.321911][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.328280][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 939.341912][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.361907][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.368124][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 939.381922][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.401905][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.408043][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 939.416201][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 939.424903][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 939.432532][ T35] usb 3-1: USB disconnect, device number 58 08:49:02 executing program 0: syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f00000016c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, 0x0) 08:49:02 executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000880)='/dev/uhid\x00', 0x2, 0x0) [ 939.801930][ T35] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 939.871943][T13420] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 940.041932][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 940.162331][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.174988][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 940.186889][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 940.198353][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 940.209497][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 940.242237][T13420] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 940.301904][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 940.311355][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 940.320412][ T35] usb 3-1: Manufacturer: syz [ 940.327247][ T35] usb 3-1: config 0 descriptor?? [ 940.411929][T13420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 940.420974][T13420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.430567][T13420] usb 1-1: Product: syz [ 940.435003][T13420] usb 1-1: Manufacturer: syz [ 940.439584][T13420] usb 1-1: SerialNumber: syz [ 940.462709][T24174] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 940.482463][T13420] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 940.683970][T13420] usb 1-1: USB disconnect, device number 14 [ 941.451831][T23867] usb 1-1: new full-speed USB device number 15 using dummy_hcd 08:49:04 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:49:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x8a5a5fff373f3f8d}, 0x14}}, 0x0) 08:49:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000016c0)='net/udplite\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4084) 08:49:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, 0x0, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x540d, 0x0) dup2(r0, r2) ioctl$KDSKBMETA(r2, 0x5427, 0x0) 08:49:04 executing program 1: r0 = epoll_create(0xfffd) close(r0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000040)) 08:49:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000280)="f611ef47d027c2f91d9420e25d6a5eb9d3ab871c", 0x14) sendmmsg$inet6(r0, &(0x7f00000057c0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 08:49:04 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs\x00') read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0x2020) [ 941.803213][ T35] rc_core: IR keymap rc-hauppauge not found [ 941.809180][ T35] Registered IR keymap rc-empty [ 941.815770][T23867] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 08:49:05 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000e40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xf8}}}}}]}}]}}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x2, 0x78, &(0x7f0000001540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1f}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x1, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) [ 941.848267][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 08:49:05 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x7, 0x4) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) socket$can_bcm(0x1d, 0x2, 0x2) pipe(0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) [ 941.902051][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 941.933311][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 941.989995][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 942.037716][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 942.046119][T23867] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 942.055308][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.071751][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.078581][T23867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.091793][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.098227][T23867] usb 1-1: Product: syz [ 942.102730][T23867] usb 1-1: Manufacturer: syz [ 942.111758][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.118073][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 942.126022][T23867] usb 1-1: SerialNumber: syz [ 942.131755][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.151763][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.159248][T24174] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 942.166081][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 942.173310][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.191784][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.197986][T23867] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 942.207186][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 942.214376][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.221823][T18765] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 942.231780][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.241772][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 942.251773][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.271763][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.277696][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 942.291738][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.311739][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.317798][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 942.331776][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.351731][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.357943][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 942.371730][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.391736][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.402014][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 08:49:05 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$dsp(r0, 0x0, 0x64) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) 08:49:05 executing program 3: unshare(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 942.409403][T20178] usb 1-1: USB disconnect, device number 15 [ 942.415348][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.431733][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.437570][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 942.451737][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.471768][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.482047][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 942.491727][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.500949][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 942.511732][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.511834][T18765] usb 2-1: Using ep0 maxpacket: 32 [ 942.531682][ T35] usb 3-1: USB disconnect, device number 59 [ 942.531732][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 942.661874][T18765] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 942.862296][T18765] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 942.871826][T18765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.880414][T18765] usb 2-1: Product: syz [ 942.888460][T18765] usb 2-1: Manufacturer: syz [ 942.891877][ T35] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 942.895984][T18765] usb 2-1: SerialNumber: syz [ 942.942407][T18765] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 943.131734][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 943.145503][T24223] udc-core: couldn't find an available UDC or it's busy [ 943.152651][T24223] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 943.160464][T18765] usb 2-1: USB disconnect, device number 16 [ 943.251744][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.263445][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 943.274568][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 943.285568][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 943.295286][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 943.381986][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 943.391225][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 943.399242][ T35] usb 3-1: Manufacturer: syz [ 943.404494][ T35] usb 3-1: config 0 descriptor?? [ 943.931687][T18765] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 944.181675][T18765] usb 2-1: Using ep0 maxpacket: 32 [ 944.302174][T18765] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 944.501869][T18765] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 944.511021][T18765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.520517][T18765] usb 2-1: Product: syz [ 944.524727][T18765] usb 2-1: Manufacturer: syz [ 944.529341][T18765] usb 2-1: SerialNumber: syz [ 944.582087][T18765] cdc_ether: probe of 2-1:1.0 failed with error -22 08:49:07 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:49:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ipvlan0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]}) 08:49:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)) clone(0x40000, &(0x7f00000004c0)="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", &(0x7f0000000180), &(0x7f0000000440), &(0x7f00000014c0)="11fe33d71b6c760d1ac5d7ffac30c961427eb5416a03bc6a65f31ee8df69272aee7ecf9069ec5ecd3b2b8df574aca429c13d1bce2d8410a48fa3aa8f5b5cd4e73a43ea6714e3e6b9d803d787a2cb0d2e6145b282224ecd978185dda18485d711db458ed42fe7aea9626c38eb298d2768177705c77b65f8cdce3933ee81ded1957733b0cc635788f8da556c453e9130e35c7a34d45ba212fb9a9bc1ab159b78cd2209f7198faf81dc61cecef9c6a461ae914715c79402") connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1a7610}], 0x1) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0xfc92e131d231307d) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000015c0)) r2 = dup(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000001600)={'gre0\x00', 0x0, 0x700, 0x0, 0xad, 0x1000, {{0x17, 0x4, 0x3, 0x9, 0x5c, 0x68, 0x0, 0x22, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x8a, 0x1, 0x0, [{@multicast2, 0x6}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x9}]}, @generic={0x94, 0x11, "3ea7b2491cc7d96627e6e66f519725"}, @timestamp_addr={0x44, 0xc, 0xe9, 0x1, 0x0, [{@broadcast, 0x3}]}, @timestamp_addr={0x44, 0xc, 0xae, 0x1, 0x8, [{@local, 0x2}]}]}}}}}) socket(0x11, 0x800000003, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40085}, 0x4001) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000280)=0x30) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000003c0)={0x20, 0x101, 0x2c, 0x7}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev}}, 0x1c) 08:49:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:07 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$dsp(r0, 0x0, 0x64) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) 08:49:07 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=rdma,', {'port'}}) [ 944.791484][T18765] usb 2-1: USB disconnect, device number 17 [ 944.831614][ T35] rc_core: IR keymap rc-hauppauge not found 08:49:08 executing program 1: shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x5000) [ 944.837660][ T35] Registered IR keymap rc-empty 08:49:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RVERSION(r1, 0x0, 0x0) close(r1) timer_create(0x0, &(0x7f0000000380)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = gettid() recvmmsg(r2, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000013) [ 944.862153][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 08:49:08 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3ff20850"}, 0x0, 0x0, @fd}) 08:49:08 executing program 4: clone(0x64820400, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000002900)={&(0x7f0000002780), 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x48, 0x1407, 0x0, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x45005}, 0x4004050) [ 944.931655][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 08:49:08 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 944.981744][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 945.020970][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input31 08:49:08 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000400), 0x18) [ 945.057776][T24320] IPVS: ftp: loaded support on port[0] = 21 [ 945.113433][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 945.129958][T24320] IPVS: ftp: loaded support on port[0] = 21 [ 945.131590][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.151578][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.157596][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 945.171575][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.191574][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.197403][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 945.211583][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.231566][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.237437][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 945.251563][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.271567][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.283168][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 945.291581][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.311601][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.317372][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 945.331575][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.351568][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.357494][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 945.371575][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.391559][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.397378][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 945.411568][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.431552][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.437887][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 945.451592][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.471577][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.477706][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 945.491555][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.511559][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.517818][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 945.531555][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.541584][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 945.551603][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.571559][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.577747][ T35] usb 3-1: USB disconnect, device number 60 [ 945.591550][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 945.961551][ T35] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 946.201555][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 946.321793][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.332410][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 946.345776][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 946.356525][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 946.367373][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 946.451538][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 946.460768][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 946.471767][ T35] usb 3-1: Manufacturer: syz [ 946.476874][ T35] usb 3-1: config 0 descriptor?? 08:49:10 executing program 4: clone(0x64820400, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000002900)={&(0x7f0000002780), 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x48, 0x1407, 0x0, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x45005}, 0x4004050) 08:49:10 executing program 1: clone(0x51100, 0x0, 0x0, 0x0, 0x0) 08:49:10 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:49:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:10 executing program 0: clone(0x64820400, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000002780), 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x50, 0x1407, 0x200, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x45005}, 0x4004050) 08:49:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)) clone(0x40000, &(0x7f00000004c0)="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", &(0x7f0000000180), &(0x7f0000000440), &(0x7f00000014c0)="11fe33d71b6c760d1ac5d7ffac30c961427eb5416a03bc6a65f31ee8df69272aee7ecf9069ec5ecd3b2b8df574aca429c13d1bce2d8410a48fa3aa8f5b5cd4e73a43ea6714e3e6b9d803d787a2cb0d2e6145b282224ecd978185dda18485d711db458ed42fe7aea9626c38eb298d2768177705c77b65f8cdce3933ee81ded1957733b0cc635788f8da556c453e9130e35c7a34d45ba212fb9a9bc1ab159b78cd2209f7198faf81dc61cecef9c6a461ae914715c79402") connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1a7610}], 0x1) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0xfc92e131d231307d) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000015c0)) r2 = dup(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000001600)={'gre0\x00', 0x0, 0x700, 0x0, 0xad, 0x1000, {{0x17, 0x4, 0x3, 0x9, 0x5c, 0x68, 0x0, 0x22, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x8a, 0x1, 0x0, [{@multicast2, 0x6}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x9}]}, @generic={0x94, 0x11, "3ea7b2491cc7d96627e6e66f519725"}, @timestamp_addr={0x44, 0xc, 0xe9, 0x1, 0x0, [{@broadcast, 0x3}]}, @timestamp_addr={0x44, 0xc, 0xae, 0x1, 0x8, [{@local, 0x2}]}]}}}}}) socket(0x11, 0x800000003, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40085}, 0x4001) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000280)=0x30) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000003c0)={0x20, 0x101, 0x2c, 0x7}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev}}, 0x1c) 08:49:11 executing program 1: r0 = socket(0x11, 0x2, 0x0) getsockopt(r0, 0x1, 0xe, 0x0, &(0x7f0000000080)) [ 947.861837][T24406] IPVS: ftp: loaded support on port[0] = 21 [ 947.873131][ T35] rc_core: IR keymap rc-hauppauge not found [ 947.876055][T24408] IPVS: ftp: loaded support on port[0] = 21 [ 947.885156][ T35] Registered IR keymap rc-empty [ 947.901350][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 08:49:11 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'default', '=static', @void}}}]}) [ 947.953297][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 947.981490][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 08:49:11 executing program 4: r0 = socket(0x11, 0x2, 0x0) getsockopt(r0, 0x1, 0x1e, 0x0, &(0x7f0000000080)) [ 948.017329][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 948.036095][T24408] IPVS: ftp: loaded support on port[0] = 21 08:49:11 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000540)={[{@gid={'gid'}}, {@check_strict='check=strict'}, {@nojoliet='nojoliet'}, {@map_acorn='map=acorn'}]}) [ 948.066619][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 948.081418][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.101403][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.108307][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 08:49:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@deltfilter={0x24, 0x2d, 0x1}, 0x24}}, 0x0) [ 948.121431][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.141415][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.147201][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 948.161400][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.181420][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.187301][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 948.201400][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.221407][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.227507][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 948.241431][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.261392][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.267324][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 08:49:11 executing program 1: r0 = socket(0x11, 0x2, 0x0) getsockopt(r0, 0x1, 0x9, 0x0, &(0x7f0000000080)) 08:49:11 executing program 0: keyctl$chown(0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 08:49:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) [ 948.281404][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.301520][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.307714][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 948.321390][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.341388][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.351433][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 948.361396][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.381387][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.391402][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 948.401438][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.421395][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.431392][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 948.441388][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.461407][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.467861][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 948.477745][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 948.486123][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.501377][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.513660][ T35] usb 3-1: USB disconnect, device number 61 [ 948.521396][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 948.881404][ T35] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 949.141532][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 949.271392][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.281580][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 949.295549][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 949.305935][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 949.316166][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 949.411408][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 949.420664][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 949.429505][ T35] usb 3-1: Manufacturer: syz [ 949.435296][ T35] usb 3-1: config 0 descriptor?? [ 949.741324][ T35] rc_core: IR keymap rc-hauppauge not found [ 949.747353][ T35] Registered IR keymap rc-empty [ 949.754909][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 949.801336][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 949.831488][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 949.844402][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33 [ 949.865265][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 949.901310][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 949.907128][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 949.931313][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 949.941328][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 949.961308][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 949.981322][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 949.987264][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 950.011299][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 950.024319][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 950.031467][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 950.051308][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 950.071320][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 950.077166][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 950.091316][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 950.121299][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 950.127264][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 950.141311][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 950.161306][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 950.167111][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 950.191309][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 950.201332][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 950.211337][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 950.231311][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 950.238245][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 950.251424][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 950.281287][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 950.287375][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 950.295479][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 950.303904][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 950.310633][ T35] usb 3-1: USB disconnect, device number 62 08:49:13 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:49:13 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x74b000) sendmmsg$inet6(r0, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 08:49:13 executing program 1: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$unlink(0x9, r0, r1) 08:49:13 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x800c6613, 0x0) 08:49:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)) clone(0x40000, &(0x7f00000004c0)="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", &(0x7f0000000180), &(0x7f0000000440), &(0x7f00000014c0)="11fe33d71b6c760d1ac5d7ffac30c961427eb5416a03bc6a65f31ee8df69272aee7ecf9069ec5ecd3b2b8df574aca429c13d1bce2d8410a48fa3aa8f5b5cd4e73a43ea6714e3e6b9d803d787a2cb0d2e6145b282224ecd978185dda18485d711db458ed42fe7aea9626c38eb298d2768177705c77b65f8cdce3933ee81ded1957733b0cc635788f8da556c453e9130e35c7a34d45ba212fb9a9bc1ab159b78cd2209f7198faf81dc61cecef9c6a461ae914715c79402") connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1a7610}], 0x1) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0xfc92e131d231307d) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000015c0)) r2 = dup(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000001600)={'gre0\x00', 0x0, 0x700, 0x0, 0xad, 0x1000, {{0x17, 0x4, 0x3, 0x9, 0x5c, 0x68, 0x0, 0x22, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x8a, 0x1, 0x0, [{@multicast2, 0x6}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x9}]}, @generic={0x94, 0x11, "3ea7b2491cc7d96627e6e66f519725"}, @timestamp_addr={0x44, 0xc, 0xe9, 0x1, 0x0, [{@broadcast, 0x3}]}, @timestamp_addr={0x44, 0xc, 0xae, 0x1, 0x8, [{@local, 0x2}]}]}}}}}) socket(0x11, 0x800000003, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40085}, 0x4001) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000280)=0x30) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000003c0)={0x20, 0x101, 0x2c, 0x7}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev}}, 0x1c) 08:49:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000740)={[{@rodir='rodir'}, {@fat=@sys_immutable='sys_immutable'}]}) 08:49:13 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x800c6613, 0x0) 08:49:13 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r0, 0x427, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}]}, 0x34}}, 0x0) 08:49:13 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 08:49:13 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x800c6613, 0x0) 08:49:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x166459a6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x2, 'macvlan1\x00', {0x2}}) exit(0x0) [ 950.851260][ T35] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 951.111264][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 951.251345][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.261885][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 951.276103][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 951.287033][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 951.298465][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 951.421826][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 951.430972][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 951.439082][ T35] usb 3-1: Manufacturer: syz [ 951.446348][ T35] usb 3-1: config 0 descriptor?? [ 951.771232][ T35] rc_core: IR keymap rc-hauppauge not found [ 951.777190][ T35] Registered IR keymap rc-empty [ 951.784801][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 951.821283][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 951.861321][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 951.874315][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input34 [ 951.896038][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 951.931273][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 951.937420][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 951.961187][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 951.981209][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 951.991197][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 952.021205][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 952.027090][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 952.051286][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 952.071206][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 952.077047][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 952.101210][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 952.111208][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 952.121177][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 952.141194][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 952.146966][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 952.171178][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 952.181969][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 952.201187][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 952.211439][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 952.231179][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 952.241973][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 952.261181][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 952.281204][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 952.287434][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 952.296894][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 952.305258][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 952.312478][ T35] usb 3-1: USB disconnect, device number 63 08:49:15 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff20"]) 08:49:15 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x800c6613, 0x0) 08:49:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) accept4$unix(0xffffffffffffff9c, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8, 0x30000000) sync() 08:49:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x166459a6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x2, 'macvlan1\x00', {0x2}}) exit(0x0) 08:49:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)) clone(0x40000, &(0x7f00000004c0)="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", &(0x7f0000000180), &(0x7f0000000440), &(0x7f00000014c0)="11fe33d71b6c760d1ac5d7ffac30c961427eb5416a03bc6a65f31ee8df69272aee7ecf9069ec5ecd3b2b8df574aca429c13d1bce2d8410a48fa3aa8f5b5cd4e73a43ea6714e3e6b9d803d787a2cb0d2e6145b282224ecd978185dda18485d711db458ed42fe7aea9626c38eb298d2768177705c77b65f8cdce3933ee81ded1957733b0cc635788f8da556c453e9130e35c7a34d45ba212fb9a9bc1ab159b78cd2209f7198faf81dc61cecef9c6a461ae914715c79402") connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1a7610}], 0x1) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0xfc92e131d231307d) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000015c0)) r2 = dup(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000001600)={'gre0\x00', 0x0, 0x700, 0x0, 0xad, 0x1000, {{0x17, 0x4, 0x3, 0x9, 0x5c, 0x68, 0x0, 0x22, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x8a, 0x1, 0x0, [{@multicast2, 0x6}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x9}]}, @generic={0x94, 0x11, "3ea7b2491cc7d96627e6e66f519725"}, @timestamp_addr={0x44, 0xc, 0xe9, 0x1, 0x0, [{@broadcast, 0x3}]}, @timestamp_addr={0x44, 0xc, 0xae, 0x1, 0x8, [{@local, 0x2}]}]}}}}}) socket(0x11, 0x800000003, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40085}, 0x4001) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000280)=0x30) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000003c0)={0x20, 0x101, 0x2c, 0x7}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev}}, 0x1c) 08:49:15 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x2, 'macvlan1\x00', {0x2}}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000080)) exit(0x0) 08:49:15 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003be2ff000000000000001000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x100000000000000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) 08:49:15 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8) 08:49:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) 08:49:15 executing program 0: open$dir(&(0x7f0000000080)='./file0\x00', 0x10042, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'security.', '\xa1*\x00'}, &(0x7f0000000180)=""/242, 0xf2) 08:49:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001c00)={@mcast2, @mcast1, @dev}) sendmmsg$inet6(r0, &(0x7f0000001b00)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e147e7014c49e8855485b67050afaa0ae40300488a4437895fb29abafc7ea665eca49b862caec6649baf8394142509ce303245bc9a32cf614a4a3561064d269586e4624fc23258817c4dc7a0ef54355b89cec1da922a3ca14a5e3947ad01eb00e879846f2c25b3bd14e05"}]}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="dfa65e4f34e62f6f32bd340670e02c6d3358b8a25fe485b05bb4d5ffe2d41bfab6fcc6327ec4a8e144fbc7c5a066b299297271b17bc9d03ae7c08cf3306245bcb78cecab155b451a67a3acb43ece73a7df647b999de1d878aa62cb3a0ea968515e6f476bfe"}]}}, {{&(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="76ff9ed123e3ac4e6119512a665281827893dd09d942eeaf7230c497b1eafb1447fac0855a6a0481f40519e6ae5c0be7f85f7d24bd91dcc557f8983f18effa9c41fe6c7e6c4dd8db9c09881d769e85a277fcfb04623e01a86b0c56a95a1bb28055a0639a6d9b3f848ccd99df508d55bb6cd0af9f5faeca905bc4cb87d8347df465d452ac517df046e0efae38cd5f25d0a4162929eca5a6bca97ccca888096009e507764f6dd8c00af8ff0654e2acb3e14ca7a85152ed55466f3a83bc9309d142bbbb34a1c76e7136d4ae68aead577f5a5265fe68e80a99289479f541fabc1af80e215c086889fb0f27b96172afe3978bd897a06acd"}, {&(0x7f0000000380)="c567c21b61d51f7fe21be54a0357fe6801f1cc0f9a25447d90cd90f4bdfeec202eefb1797029a11347a1a1e9715fe0ee7a212618ce9524f7d0b6e28c7d0e430a308061374294d9c8620721f868ea8f153304b5c5aa4603780d55c20b07c1953342a11482be24deb6a6ffa03e7cf83a2a531bd44110b8e5fb38"}], 0x0, &(0x7f0000000440)=[@hopopts_2292={{0x0, 0x29, 0x36, {0x0, 0x0, [], [@pad1, @ra, @calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}, @ra, @generic={0x0, 0x0, "3f26c60219798c457f6dc9f5348c926b1887ca48192b8e9203e3d34de5f544f0e7d351dc32fe9c95ddc7b118866b6f481578cd804d1c55267f6c76ace4213edd8483b10cedece03658c4db879f5d41d07fc54eeb37183de5321006406e0f16ad4814b6f5ee9ce26ae03fab203d82cec331a6cb84a9884f5a48a24b7513dcb092dab13f5dc28d24ef352c"}]}}}, @hopopts_2292={{0x0, 0x29, 0x36, {0x0, 0x0, [], [@ra]}}}, @hopopts_2292={{0x0, 0x29, 0x36, {0x0, 0x0, [], [@hao={0xc9, 0x0, @loopback}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @hao={0xc9, 0x0, @dev}, @pad1]}}}, @tclass, @tclass]}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000640)="ded6490c5b901328720ee9519b0bf4a9b696a8cca7060b16e699b472376dcac4b3949bf8c9199a3bda9aa5d4eb4136a8e28f14a104c310f749a8a09246c2e12eb3408b6b"}, {&(0x7f00000006c0)="ad6bc841b05814efd221494cf5a45e8688517d23338f179d8e7cb01341cf8de939118230f1af2e26c635886ff3ab47b775cbc2750fd7841f7fe8645e9d4939ea3a92101fa56bd85d593b457aea820b7541b06dd11c44398eead8f9bf343d0786c005e62ee1fca1df8dd09e1fb902a63f05818184f72190516fe7ca19eb74e52456cd4808a1e5e4dad43ee6fe0d3ca57653eff8eb6d7bda625922ce8130811b50029ee3d886bad3fe1069cb9f0ff7531f4f7d91fa8cc21bfd876caf"}, {&(0x7f0000000780)="879063db3a8590e7275a418680ebccca806ec9ce72ae27ce93451ffdd16ae9dc60ec064f9e040573efc4028282a48574fcaa14520f0e81695e94a48f4eb8b1923466d410aca119c6af04aeefa2257df951f7cd9bb8"}, {&(0x7f0000000800)="5a5f79234596374f3aef7fd92947f5becf3e6490952a9f864ffab32e460ec35dc8b5f00f4fb4fd86af2b8ac2b0b7b900be58705b1b63fa3227009b52187c8eed80512ada8861cf100278ebed958e10f9c8bd3ff6c6e5a06a95cc6148a44370b27c672e7807b75d9e34b64645ef909aa46aa40765d666fc565425cf770acbd664168aa659e86f4e678547c2c802d59b00568ba1b7e45ba61fb648a09015124d41cedf36"}, {&(0x7f00000008c0)="702f7df284ed29af33dfca01d6d44988dd242ec40bdb87626b7e9b37528e1a4c66a10a28c513527c28a9383bf27a1484f015e82e19fc49dbc9c179280f3f5a3763ccfb1733ede76a40eedb973f0b0ef9f93f7e024b96958c06ded4f3e28538ae810d0c796adb840a9c189803150fcc113e3d5a51d5198d9c7f638893f1f82c8ef3b9218ad44ed41af9049470988023f0b8c196a675336343fe7ce1ec0bb0e6862ef6edd46c6393c9d5a3dd527274267e052e978bca6811c91d27975739f00a07b52d54cfdde37896f39ed8429db7e8fb63a555a98108bbff671ec3e98d6cc374b036408fb7e096af36afc270c5ebd3d3f259dcc6f82f9a1f19d58e40649a761898aea5774d86bef70eef215bafd58dc06e166f8373067220d0c33039e8a0ee34fcc248859154e328474f596f76388d27880b185e17beffc0f7030b925dc1fb45060c66eaccfcd4cf969dbf8991dbdf692fb6ec4a94c4e7732d5beb6304ee28524e81d0e1dd861c25742d39167a62700479017cd648dc8aacd8305eb800e77ab5ee9f2961a0741d930f6e288b16739db202f06435dde45d558458993800e738d583ed276bb621d47c0aae808fdcaed6637f80eebb702464a16d2f025676b70a5ecd3f1e1764f4af0687ec65fce8cf1aa98e042808fe24f23bf4bb54c852ec6ce68112d1e06c32c074ff26763344a8cfbea6d836dce2d05d249db700ec4a4e4ca3e4f4d2c8b48dbeab18e292ce372a8017832e7a07c0f2ca2ea98b574fd4b78cea5ea3cdb5c963960cc53a68389fbf07ea8b51e818fc9b1fb98d5eda00c95fa8db8f0e53da261a939ac14d8eac49421da264bd54067ae20f2211657cf6f798474f99ada97138be741a52f75cc1374d7705777d45dbbd64e887a410648ba494aed7a6842a42ea9a59b355116b5133156c6bcbd6cd425de950e654899637cb70ab007efe089823c44f9d4360efd8440ee1311401ef73024badda5bdea16314145d57718cfa5896f42f01ba0533186642c9499b2790f330f2902e69108057f4145d0e63b08ffd57d23eeb40882ced4875dc24a718b94613cf75bef1e11282e42b2ffeb594ada340759933c87a09726071cc52d17c7f9c30c557dcd3b039cbbf41323544d8fd58ea3888becd81cdf407bcb3f090b44c4ebd8462fd2b8924f5a46333b820cce09ff9924b55694fcea0eb9c329b346cd54b0ac139ad70508ef247c05bb6500a35a18d39da1d1232c12ccb8459b66508311d77aade45de83314562268173c8c002d62fa08c2fd7fe7fdbc432bc37e3bee24200e95b50b661a3c9132f5a737732c19a3f32b9e68313122813aadadab76b489d5d0a387cf82ec3f4c76c6130b3e4e3ccf91e71220894f41bc68519d659ed63423520a1083119be34ffe0f8b7e8c58831684d85a09d929b97cb91c760ffc8e66ce1b427c244d9c12cd4814a6012ce836f67e84b7f6c7170ee31bb8faf7ea34f1dc7a5170662cad1802a6bcf9992ef93e490dfccdfc938ac219bd9ebc13a6ce1fb7cdc747d79214a20e173a334026194b8817df96223a2bc689d7422da9157a9c27056b7e90c693b18ee3840178f073489d9c86c528f021ec61dc7d7dee4ca11f593586783a8698295e3586fb75932bdfa800db6a38046bbd0046a100dc5b0d8fe724f5a1a8eb1fe493a6d0d4b463699095c94841c9e440eed0b30d1bf30cb383b7c4e54ca4cff0a0ac15af9738760dc805bd1258b7355f0fb413e72d8adf8c0a031e1a515326c2099b0745cc05b842f4ddc8ed3f6199d6bf14a6c4cc48eb507e61bb834d92933c967087692465e0760093130516a2234b2053bb5b35f61014285bb15c2a65e0ed485038e12003c79fce612f7a6d10c96e337c3f3b46bc123e3c4d6210e36ef4990a136f8e84f71c96938cdbbc8b405a60e9395bd984a4cbba7a888f73cea433625a193cd72d76f3efae93809897f6416dc9c8abb8a11930fa3644f31a43f02c9cede074ffd1cb7e223fc2d1c163505765e89529748006ca5817b7fe30be22ca43b5f34382331daa550d291bea4c4695c52e9e56c0842b81b82a3ca9642f46c2d3755ad66e621ca656dc574576c66fc0d2bd58f1a105f7bb87d532a3a16030ea49a5321c3b23b98b0cff040be117d13b248e4cb6cac3f7e3dc6303738df8958bd667e20a5dfc3f64f4f4718d49fb7ed3c5bdd11e25049b1a7a5bd1469ad4a99e6287a729ce5664344cd3ba32c38ca3b532a9b0b1c656ced9fbb3206b3ffd7ebcacbe318bcab9c304a544c125bc1abc88be15b32fd59e71758364bedf57e0c8ec6d2e315e01daa19d02b0f90d377a85cb425565d237cf17bbf5cc28e4f10ec4a359707075a551c0127f334441c106e78afeb69b8f311378899de9fd9a299905750963ffdf5cb4a61015e03f979462f84e90cd9d35613b4888368c02948a7b12ea575412225839849eca55c6b37e8d2f78bf3541d8545caebdb5a001edcda15d07ea30f2effd2699239b3fe61e1de964aca759fbd31d077ec71af413f9bd89f2e11fb8251d8b7f376174723c4bc547ece66aa71aef164108f2f8bcc956c9febb7f7461d370b55d8aa8d27008e39f5219f8ae169b8e475935e04e4ff1d49426a375bedda1067ddc1f01ced98c1daaa197456bc154f64803a5238306f044635eadf92f2e9d1c444b7ef7761687c3f5fa14040cb0e99c83f7fac5b55e725537ad5b7313a28e57023b86a78a56eb935211c832d6d5afabbc5173fe5ebca55535200b809502262a0428301f2d2ab5ba1569f3665e32cfd953f180609a9e6fa35648966a98ba0a7462e82f2836da1cab3c80bc80a41fffcad3717a7ec51f58d1077eb9bc569fba41aa1fdad0ed7881d3411e08c2e08f5a676ff3e0f14b433e26dc30b3a852aaad7e063aa1d3c4340ffe45f41fc80fbe1ef5a1b700ef8bb12ba07b1c0ab05bc58d894122e75fcf4002301d39cf9e3cdd637486bd09128e1523ba53d03c63add022c6b200e432df425bd2ec6551c8040b846bca75bffb74d25d0a06402d6dbd4dcba2e28778aa27f4944a4fe22273b6f04cb220ef55f943476d22a89f98768ba3eab7f2f83c37996f9135d1eb629e1cc45454bdc105825aaac22b90c0ce74e108516a657f6619432fe2616ff1b8b9964831fbb885adb383ebfa0d9aee5650949f80c1a4059e8321939ba71dec13e8b00e8c32438aa424f45fbf1daa012405f12485a52c9393e9b2095119d7eef9b872e21eeb5522a968baeb02bb6c56830236d05eb72c1613f6d17adad289c47f4475ffe01eb94ec2e86fd6d89a7958de671c11e0773f2645cb4542749a3d9a84b9f5ad9de1e5ffe0ad0fd13ddfe17a31b9cf2fcd509b2fe0945264333193b88ce3cd99b34fce30c80f36f34c095cef56718029291feb01e7346da12e1241f3269814d83cd1f3eb7a6156e15b6e390b61a6e58a71020fab8838695c3afc74b298468d1732220128d87a878b34356c7561216bcdcad230ccd2d45bd6b87cdd28163a3635fea97e0aa2e920336455b01dead7e823648637377d13da1bbfe007aee263117e2c14c9aecb43e193e8d344796f278b4e558e7dca222e7beff3112f6233faeb90c031f69091f2a6676e9649d36f8eba990c23138541d693709528156fcce144f6a9b2b8bc86be85411e311b102f180e806442f6d876f9b27c72051b25d982771becb3f8a9a51aeaae237c08e756eb59afff3801b0c0de2591a47eedfa3d123919972d547c212be7808b0f724760ef8e6b17b97a70148c4336f1820d6ca7663f9f1ecac6fbf162e58951993e4ca3825d92517e04db4b39b169217897f8999e7448fef7cf18ce165d8d068edcb1163626afedf432f56bb7ccd35e20aabe4d652cf0399547e0b847a6a8d0cebd0a95c377f1e8e120e6a4caedb47db437d281a1d834e585659d20c06b373e588fa0157e06fc261f0cf5d664a382d9cabeb7077bfbdfa3035f735c8cd94e1b93e1fdd725033d0b35b16ca9e51288c8ce87f29d05d6ec94c4a8b148d5b28d7e20067bc05180c5c85db8474fa84220e83c2d2f08ef169ac2a7cd9afd7b59718a1c064f3bdaa70cb109579c8367244bb7fb6b029fc9cd689b446aab297bc9284d10d570fc63f287d0c3436872f2a6c25314d3f19be6df6e79c1083d5874531bd16aeadbd3b38810164df11cb736b55a138f23c306a93feb84376df5885b1aef3912e2d9a258ce31999a27afbd108a80ceaa475994d3dfd9efbc34faf492bb08ecbb00013fdd8e560024973f2515f8c4cb22b1d392aa9ba4d3dcdcab580bac3912b6bf9979672c4946e530fdc58a2c9633a30b17f69295492e3747e5706dffe7c836401fd87349c6a1d3c02257a86391bae8cbf8280d6af1e679405455ca2886de78ec62da75293b72dbfc15c512f1726d85def8ded1dfacea81fc738b314c3af43ca58c56843d7c193071ffc9795b5c82b98e3a3a177b773ea799f98f39ce82d201ceda915a52d98baed9bc81bcec6e5062709262316a9c4a897fda16f833c5037e3503099a7743b170998f370af0d510fc80c46e5acf64c40ef7963791d4d8d62c767aae50492f2385f83ec3adecbf6e270d2ffbeb72656efe0648db94a1159040e1b839133ee7936a2c497737d9ac8aea17b7676f7cad20d71088a21aaf4a6e097f6565e04cfd22e8b827e50964ddb1baaf4937fdb02b41060dff04231723251064115e1d42734d512ca3ad4d315e0862f49d74f563735bf9c4887a0e51345067e351cba00f43e3176ff51f338e964b165b7e04a2ba0ec0d8691ce6305a2fcafd35e476e5de05cbe787d2d83eb415f5b2e3bd085253e08f78b3ce7c92c766e064a7555f4d5476acf01443dea1b2875159f46bd06846e79e24502282443a6a8e56de30e3e30722f9f2d0bf8269292bf120ad3de2203539eb8f0b96fa808c8ae1273bcc9f0557807e1b9b7afd5bdd9cd4412f16347bc8d4739e2111aa8cc639c033980983ee634328b256794b7267042a64327daf1881b8a89b9784cdda53ab1775c5fb7aef7f82fb11f3c7cf5774b2d981cc760e95dbc12490de3072fff8adf094845191f63f59b568a5bb1f8ea3e5cd6c69f8e52de7222f724c213658461e091874346b035b7397f328f9ae72c32c57124b75fc5744e310bfb2b7f0cb7ca15cfabfd4d530fbf0f3f1d63ea702c68dd2c6152c870c2f0c3d03dcf830c8268c5c35c2bc30421905b45f9b0b76d034724fac5cdf62ca3f4affed546a1df73891003dcccee109a3b9c39a4a254583b6a7f06d5fad12c39fe1a4f6766be0ce942d58a6bd03b22f9c5e7a6d8ed51055dd0f346f6175d40a7c863818052ab4cbeeaf9ea32bb060974544735d4ab2ce96eb26ac40c60a3aee8abddc988c7d717f376a725f674c18165c4329422ace9fbeaf64a7a83a24463a543381e2b82b6994305aef400c6ad657b4ff472ccf91de6faf56c4fdb4803d145bae47cba1715fb0943426bf24a31c24057a8c5bcbc3691004d10820cfdb93d7a07c4aa87bcb044dcd3125d677b166395477cbc8e7a7c165a92e5c0c43e7d2955c3cf6f1f0ea51ce35fb9e36e76339c98f7c6d69b77a3572263eff50c347b193c5750f88d81509d81484ea330e187f620e22525fd263ad9c9d73b75babd1719b1864922ca730559fa371952641c692f0c96bd93cc94eaaa4e499d04c53c55616001bc72e3bfb77d7cccd63ebc4c0b3387129864c5bd3cc77433009930f0c18b78ee378d37fdcf708f1797d7a81b9ed421184a0ad580ee6aaab289b1f8d596c5d4047d224e9155f1c39909be364c9299dcad25f1d6da58"}, {&(0x7f00000018c0)="4ac0e5640e69f3c389d783e7a2ea4a97"}, {&(0x7f0000001900)="7487ea0577450ae34ece3c6b4ce98693cc3cbaddcbe1623e099adbcbb2c46ce1c3acb135a9b8e3e704b22890096b2f24c8657320a89089a095a97ba1399c2e05de5de01ef11959cbd007905b40368083fdc9120ebbeeeb99afdc28b902f5763853e4b0d075d6828827687dd047ba735b8fa7fc4552ee21517d33f1a3dea7e673081026d8c0c56786b5e332c1d8647aa52c8d2b20d066fa6250a16c13130cf92f894077f2bc46b6239b2dbac5a0c79c0bb278af2737106daa679cb0508537dc651e015bc61427dc2f8b550adb0f1d6d"}], 0x0, &(0x7f0000001a80)=[@flowinfo, @tclass, @pktinfo={{0x0, 0x29, 0x32, {@ipv4={[], [], @private}}}}]}}], 0x400000000000135, 0x4000014) [ 952.851139][ T35] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 953.121143][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 953.251535][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.271232][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 953.294460][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 953.306121][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 953.317879][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 953.421534][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 953.430835][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 953.441968][ T35] usb 3-1: Manufacturer: syz [ 953.448471][ T35] usb 3-1: config 0 descriptor?? [ 953.791106][ T35] rc_core: IR keymap rc-hauppauge not found [ 953.797020][ T35] Registered IR keymap rc-empty [ 953.804567][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 953.851136][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 953.891247][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 953.904278][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 953.925952][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 953.961077][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 953.966916][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 953.981081][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.011067][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.016896][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.041086][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.071085][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.076902][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.101058][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.121100][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.126873][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.151071][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.161101][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.181065][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.201060][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.206935][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.221053][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.251056][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.257369][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.271050][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.301051][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.306835][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.321045][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.351062][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.356830][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.381069][ C1] mceusb 3-1:0.0: Error: urb status = -71 08:49:17 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, 0x0) 08:49:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000580)="3c4cbc4a4d9a824df4af238fa7861b81fd844e9e", 0x14) 08:49:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x166459a6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x2, 'macvlan1\x00', {0x2}}) exit(0x0) 08:49:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:17 executing program 3: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x4, 0x13, &(0x7f0000000340)="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"}) 08:49:17 executing program 4: unshare(0x4c060200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4c01, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x5, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x3, 0x3, {0xa, 0x4e24, 0x4, @empty}}}, 0x3a) [ 954.401063][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.407246][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 954.415377][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 954.423734][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 954.430454][ T35] usb 3-1: USB disconnect, device number 64 08:49:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x63, 0x0, &(0x7f0000000480)) [ 954.510669][T24673] IPVS: ftp: loaded support on port[0] = 21 08:49:17 executing program 0: unshare(0x4c060200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4c01, 0x0) [ 954.579566][T24673] IPVS: ftp: loaded support on port[0] = 21 08:49:17 executing program 3: unshare(0x4c060200) socket$inet_icmp_raw(0x2, 0x3, 0x1) 08:49:17 executing program 4: unshare(0x4c060200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4c01, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x5, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x3, 0x3, {0xa, 0x4e24, 0x4, @empty}}}, 0x3a) 08:49:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x166459a6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x2, 'macvlan1\x00', {0x2}}) exit(0x0) [ 954.643362][T24727] IPVS: ftp: loaded support on port[0] = 21 [ 954.703168][T24736] IPVS: ftp: loaded support on port[0] = 21 [ 954.721549][T24743] IPVS: ftp: loaded support on port[0] = 21 08:49:17 executing program 1: ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) [ 954.747170][T24727] IPVS: ftp: loaded support on port[0] = 21 [ 954.825168][T24736] IPVS: ftp: loaded support on port[0] = 21 [ 954.922278][ T35] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 955.211274][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 955.342825][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.353309][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 955.380980][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 955.401026][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 955.410731][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 955.571385][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 955.580442][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 955.591473][ T35] usb 3-1: Manufacturer: syz [ 955.596922][ T35] usb 3-1: config 0 descriptor?? [ 955.901011][ T35] rc_core: IR keymap rc-hauppauge not found [ 955.906925][ T35] Registered IR keymap rc-empty [ 955.914820][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 955.951273][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 955.981074][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 955.995311][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36 [ 956.020969][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 956.050992][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 956.080967][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.086768][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 956.110959][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.130978][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.136920][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 956.160959][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.180978][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.186765][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 956.200939][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.220961][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.226751][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 956.250936][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.270962][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.276735][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 956.291471][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.320926][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.326904][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 956.350943][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.360999][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 956.380933][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.400958][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.406744][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 956.420961][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.440924][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.461423][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 956.469514][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 956.477942][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 956.484690][ T35] usb 3-1: USB disconnect, device number 65 [ 956.490968][ C1] mceusb 3-1:0.0: Error: urb status = -71 08:49:19 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, 0x0) 08:49:19 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='macvlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) 08:49:19 executing program 1: ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 08:49:19 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 08:49:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:19 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000080c0)='/dev/zero\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 08:49:19 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) 08:49:19 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x240, 0x29) 08:49:19 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000080c0)='/dev/zero\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x4a) 08:49:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', 0x0, 0x0, 0x0) 08:49:19 executing program 3: pipe(&(0x7f0000002540)={0xffffffffffffffff}) write$FUSE_STATFS(r0, 0x0, 0xfffffffffffffe6e) 08:49:19 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x400a00, 0x0) [ 957.000898][ T35] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 957.260905][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 957.422429][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.432677][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 957.453032][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 957.464696][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 957.477655][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 957.580929][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 957.589997][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 957.598750][ T35] usb 3-1: Manufacturer: syz [ 957.605778][ T35] usb 3-1: config 0 descriptor?? [ 957.900870][ T35] rc_core: IR keymap rc-hauppauge not found [ 957.907857][ T35] Registered IR keymap rc-empty [ 957.914889][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 957.951134][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 957.990976][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 958.005105][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input37 [ 958.025279][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.070869][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 958.076903][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.100849][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 958.111926][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.120832][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 958.150850][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 958.156621][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.180882][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 958.191746][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.200832][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 958.230859][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 958.238087][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.260852][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 958.280833][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.290843][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 958.310869][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 958.317778][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.331055][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 958.350837][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 958.356688][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.380830][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 958.390858][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.400813][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 958.420843][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 958.427430][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 958.436895][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 958.445274][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 958.452367][ T35] usb 3-1: USB disconnect, device number 66 08:49:21 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, 0x0) 08:49:21 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000080c0)='/dev/zero\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x2) 08:49:21 executing program 1: pselect6(0x40, &(0x7f0000001040), 0x0, 0x0, &(0x7f0000001140), &(0x7f00000011c0)={0x0}) 08:49:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x3, 0x0, &(0x7f0000007d40)) 08:49:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:21 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0) 08:49:21 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1210c0, 0x0) 08:49:21 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000080c0)='/dev/zero\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) 08:49:21 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000080c0)='/dev/zero\x00', 0x0, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(r0, 0x301, 0x0) 08:49:21 executing program 3: setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) 08:49:21 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x600000, 0x0) 08:49:21 executing program 0: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000c80)='freezer.state\x00', 0x2, 0x0) [ 959.012160][ T35] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 959.250777][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 959.410783][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.420986][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 959.431883][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 959.441564][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 959.451331][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 959.571026][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 959.580213][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 959.589546][ T35] usb 3-1: Manufacturer: syz [ 959.594804][ T35] usb 3-1: config 0 descriptor?? [ 959.890761][ T35] rc_core: IR keymap rc-hauppauge not found [ 959.896664][ T35] Registered IR keymap rc-empty [ 959.904584][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 959.940753][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 959.970961][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 959.983985][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input38 [ 960.005669][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 960.052493][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 960.070752][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.082080][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 960.090722][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.120742][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.126582][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 960.150736][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.170746][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.176632][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 960.190711][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.210755][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.216528][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 960.240718][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.250805][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 960.260710][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.290764][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.296720][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 960.310730][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.340731][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.346496][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 960.360740][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.380709][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.386500][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 960.410719][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.430721][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.436921][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 960.444961][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 960.453356][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 960.472979][ T35] usb 3-1: USB disconnect, device number 67 08:49:23 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[]) 08:49:23 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) 08:49:23 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000100)) 08:49:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x38) 08:49:23 executing program 0: lremovexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00') 08:49:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:23 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0xc0, 0x0) 08:49:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000080)="18", 0x1) 08:49:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 08:49:23 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_int(r0, 0xffff, 0x40, &(0x7f0000000040), 0x15) 08:49:23 executing program 3: r0 = socket(0x11, 0x3, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, 0x0, 0x0) 08:49:23 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x2b, &(0x7f0000000000), 0x4) [ 960.950663][ T35] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 961.210719][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 961.330701][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.340904][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 961.355022][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 961.366221][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 961.377600][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 961.470707][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 961.479770][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 961.490529][ T35] usb 3-1: Manufacturer: syz [ 961.498404][ T35] usb 3-1: config 0 descriptor?? [ 961.800666][ T35] rc_core: IR keymap rc-hauppauge not found [ 961.806561][ T35] Registered IR keymap rc-empty [ 961.813843][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.851861][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.880773][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 961.894939][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input39 [ 961.917320][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.951181][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.980638][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 962.010664][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 962.040635][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 962.070787][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 962.100632][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 962.130637][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 962.160674][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 962.190630][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 962.221212][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 962.229533][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 962.274536][ T35] usb 3-1: USB disconnect, device number 68 08:49:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_int(r0, 0xffff, 0x1, 0x0, &(0x7f00000001c0)) 08:49:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x8000000020000001, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x23, &(0x7f00000004c0)=ANY=[@ANYBLOB="10024e22ac1400bb00"/134, @ANYRES32], 0x94) 08:49:25 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x23, &(0x7f0000000580)=ANY=[], 0x40) 08:49:25 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 08:49:25 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[]) 08:49:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:26 executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$sock_int(r0, 0xffff, 0x1012, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 08:49:26 executing program 1: mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) munmap(&(0x7f0000d55000/0x3000)=nil, 0x3000) 08:49:26 executing program 3: clock_nanosleep(0x4, 0x0, &(0x7f0000000140), 0x0) 08:49:26 executing program 4: sigaltstack(&(0x7f0000ff6000/0x4000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x4) 08:49:26 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200000, 0x0) 08:49:26 executing program 0: pipe(&(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000002580)={0x2020}, 0x2020) write$tcp_congestion(r1, &(0x7f0000000000)='westwood\x00', 0x9) 08:49:26 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/69) 08:49:26 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[], 0x33) 08:49:26 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x1c9081, 0x0) 08:49:26 executing program 4: pipe(&(0x7f0000002540)={0xffffffffffffffff}) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 963.100548][ T35] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 963.390556][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 963.560847][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.571006][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 963.581885][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 963.591726][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 963.601735][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 963.700920][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 963.710000][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 963.719898][ T35] usb 3-1: Manufacturer: syz [ 963.725952][ T35] usb 3-1: config 0 descriptor?? [ 964.020514][ T35] rc_core: IR keymap rc-hauppauge not found [ 964.026506][ T35] Registered IR keymap rc-empty [ 964.034780][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 964.072164][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 964.101936][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 964.116224][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input40 [ 964.136941][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 964.182477][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 964.210503][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 964.250585][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 964.290479][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 964.330528][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 964.360502][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 964.400617][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 964.440592][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 964.480559][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 964.511241][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 964.519335][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 964.540461][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 964.546742][ T35] usb 3-1: USB disconnect, device number 69 08:49:28 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[]) 08:49:28 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x181040, 0x0) 08:49:28 executing program 0: pipe2$9p(&(0x7f0000001180), 0x80800) 08:49:28 executing program 3: pipe2(&(0x7f0000000100), 0x800) 08:49:28 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) 08:49:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={0x0}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:28 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) 08:49:28 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_all\x00', 0x0, 0x0) 08:49:28 executing program 1: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6) 08:49:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200, 0x0) faccessat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) 08:49:28 executing program 3: r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f0000000000), 0x4) 08:49:28 executing program 4: r0 = socket$inet6(0x18, 0x2, 0x0) shutdown(r0, 0x1) [ 965.410415][ T9281] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 965.650407][ T9281] usb 3-1: Using ep0 maxpacket: 16 [ 965.772154][ T9281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.782278][ T9281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 965.794509][ T9281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 965.804321][ T9281] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 965.814909][ T9281] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 965.900468][ T9281] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 965.909650][ T9281] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 965.919026][ T9281] usb 3-1: Manufacturer: syz [ 965.924519][ T9281] usb 3-1: config 0 descriptor?? [ 966.220419][ T9281] rc_core: IR keymap rc-hauppauge not found [ 966.226566][ T9281] Registered IR keymap rc-empty [ 966.231529][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 966.260464][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 966.290468][ T9281] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 966.304323][ T9281] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input41 [ 966.325492][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 966.360395][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 966.390398][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 966.420384][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 966.450389][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 966.480398][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 966.510381][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 966.540366][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 966.570482][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 966.601767][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 966.631275][ T9281] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 966.639421][ T9281] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 966.702383][T20178] usb 3-1: USB disconnect, device number 70 08:49:30 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB]) 08:49:30 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000080)=@un=@abs, 0xffffffffffffffff) 08:49:30 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) 08:49:30 executing program 3: r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000000040), 0x1) 08:49:30 executing program 4: socket(0x18, 0x3, 0x0) socket$inet6(0x18, 0x3, 0x0) 08:49:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={0x0}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:30 executing program 4: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 08:49:30 executing program 0: r0 = socket$inet6(0x18, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x18}, 0xc) 08:49:30 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000140)) 08:49:30 executing program 1: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 08:49:30 executing program 3: perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:49:30 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000001700)='ns/user\x00') [ 967.560286][T20178] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 967.810279][T20178] usb 3-1: Using ep0 maxpacket: 16 [ 967.960669][T20178] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.970838][T20178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 967.984939][T20178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 967.996064][T20178] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 968.007271][T20178] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 968.120324][T20178] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 968.129392][T20178] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 968.138030][T20178] usb 3-1: Manufacturer: syz [ 968.144444][T20178] usb 3-1: config 0 descriptor?? [ 968.450244][T20178] rc_core: IR keymap rc-hauppauge not found [ 968.456992][T20178] Registered IR keymap rc-empty [ 968.462094][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.490552][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.520378][T20178] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 968.533344][T20178] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input42 [ 968.554435][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.591530][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.620259][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.650262][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.680397][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.710649][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.740259][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.780249][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.820727][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.850249][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.880842][T20178] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 968.888901][T20178] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 968.923236][ T9281] usb 3-1: USB disconnect, device number 71 08:49:32 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB]) 08:49:32 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:49:32 executing program 0: perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:49:32 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x5, &(0x7f0000000000)=@framed={{}, [@call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:49:32 executing program 1: perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:49:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={0x0}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:32 executing program 3: socketpair(0x25, 0x5, 0x0, &(0x7f0000000140)) 08:49:32 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x20000214}]}]}}, &(0x7f0000000180)=""/153, 0x32, 0x99, 0x1}, 0x20) 08:49:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xc, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000580), 0x8) 08:49:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0}, 0x10) 08:49:32 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4, 0x4}, {0xf}, {0x0, 0x1}]}, @volatile]}}, &(0x7f0000000280)=""/176, 0x4a, 0xb0, 0x1}, 0x20) 08:49:32 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [ 969.780645][ T9281] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 970.030173][ T9281] usb 3-1: Using ep0 maxpacket: 16 [ 970.150477][ T9281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 970.150519][ T9281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 970.150544][ T9281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 970.181229][ T9281] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 970.190911][ T9281] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 970.290241][ T9281] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 970.299324][ T9281] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 970.310847][ T9281] usb 3-1: Manufacturer: syz [ 970.317225][ T9281] usb 3-1: config 0 descriptor?? [ 970.640137][ T9281] rc_core: IR keymap rc-hauppauge not found [ 970.646121][ T9281] Registered IR keymap rc-empty [ 970.653783][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 970.700110][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 970.730513][ T9281] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 970.744511][ T9281] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input43 [ 970.766535][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 970.801385][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 970.830107][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 970.860299][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 970.890144][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 970.920129][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 970.950115][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 970.980114][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 971.010109][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 971.040127][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 971.070988][ T9281] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 971.079041][ T9281] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 971.102213][ T9281] usb 3-1: USB disconnect, device number 72 08:49:34 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB]) 08:49:34 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0}, 0x10) 08:49:34 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)={[{@size={'size', 0x3d, [0x25]}}]}) 08:49:34 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0xb}]}, &(0x7f0000001240)='syzkaller\x00', 0x2, 0xc2, &(0x7f0000001300)=""/194, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:49:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000800)="460f01c9400f0d9505000000450f01c9c4a1fd70960b00000000c4c3416f4e0e0bc403ad7b6afe0f0f08c7442400c0000000c7442402f2ffffffc7442406000000000f011424c462fbf7df6536f3440f09", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000240)={0x7}, 0x7) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@flowinfo={{0x14, 0x29, 0x1600bd75}}], 0x18}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4064011}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaaae8, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:49:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:34 executing program 4: syz_io_uring_setup(0x3af2, &(0x7f0000000080)={0x0, 0x0, 0x27}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000001200)) 08:49:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400028001000240000004f8", 0x16}, {0x0, 0x0, 0x5fe}], 0x0, &(0x7f0000000000)={[{@fat=@fmask={'fmask'}}]}) 08:49:34 executing program 1: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20008004) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername(r0, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000006c0)=0x80) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x64000000, 0x4, 0xd0e0000, 0x0, 0x100, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'veth0_macvtap\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "a7a9"}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0xe003, 0xe303}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x31f) [ 971.741163][T25323] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 971.763659][T25323] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. 08:49:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:34 executing program 3: syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x3, 0x0) 08:49:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa03aa0086dd601bfc97004d8800fe800000000000000100000000000000ff02000000000000000000000000000100004e20004c90"], 0x0) shutdown(r0, 0x0) [ 971.803251][T25331] xt_NFQUEUE: number of queues (58115) out of range (got 115461) [ 971.835624][T25333] xt_NFQUEUE: number of queues (58115) out of range (got 115461) [ 971.882752][T25338] xt_cgroup: invalid path, errno=-2 [ 971.940046][T18765] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 972.190089][T18765] usb 3-1: Using ep0 maxpacket: 16 [ 972.310163][T18765] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.320447][T18765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 972.335042][T18765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 972.347294][T18765] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 972.358733][T18765] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 972.450114][T18765] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 972.459190][T18765] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 972.488811][T25354] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 972.494651][T18765] usb 3-1: Manufacturer: syz [ 972.513443][T18765] usb 3-1: config 0 descriptor?? [ 972.540011][T25354] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 972.810740][T18765] rc_core: IR keymap rc-hauppauge not found [ 972.816680][T18765] Registered IR keymap rc-empty [ 972.821589][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 972.851380][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 972.880142][T18765] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 972.893232][T18765] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input44 [ 972.914356][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 972.951327][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 972.980057][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 973.010021][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 973.040020][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 973.070034][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 973.099993][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 973.129994][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 973.161013][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 973.189993][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 973.220412][T18765] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 973.228478][T18765] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 973.293759][T18765] usb 3-1: USB disconnect, device number 73 08:49:36 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095"]) 08:49:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:36 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file1\x00', 0x0) 08:49:36 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0xc0, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001600)=""/4095, 0xfff}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 08:49:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000800)="460f01c9400f0d9505000000450f01c9c4a1fd70960b00000000c4c3416f4e0e0bc403ad7b6afe0f0f08c7442400c0000000c7442402f2ffffffc7442406000000000f011424c462fbf7df6536f3440f09", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000240)={0x7}, 0x7) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@flowinfo={{0x14, 0x29, 0x1600bd75}}], 0x18}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4064011}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaaae8, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:49:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 973.839767][T25390] xt_cgroup: invalid path, errno=-2 08:49:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000800)="460f01c9400f0d9505000000450f01c9c4a1fd70960b00000000c4c3416f4e0e0bc403ad7b6afe0f0f08c7442400c0000000c7442402f2ffffffc7442406000000000f011424c462fbf7df6536f3440f09", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000240)={0x7}, 0x7) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@flowinfo={{0x14, 0x29, 0x1600bd75}}], 0x18}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4064011}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaaae8, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:49:37 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14010000}}, &(0x7f0000001240)='syzkaller\x00', 0x2, 0xc2, &(0x7f0000001300)=""/194, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 973.946053][T25402] xt_cgroup: invalid path, errno=-2 08:49:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 973.971403][T25404] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 974.005816][T25404] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. 08:49:37 executing program 3: mq_open(&(0x7f0000000000)='^!-\x00', 0x40, 0x0, &(0x7f0000000040)={0x8, 0xa3b, 0x1, 0x101}) 08:49:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000200)=0x15, 0x4) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={0x0}}, 0x0) [ 974.076112][T25417] xt_cgroup: invalid path, errno=-2 [ 974.130235][T13420] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 974.156750][T25419] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 974.189156][T25419] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 974.369843][T13420] usb 3-1: Using ep0 maxpacket: 16 [ 974.502001][T13420] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 974.512516][T13420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 974.525451][T13420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 974.540575][T13420] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 974.550554][T13420] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 974.640014][T13420] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 974.660094][T13420] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 974.679696][T13420] usb 3-1: Manufacturer: syz [ 974.694821][T13420] usb 3-1: config 0 descriptor?? [ 975.009760][T13420] rc_core: IR keymap rc-hauppauge not found [ 975.015755][T13420] Registered IR keymap rc-empty [ 975.023649][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 975.059930][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 975.099825][T13420] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 975.113812][T13420] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input45 [ 975.136194][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 975.179818][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 975.209951][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 975.240004][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 975.269760][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 975.299760][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 975.339749][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 975.370120][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 975.409783][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 975.441171][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 975.471846][T13420] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 975.479911][T13420] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 975.512183][T18578] usb 3-1: USB disconnect, device number 74 [ 975.519682][ C1] mceusb 3-1:0.0: Error: urb status = -71 08:49:39 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095"]) 08:49:39 executing program 3: unshare(0x40060000) 08:49:39 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000080)) 08:49:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000800)="460f01c9400f0d9505000000450f01c9c4a1fd70960b00000000c4c3416f4e0e0bc403ad7b6afe0f0f08c7442400c0000000c7442402f2ffffffc7442406000000000f011424c462fbf7df6536f3440f09", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000240)={0x7}, 0x7) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@flowinfo={{0x14, 0x29, 0x1600bd75}}], 0x18}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4064011}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaaae8, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:49:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0x6c, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 976.063832][T25459] IPVS: ftp: loaded support on port[0] = 21 08:49:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) 08:49:39 executing program 4: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x13, r0, 0x0) [ 976.172399][T25482] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 976.198263][T25482] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 976.208897][T25459] IPVS: ftp: loaded support on port[0] = 21 08:49:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) 08:49:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x301}, 0x14}}, 0x0) [ 976.229463][T25499] xt_cgroup: path and classid specified 08:49:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) 08:49:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, 0x0) [ 976.342197][T25510] xt_cgroup: path and classid specified [ 976.349590][T20178] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 976.422989][T25529] xt_cgroup: path and classid specified [ 976.589550][T20178] usb 3-1: Using ep0 maxpacket: 16 [ 976.709958][T20178] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.720175][T20178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 976.731132][T20178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 976.740838][T20178] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 976.750617][T20178] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 976.839529][T20178] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 976.848634][T20178] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 976.862109][T20178] usb 3-1: Manufacturer: syz [ 976.874024][T20178] usb 3-1: config 0 descriptor?? [ 977.169471][T20178] rc_core: IR keymap rc-hauppauge not found [ 977.175439][T20178] Registered IR keymap rc-empty [ 977.183346][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 977.220807][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 977.249576][T20178] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 977.263758][T20178] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input46 [ 977.287104][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 977.329451][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 977.359471][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 977.389432][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 977.420005][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 977.449492][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 977.479420][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 977.509396][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 977.539421][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 977.569389][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 977.600396][T20178] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 977.608429][T20178] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 977.643029][ T9281] usb 3-1: USB disconnect, device number 75 08:49:41 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095"]) 08:49:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) 08:49:41 executing program 4: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, 0x0, 0x8, 0x0, 0x0) 08:49:41 executing program 3: unshare(0x40060000) 08:49:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x0, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000800)="460f01c9400f0d9505000000450f01c9c4a1fd70960b00000000c4c3416f4e0e0bc403ad7b6afe0f0f08c7442400c0000000c7442402f2ffffffc7442406000000000f011424c462fbf7df6536f3440f09", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000240)={0x7}, 0x7) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@flowinfo={{0x14, 0x29, 0x1600bd75}}], 0x18}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4064011}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaaae8, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:49:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 978.184331][T25565] xt_cgroup: path and classid specified [ 978.203429][T25569] IPVS: ftp: loaded support on port[0] = 21 08:49:41 executing program 4: r0 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 08:49:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 978.247306][T25578] xt_cgroup: path and classid specified 08:49:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:41 executing program 4: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) [ 978.319706][T25581] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 978.344568][T25581] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. 08:49:41 executing program 3: unshare(0x40060000) [ 978.469349][T18578] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 978.512665][T25616] IPVS: ftp: loaded support on port[0] = 21 [ 978.749311][T18578] usb 3-1: Using ep0 maxpacket: 16 [ 978.890647][T18578] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.910638][T18578] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 978.939210][T18578] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 978.948980][T18578] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 978.969822][T18578] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 979.089558][T18578] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 979.098611][T18578] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 979.110474][T18578] usb 3-1: Manufacturer: syz [ 979.117412][T18578] usb 3-1: config 0 descriptor?? [ 979.449179][T18578] rc_core: IR keymap rc-hauppauge not found [ 979.449190][T18578] Registered IR keymap rc-empty [ 979.449209][T18578] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 979.479160][T18578] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 979.519381][T18578] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 979.532530][T18578] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input47 [ 979.555044][T18578] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 979.589170][T18578] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 979.619171][T18578] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 979.659102][T18578] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 979.699138][T18578] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 979.739144][T18578] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 979.779108][T18578] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 979.809270][T18578] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 979.849122][T18578] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 979.879062][T18578] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 979.919588][T18578] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 979.927769][T18578] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 979.940014][T18578] usb 3-1: USB disconnect, device number 76 08:49:43 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa"]) 08:49:43 executing program 4: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 08:49:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x0, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:43 executing program 3: unshare(0x40060000) 08:49:43 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8929, &(0x7f0000000080)={'netpci0\x00'}) 08:49:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:43 executing program 4: fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) 08:49:43 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000001c0)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) [ 980.484240][T25670] IPVS: ftp: loaded support on port[0] = 21 [ 980.516841][T25679] xt_cgroup: path and classid specified 08:49:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:43 executing program 0: fsopen(&(0x7f0000000100)='bdev\x00', 0x0) 08:49:43 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e37, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 980.646097][T25710] xt_cgroup: path and classid specified [ 980.780520][ T9281] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 981.020698][ T9281] usb 3-1: Using ep0 maxpacket: 16 [ 981.139406][ T9281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.162898][ T9281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 981.205225][ T9281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 981.244637][ T9281] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 981.283244][ T9281] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 981.409213][ T9281] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 981.418852][ T9281] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 981.448844][ T9281] usb 3-1: Manufacturer: syz [ 981.459181][ T9281] usb 3-1: config 0 descriptor?? [ 981.758808][ T9281] rc_core: IR keymap rc-hauppauge not found [ 981.764742][ T9281] Registered IR keymap rc-empty [ 981.769643][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 981.799995][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 981.828911][ T9281] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 981.843117][ T9281] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input48 [ 981.864886][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 981.900246][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 981.928826][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 981.958779][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 981.988848][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 982.018809][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 982.048770][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 982.078761][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 982.108757][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 982.138772][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 982.169267][ T9281] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 982.177274][ T9281] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 982.241994][ T35] usb 3-1: USB disconnect, device number 77 08:49:45 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa"]) 08:49:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4010ae68, &(0x7f0000000000)) 08:49:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x0, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x46, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x8a01}}, 0x40}}, 0x0) 08:49:45 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x40047459, 0x0) 08:49:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:45 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "a894277e24398774f03a57d8078309542b9a1a75bccad813d00c79b3dc529e927192d9deb63511e6e2e7922eafc1d36fd871aded28b07bc6d9138cc056d902"}, 0x60) [ 982.773243][T25749] xt_cgroup: path and classid specified [ 982.802137][T25756] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 08:49:46 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/keys\x00', 0x0, 0x0) read$usbmon(r0, &(0x7f0000000a80)=""/4096, 0x1000) 08:49:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:46 executing program 4: r0 = fsopen(&(0x7f0000000080)='cgroup\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/keys\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', r1) [ 982.851854][T25772] xt_cgroup: path and classid specified 08:49:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 982.892174][T25777] xt_cgroup: path and classid specified [ 982.924818][T25783] xt_cgroup: path and classid specified [ 983.048637][T18765] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 983.308570][T18765] usb 3-1: Using ep0 maxpacket: 16 [ 983.429060][T18765] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.440361][T18765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 983.454884][T18765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 983.466458][T18765] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 983.478082][T18765] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 983.568972][T18765] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 983.578113][T18765] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 983.598557][T18765] usb 3-1: Manufacturer: syz [ 983.608258][T18765] usb 3-1: config 0 descriptor?? [ 983.918517][T18765] rc_core: IR keymap rc-hauppauge not found [ 983.924707][T18765] Registered IR keymap rc-empty [ 983.932079][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 983.968497][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 983.998608][T18765] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 984.011520][T18765] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input49 [ 984.035002][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.068548][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.098536][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.128527][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.159823][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.188518][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.219709][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.248741][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.278495][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.308505][T18765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.338872][T18765] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 984.346892][T18765] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 984.392861][T18765] usb 3-1: USB disconnect, device number 78 08:49:48 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:48 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0xe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2}, @sadb_address={0x5, 0x7, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x48}}, 0x0) 08:49:48 executing program 0: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x3, r0, 0x0) keyctl$set_timeout(0xb, r0, 0x0) 08:49:48 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa"]) 08:49:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x91}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x2245}, {0xffffffffffffffff, 0x10}], 0x1, 0x0, 0x0, 0xffffffffffffff59) ioctl$TCSETS(r1, 0x5402, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x4, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) 08:49:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:48 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:49:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)) [ 984.924998][T25820] xt_cgroup: path and classid specified 08:49:48 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:48 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x13, 0x0, &(0x7f0000000040)) 08:49:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4020ae76, &(0x7f0000000000)) [ 984.968070][T25828] xt_cgroup: path and classid specified [ 985.006691][T25838] xt_cgroup: path and classid specified 08:49:48 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 985.046501][T25843] xt_cgroup: path and classid specified 08:49:48 executing program 3: sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 985.092692][T25849] xt_cgroup: path and classid specified [ 985.238301][ T9281] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 985.478516][ T9281] usb 3-1: Using ep0 maxpacket: 16 [ 985.598340][ T9281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.609421][ T9281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 985.624141][ T9281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 985.636253][ T9281] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 985.648174][ T9281] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 985.738606][ T9281] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 985.758284][ T9281] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 985.769939][ T9281] usb 3-1: Manufacturer: syz [ 985.778677][ T9281] usb 3-1: config 0 descriptor?? [ 986.098199][ T9281] rc_core: IR keymap rc-hauppauge not found [ 986.104216][ T9281] Registered IR keymap rc-empty [ 986.112079][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.149897][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.178309][ T9281] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 986.193037][ T9281] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input50 [ 986.215557][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.249884][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.278228][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.308310][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.338211][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.368247][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.398222][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.428264][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.458304][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.488241][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.518550][ T9281] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 986.527133][ T9281] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 986.572040][ T9281] usb 3-1: USB disconnect, device number 79 08:49:50 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1"]) 08:49:50 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4020ae76, &(0x7f0000000000)) 08:49:50 executing program 3: sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 08:49:50 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) 08:49:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:50 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 987.140664][T25901] xt_cgroup: path and classid specified 08:49:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4020ae76, &(0x7f0000000000)) 08:49:50 executing program 3: sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 08:49:50 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0xa0100, 0x0) ppoll(&(0x7f0000002240)=[{r4, 0x206}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000006c0)='highspeed\x00', 0xa) socket$netlink(0x10, 0x3, 0x13) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) r7 = syz_genetlink_get_family_id$netlbl_calipso(0x0) write$binfmt_elf64(r5, &(0x7f0000000300)=ANY=[@ANYRES16=r6, @ANYBLOB="54841a85ade1183fc34903d2976d3b15bd4e2910e0dbc8358702b42decb2892a6f0c0d4974985e42af7623792f2f", @ANYRESDEC=r7, @ANYRESDEC, @ANYRESOCT, @ANYRES64], 0x100000530) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000087524c9e59bfe38fea09a34a1bf3ad68e74428b01aaa1d2361b07159c30d820c72a6834af31c0024895532c8087fef40dbba5fc108ef68060788c2cfdf78ce68579b5e59cd91d678f162506e1f6691955ac845890176643ecf646249c208f0ff96f3da01df3d", @ANYRES16=r7, @ANYBLOB="00032bbd7000fedbdf2501000000080001000000000008000100020000000800020002000000080002000200000008000200020000000800010003000000084c0c6c190000000800020002000000"], 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x40001) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x240000c0) sendfile(r2, r3, 0x0, 0x800000080004103) 08:49:50 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4020ae76, &(0x7f0000000000)) [ 987.429933][ T35] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 987.667940][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 987.787949][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.809796][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 987.843975][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 987.869440][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 987.895355][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 988.007932][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 988.026004][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 988.054307][ T35] usb 3-1: Manufacturer: syz [ 988.073462][ T35] usb 3-1: config 0 descriptor?? [ 988.407880][ T35] rc_core: IR keymap rc-hauppauge not found [ 988.414110][ T35] Registered IR keymap rc-empty [ 988.422614][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 988.457952][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 988.489505][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 988.502911][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input51 [ 988.524430][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 988.568437][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 988.598014][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 988.637858][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 988.677850][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 988.717862][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 988.757844][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 988.797829][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 988.837818][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 988.867881][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 988.897789][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 988.903999][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 988.918311][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 988.924289][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 988.938679][ C1] mceusb 3-1:0.0: Error: urb status = -71 [ 988.945613][ T35] usb 3-1: USB disconnect, device number 80 08:49:52 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1"]) 08:49:52 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:52 executing program 3: sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 08:49:52 executing program 0: timerfd_create(0x0, 0x1c00) 08:49:52 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 08:49:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind(r0, &(0x7f0000000040)=@rc, 0x80) 08:49:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:52 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) [ 989.432114][T25963] cgroup_mt_check_v1: 2 callbacks suppressed [ 989.432126][T25963] xt_cgroup: path and classid specified 08:49:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:52 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/keys\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r0, 0x0) [ 989.490260][T25975] xt_cgroup: path and classid specified 08:49:52 executing program 0: socketpair(0x1e, 0x3, 0x0, &(0x7f00000000c0)) [ 989.552623][T25981] xt_cgroup: path and classid specified [ 989.737689][ T9281] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 989.977644][ T9281] usb 3-1: Using ep0 maxpacket: 16 [ 990.099115][ T9281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.110676][ T9281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 990.123556][ T9281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 990.134468][ T9281] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 990.144252][ T9281] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 990.248963][ T9281] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 990.258059][ T9281] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 990.266089][ T9281] usb 3-1: Manufacturer: syz [ 990.273931][ T9281] usb 3-1: config 0 descriptor?? [ 990.597546][ T9281] rc_core: IR keymap rc-hauppauge not found [ 990.603497][ T9281] Registered IR keymap rc-empty [ 990.611788][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 990.648930][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 990.677725][ T9281] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 990.693201][ T9281] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input52 [ 990.715068][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 990.757719][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 990.787570][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 990.817635][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 990.857504][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 990.900259][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 990.927514][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 990.957511][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 990.987512][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.017496][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.048327][ T9281] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 991.056412][ T9281] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 991.101112][T20178] usb 3-1: USB disconnect, device number 81 08:49:54 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1"]) 08:49:54 executing program 3: r0 = fsopen(&(0x7f0000000080)='fusectl\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 08:49:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:54 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/keys\x00', 0x0, 0x0) read$usbmon(r0, &(0x7f0000000a80)=""/4096, 0x1000) 08:49:54 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x24042, 0x0) 08:49:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:54 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000022c0), 0x0, 0x0, 0x0, 0x8) 08:49:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'xfrm0\x00', {0x2, 0x0, @remote}}) 08:49:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000180), 0x0) 08:49:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 991.681920][T26021] xt_cgroup: path and classid specified 08:49:54 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 08:49:54 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, 0x0) [ 991.771851][T26040] xt_cgroup: path and classid specified [ 991.967339][ T35] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 992.237323][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 992.367333][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.377459][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 992.389237][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 992.399796][ T35] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 992.410760][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 992.517674][ T35] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 992.526757][ T35] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 992.535693][ T35] usb 3-1: Manufacturer: syz [ 992.543640][ T35] usb 3-1: config 0 descriptor?? [ 992.847393][ T35] rc_core: IR keymap rc-hauppauge not found [ 992.853317][ T35] Registered IR keymap rc-empty [ 992.861562][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 992.897490][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 992.927376][ T35] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 992.941680][ T35] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input53 [ 992.963255][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 992.997253][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 993.028526][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 993.057373][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 993.087248][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 993.117208][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 993.157257][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 993.187180][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 993.217212][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 993.247185][ T35] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 993.277885][ T35] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 993.285887][ T35] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 993.360475][T18800] usb 3-1: USB disconnect, device number 82 08:49:57 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RSTATFS(r1, &(0x7f0000000100)={0x43}, 0x43) 08:49:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:57 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000007c0)='./file0\x00', 0x801, 0x0) 08:49:57 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x140, 0x0) 08:49:57 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cb"]) 08:49:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:57 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x30d402, 0x0) 08:49:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, 0x0) 08:49:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000200)=@fragment, 0x8) [ 993.905268][T26074] xt_cgroup: path and classid specified 08:49:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:57 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) 08:49:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, 0x0, 0x0, 0x40002021, 0x0) 08:49:57 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x10d043, 0x0) [ 993.992518][T26090] xt_cgroup: path and classid specified 08:49:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, 0x0, 0xfffffffffffffd98) [ 994.080405][T26100] xt_cgroup: path and classid specified 08:49:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 994.116412][ T36] audit: type=1800 audit(1608713397.262:70): pid=26105 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16303 res=0 errno=0 [ 994.199624][ T36] audit: type=1800 audit(1608713397.292:71): pid=26105 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16303 res=0 errno=0 [ 994.202198][T26109] xt_cgroup: path and classid specified [ 994.227039][T20178] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 994.477031][T20178] usb 3-1: Using ep0 maxpacket: 16 [ 994.598551][T20178] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.608749][T20178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 994.623385][T20178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 994.635108][T20178] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 994.647102][T20178] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 994.737336][T20178] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 994.746390][T20178] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 994.758252][T20178] usb 3-1: Manufacturer: syz [ 994.763718][T20178] usb 3-1: config 0 descriptor?? [ 995.076978][T20178] rc_core: IR keymap rc-hauppauge not found [ 995.082948][T20178] Registered IR keymap rc-empty [ 995.088675][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 995.117247][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 995.147091][T20178] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 995.160423][T20178] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input54 [ 995.181934][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 995.218394][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 995.246925][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 995.278113][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 995.306910][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 995.338572][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 995.367576][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 995.396919][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 995.426926][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 995.456896][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 995.487117][T20178] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 995.495107][T20178] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 995.559005][ T9281] usb 3-1: USB disconnect, device number 83 08:49:59 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cb"]) 08:49:59 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x84) 08:49:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:49:59 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, 0x0) 08:49:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:49:59 executing program 0: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='rdma.max\x00', 0x2, 0x0) 08:49:59 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) 08:49:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000480)={'erspan0\x00', @ifru_map}) [ 996.106877][T26140] xt_cgroup: path and classid specified 08:49:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:49:59 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 08:49:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 996.396732][T20178] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 996.636706][T20178] usb 3-1: Using ep0 maxpacket: 16 [ 996.756942][T20178] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.768282][T20178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 996.779922][T20178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 996.790475][T20178] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 996.801027][T20178] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 996.887201][T20178] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 996.896269][T20178] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 996.909050][T20178] usb 3-1: Manufacturer: syz [ 996.915808][T20178] usb 3-1: config 0 descriptor?? [ 997.226640][T20178] rc_core: IR keymap rc-hauppauge not found [ 997.232544][T20178] Registered IR keymap rc-empty [ 997.240865][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.278078][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.306684][T20178] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 997.321185][T20178] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input55 [ 997.335331][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.366677][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.396622][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.426651][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.456613][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.486638][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.516617][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.546608][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.576583][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.606604][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.637605][T20178] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 997.645641][T20178] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 997.710226][T20178] usb 3-1: USB disconnect, device number 84 08:50:01 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cb"]) 08:50:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000006740)) 08:50:01 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x200, &(0x7f00000001c0)) 08:50:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f0000000080)=""/61, &(0x7f00000000c0)=0x3d) 08:50:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:50:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:01 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0, &(0x7f0000000180)) 08:50:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) 08:50:01 executing program 0: shmget(0x3, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil) 08:50:01 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 08:50:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) 08:50:01 executing program 3: semget$private(0x0, 0x2, 0x690) [ 998.576675][ T9281] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 998.836395][ T9281] usb 3-1: Using ep0 maxpacket: 16 [ 998.966520][ T9281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.976702][ T9281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 998.991620][ T9281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 999.003113][ T9281] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 999.014581][ T9281] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 999.106423][ T9281] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 999.115526][ T9281] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 999.124564][ T9281] usb 3-1: Manufacturer: syz [ 999.130606][ T9281] usb 3-1: config 0 descriptor?? [ 999.426366][ T9281] rc_core: IR keymap rc-hauppauge not found [ 999.432499][ T9281] Registered IR keymap rc-empty [ 999.437449][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.467754][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.496420][ T9281] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 999.509338][ T9281] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input56 [ 999.533961][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.566341][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.596337][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.626337][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.656297][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.687445][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.716330][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.746509][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.786307][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.816300][ T9281] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.847114][ T9281] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 999.855173][ T9281] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 999.910842][T20178] usb 3-1: USB disconnect, device number 85 08:50:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) 08:50:03 executing program 0: syz_open_dev$hiddev(&(0x7f00000001c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x2, [{0x2, &(0x7f00000003c0)=@string={0x2}}, {0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000980)={0x2c, &(0x7f00000007c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 08:50:03 executing program 3: syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x6000) 08:50:03 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000500)=""/235) 08:50:03 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff"]) 08:50:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1330, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1390) 08:50:03 executing program 3: syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000018c0)='/dev/hidraw#\x00', 0x0, 0x129002) 08:50:03 executing program 4: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x925, 0x8888, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 08:50:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1330, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1390) 08:50:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1330, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1390) 08:50:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:50:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 1000.726157][ T9281] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1000.766158][T13420] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1000.806143][T18800] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1000.996134][ T9281] usb 1-1: Using ep0 maxpacket: 32 [ 1001.007228][T13420] usb 3-1: Using ep0 maxpacket: 16 [ 1001.066112][T18800] usb 5-1: Using ep0 maxpacket: 32 [ 1001.126901][T13420] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.137135][T13420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1001.152204][T13420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1001.164370][T13420] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1001.175867][T13420] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1001.196769][T18800] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.207711][T18800] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.221579][ T9281] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1001.266435][T13420] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1001.266875][ T9281] usb 1-1: language id specifier not provided by device, defaulting to English [ 1001.275558][T13420] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1001.275578][T13420] usb 3-1: Manufacturer: syz [ 1001.298681][T13420] usb 3-1: config 0 descriptor?? [ 1001.386784][T18800] usb 5-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.40 [ 1001.395849][T18800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.403884][T18800] usb 5-1: Product: syz [ 1001.408583][T18800] usb 5-1: Manufacturer: syz [ 1001.413810][T18800] usb 5-1: SerialNumber: syz [ 1001.616024][T13420] rc_core: IR keymap rc-hauppauge not found [ 1001.622028][T13420] Registered IR keymap rc-empty [ 1001.630623][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.646083][ T9281] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1001.655451][ T9281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.666227][ T9281] usb 1-1: Product: syz [ 1001.667592][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.672616][ T9281] usb 1-1: SerialNumber: syz [ 1001.686311][T18800] usbhid 5-1:1.0: can't add hid device: -22 [ 1001.693034][T18800] usbhid: probe of 5-1:1.0 failed with error -22 [ 1001.706784][T18800] usb 5-1: USB disconnect, device number 19 [ 1001.707654][T13420] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1001.726999][T26257] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1001.740972][T13420] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input57 [ 1001.759704][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.797253][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.826025][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.856048][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.887284][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.916004][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.946426][ T9281] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1001.947580][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.985995][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1002.015990][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1002.045985][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1002.076424][T13420] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1002.084455][T13420] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1002.107210][T13420] usb 3-1: USB disconnect, device number 86 [ 1002.158665][ T9281] usb 1-1: USB disconnect, device number 16 [ 1002.455955][T18800] usb 5-1: new high-speed USB device number 20 using dummy_hcd 08:50:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, 0x0, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 08:50:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:50:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf241, 0x210200) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/56) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1000, 0x8000) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x6) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x68, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x3f, {{0x7, 0x24, 0x6, 0x0, 0x0, 'Qj'}, {0x5, 0x24, 0x0, 0xa3d6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x20, 0x6, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x0, 0x0, 0xff}, @ncm={0x6, 0x24, 0x1a, 0x1}, @mdlm_detail={0x4, 0x24, 0x13, 0x80}, @mbim_extended={0x8, 0x24, 0x1c, 0x2c3, 0x20, 0x400}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2c, 0xfa, 0x5d}}}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x89, &(0x7f0000000400)={0x5, 0xf, 0x89, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "202a8daff51e51602d22afb737822fc0"}, @generic={0x66, 0x10, 0x0, "f3e922db85254f60e8284f58cfb8e2a7c3aa0d6f365c761d866a662e842e5bb6fc7152b89e58f63b964119c9ac9173fe991801c5d87b2bd114d57d3bb895991fb9cb42953d51c1fd0454566eb96b0cb817f6b7f868271353f849674d2e91d314ffbdc5"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000880)={0x0, 0x19, 0x0, 0x0, "7506adfafe0e0f484d3f839c552e7f09179f583d917f617c45b585d5f86a3a90"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000001900)={0x6, 0x200, 0x5, 0x1}) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000001940)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "ebee5c8384"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0xfff}, [@country_functional={0x8, 0x24, 0x7, 0x9, 0x3, [0x0]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xd1, 0x3, 0x50}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xce, 0x0, 0x80}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000003500)=0x6) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000003540)=""/206) 08:50:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:05 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff"]) 08:50:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 08:50:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) [ 1002.721539][T18800] usb 5-1: Using ep0 maxpacket: 32 [ 1002.866277][T18800] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.882907][T18800] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.975822][T18765] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1002.977197][T13420] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1003.077692][T18800] usb 5-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.40 [ 1003.086981][T18800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.095001][T18800] usb 5-1: Product: syz [ 1003.100840][T18800] usb 5-1: Manufacturer: syz [ 1003.105995][T18800] usb 5-1: SerialNumber: syz [ 1003.225792][T18765] usb 4-1: Using ep0 maxpacket: 16 [ 1003.255784][T13420] usb 3-1: Using ep0 maxpacket: 16 08:50:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 08:50:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 08:50:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000000), 0xc) [ 1003.366228][T18765] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1003.381094][T13420] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.401339][T13420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 08:50:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 1003.406610][T18800] usbhid 5-1:1.0: can't add hid device: -22 [ 1003.414177][T13420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1003.437696][T13420] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1003.448450][T18800] usbhid: probe of 5-1:1.0 failed with error -22 08:50:06 executing program 0: add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000002200)) [ 1003.454440][T13420] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1003.478869][T18800] usb 5-1: USB disconnect, device number 20 08:50:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:50:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) [ 1003.507243][T26374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1003.546102][T13420] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1003.573941][T13420] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1003.583893][T26384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1003.599184][T13420] usb 3-1: Manufacturer: syz [ 1003.610167][T13420] usb 3-1: config 0 descriptor?? [ 1003.676074][T18765] usb 4-1: string descriptor 0 read error: -22 [ 1003.682636][T18765] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1003.708547][T18765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.746479][T26337] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1003.758477][T26337] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1003.786124][T18765] usb 4-1: bad CDC descriptors [ 1003.905696][T13420] rc_core: IR keymap rc-hauppauge not found [ 1003.911675][T13420] Registered IR keymap rc-empty [ 1003.927025][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1003.957022][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1003.985897][T13420] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1003.999155][T26337] udc-core: couldn't find an available UDC or it's busy [ 1004.001527][T13420] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input58 [ 1004.009767][T26337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1004.056124][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1004.074543][T18800] usb 4-1: USB disconnect, device number 7 [ 1004.085701][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1004.125683][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1004.155711][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1004.185693][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1004.215712][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1004.245892][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1004.275954][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1004.305677][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1004.335671][T13420] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1004.366119][T13420] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1004.374154][T13420] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1004.391779][T13420] usb 3-1: USB disconnect, device number 87 [ 1004.397735][ C1] mceusb 3-1:0.0: Error: urb status = -71 08:50:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x18, &(0x7f0000000340)={0x3ff, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 08:50:07 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000001700)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_nanosleep(0x0, 0x0, &(0x7f0000001740)={0x0, 0x3938700}, 0x0) poll(0x0, 0x0, 0x204) [ 1004.579056][T26424] udc-core: couldn't find an available UDC or it's busy [ 1004.587450][T26424] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 08:50:08 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="02130005330e003cf313a87a7e080038002e7095350e24263558c82edcaa047f1257f1a8c2cbff"]) 08:50:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:50:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:08 executing program 4: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="8c", 0x1) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup(r2) r4 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) timer_settime(r0, 0x0, &(0x7f0000001700)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:50:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setgroups(0x20a, &(0x7f0000000040)) 08:50:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 1004.916867][T26440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1004.928248][T26441] "syz-executor.4" (26441) uses obsolete ecb(arc4) skcipher [ 1004.944824][ T36] audit: type=1800 audit(1608713408.094:72): pid=26441 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=16277 res=0 errno=0 08:50:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 1004.956698][T26450] xt_cgroup: invalid path, errno=-2 08:50:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 08:50:08 executing program 3: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f00000020c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}, {@blksize={'blksize'}}]}}) [ 1004.990720][T26454] xt_cgroup: invalid path, errno=-2 08:50:08 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) 08:50:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x428, 0x0, 0x100, 0x100, 0x340, 0x340, 0x340, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x40}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'vlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "60de9d1322dcc7dc210534d1fc4f6639d436c2c8fb53758f4f3cc2026d3252c18d5a9a82a16aaf480c460c8b857c29888afae7e24dd3f6ce004aa9f1bb3f5104"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x478) [ 1005.034921][T26461] fuse: Bad value for 'fd' [ 1005.040440][T26461] fuse: Bad value for 'fd' [ 1005.047167][T26460] xt_cgroup: invalid path, errno=-2 [ 1005.137479][ T36] audit: type=1326 audit(1608713408.294:73): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26464 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0xffff0000 [ 1005.162582][T26468] x_tables: duplicate underflow at hook 1 08:50:08 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000001700)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_nanosleep(0x0, 0x0, &(0x7f0000001740)={0x0, 0x3938700}, 0x0) poll(0x0, 0x0, 0x204) [ 1005.225553][T20178] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1005.465496][T20178] usb 3-1: Using ep0 maxpacket: 16 [ 1005.585883][T20178] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.596070][T20178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1005.608244][T20178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1005.618853][T20178] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1005.629501][T20178] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1005.715763][T20178] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1005.727264][T20178] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1005.735258][T20178] usb 3-1: Manufacturer: syz [ 1005.747003][T20178] usb 3-1: config 0 descriptor?? [ 1006.045433][T20178] rc_core: IR keymap rc-hauppauge not found [ 1006.051377][T20178] Registered IR keymap rc-empty [ 1006.060248][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.095525][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.126829][T20178] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1006.140840][T20178] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input59 [ 1006.158400][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.195437][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.225416][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.255423][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.285404][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.315443][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.345401][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.375398][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.405735][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.435388][T20178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.466254][T20178] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1006.474268][T20178] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1006.518678][T18765] usb 3-1: USB disconnect, device number 88 08:50:10 executing program 4: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, 0x0, 0x0) 08:50:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1418, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x10d8, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1478) 08:50:10 executing program 3: r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 08:50:10 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000001700)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_nanosleep(0x0, 0x0, &(0x7f0000001740)={0x0, 0x3938700}, 0x0) poll(0x0, 0x0, 0x204) 08:50:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:10 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [], 0xa, "c70d115804"}, 0x10) 08:50:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1418, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x10d8, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1478) 08:50:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 08:50:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{}, {}, 0x26, {0x2, 0x0, @multicast2}, 'wlan0\x00'}) 08:50:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1418, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x10d8, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1478) 08:50:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x13, &(0x7f0000000340)={0x3ff, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 08:50:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x53, 0x0, &(0x7f0000001100)) 08:50:10 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 08:50:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xffffffffffffff27) 08:50:10 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)=@abs, 0x6e) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000180)=0x100, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x8, 0x99af, 0x14, @remote, @private1, 0x0, 0x20}}) 08:50:10 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000001700)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_nanosleep(0x0, 0x0, &(0x7f0000001740)={0x0, 0x3938700}, 0x0) poll(0x0, 0x0, 0x204) [ 1007.299669][ T36] audit: type=1804 audit(1608713410.454:74): pid=26536 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir095096700/syzkaller.297mXO/775/bus" dev="sda1" ino=16295 res=1 errno=0 [ 1007.385034][ T36] audit: type=1804 audit(1608713410.534:75): pid=26542 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir095096700/syzkaller.297mXO/775/bus" dev="sda1" ino=16295 res=1 errno=0 08:50:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:11 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) io_setup(0x10000, &(0x7f0000000000)) 08:50:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x300) 08:50:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x21, &(0x7f0000000ec0)={@remote, @empty}, 0xc) 08:50:11 executing program 0: r0 = fsopen(&(0x7f0000000180)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 08:50:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x15, &(0x7f0000000ec0)={@remote, @empty}, 0xc) 08:50:11 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$FUSE_STATFS(r0, &(0x7f00000000c0)={0x60}, 0x60) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000002180)={0x50}, 0xfffffffffffffd2f) 08:50:11 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)=@abs, 0x6e) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x100, 0x0) fallocate(r3, 0x0, 0x0, 0x10000101) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x8, 0x99af, 0x14, @remote, @private1, 0x0, 0x20}}) [ 1008.030181][ T36] audit: type=1804 audit(1608713411.184:76): pid=26559 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir463949845/syzkaller.Tpk8e1/587/bus" dev="sda1" ino=16384 res=1 errno=0 08:50:11 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xc281) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) [ 1008.111516][ T36] audit: type=1804 audit(1608713411.254:77): pid=26563 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir463949845/syzkaller.Tpk8e1/587/bus" dev="sda1" ino=16384 res=1 errno=0 08:50:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x31, 0x0, 0x0) [ 1008.252587][ T36] audit: type=1804 audit(1608713411.314:78): pid=26542 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir095096700/syzkaller.297mXO/775/bus" dev="sda1" ino=16295 res=1 errno=0 08:50:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) 08:50:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x10, &(0x7f0000000ec0)={@remote, @empty}, 0xc) [ 1008.326428][ T36] audit: type=1804 audit(1608713411.474:79): pid=26536 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir095096700/syzkaller.297mXO/775/bus" dev="sda1" ino=16295 res=1 errno=0 [ 1008.355966][ T36] audit: type=1804 audit(1608713411.474:80): pid=26568 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir095096700/syzkaller.297mXO/775/bus" dev="sda1" ino=16295 res=1 errno=0 08:50:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:11 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x37) getresuid(&(0x7f0000000140), 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) fallocate(r3, 0x0, 0x0, 0x10000101) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 08:50:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/6) 08:50:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x805a0108}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="64010000", @ANYRES16=r1, @ANYBLOB="fbffffffffffffffdf2567000000080001006b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x164}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x5005, 0x100) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000480)=""/86) syz_genetlink_get_family_id$devlink(0x0) 08:50:11 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/renderD128\x00', 0xdc80, 0x0) 08:50:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x19, 0x0, 0x0) 08:50:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x6, &(0x7f0000000ec0)={@remote, @empty}, 0xc) [ 1008.796260][T26583] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1008.811731][ T36] audit: type=1804 audit(1608713411.964:81): pid=26586 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir215797538/syzkaller.YPfbW4/810/bus" dev="sda1" ino=16378 res=1 errno=0 08:50:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x7ff00000}, {0x16}]}) 08:50:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x14, 0x0, 0x0, 0x7ff00000}, {0x16}]}) 08:50:12 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/193, 0xc1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0xaef6, 0x0) [ 1008.851546][T26583] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.3'. 08:50:12 executing program 3: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x800000080004105) 08:50:12 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x30000004}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 08:50:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:12 executing program 0: epoll_create1(0x0) r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) syz_genetlink_get_family_id$devlink(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000640)={0xa, 0x0, 0xfffffffd, @local, 0x1}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}], 0xc6, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x50001) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000073c0)=@deltfilter={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x8}, {0x0, 0x7}}}, 0x24}, 0x8}, 0x0) 08:50:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 08:50:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1f4a1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:50:12 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/netfilter\x00') fchdir(r0) syz_read_part_table(0x0, 0x0, 0x0) 08:50:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@private0, @private1, @private0, 0x0, 0x7fff}) 08:50:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc2(0x0) clone(0x1142d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0xf0, 0xf0, 0xf0, 0x70000000, 0xf0, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@unspec=@pkttype={{0x28, 'pkttype\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'ipvlan1\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0xd8, 0x8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) 08:50:12 executing program 3: io_setup(0x1, &(0x7f0000000180)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x800, 0x0, 0x2}]) [ 1009.700449][T26635] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 08:50:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) [ 1009.788649][T26645] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 1009.812993][T26650] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 08:50:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) [ 1009.836737][T26645] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1009.871781][T26650] xt_CT: You must specify a L4 protocol and not use inversions on it 08:50:13 executing program 3: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}], 0xc6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8}, 0x0) 08:50:13 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040)) 08:50:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:13 executing program 1: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000c47000/0x2000)=nil) 08:50:13 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) 08:50:13 executing program 0: io_setup(0xc901, &(0x7f0000000000)) socketpair(0xa, 0x80000, 0x401, &(0x7f0000000040)) 08:50:13 executing program 3: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}], 0xc6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8}, 0x0) 08:50:13 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="0200000003000000040000", 0xb, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000000440)=ANY=[]) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x3, 0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) 08:50:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='b', 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r0, 0x0, 0x0) 08:50:13 executing program 1: rt_sigaction(0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000200)) 08:50:13 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\''}}, 0x119) 08:50:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='b', 0x1, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) 08:50:13 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0x1}, 'port1\x00'}) 08:50:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() sendmmsg$unix(r0, &(0x7f00000024c0)=[{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000001c0)="d6", 0x1}], 0x2}], 0x1, 0x0) [ 1010.695095][T20178] hid-generic 0000:0000:0000.0004: item fetching failed at offset 0/1 [ 1010.703410][T20178] hid-generic: probe of 0000:0000:0000.0004 failed with error -22 08:50:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:14 executing program 3: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}], 0xc6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8}, 0x0) 08:50:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc2(0x0) clone(0x1142d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0xf0, 0xf0, 0xf0, 0x70000000, 0xf0, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@unspec=@pkttype={{0x28, 'pkttype\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'ipvlan1\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0xd8, 0x8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) 08:50:14 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) 08:50:14 executing program 0: clock_adjtime(0x0, &(0x7f0000000040)={0xabf, 0x0, 0xffffffff80000001}) 08:50:14 executing program 1: prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='/dev/vcsu\x00') 08:50:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc2(0x0) clone(0x1142d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0xf0, 0xf0, 0xf0, 0x70000000, 0xf0, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@unspec=@pkttype={{0x28, 'pkttype\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'ipvlan1\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0xd8, 0x8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) 08:50:14 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x30000004}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 08:50:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x891f, &(0x7f0000000100)={'netdevsim0\x00', @ifru_hwaddr=@random}) [ 1011.424579][T26716] xt_time: unknown flags 0x4 08:50:14 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0xffffffffffff8000]}, 0x8, 0x400) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb1a06e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2, 0xf, 0x6, 0x9, 0x3, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_sec_ctx={0x1, 0x18, 0x6, 0x18}]}, 0x18}}, 0x80) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x200c0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000004c0), 0x5}, 0x620}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX=r4, @ANYRES16, @ANYBLOB="02002bbd7000ffdbdfa06b00000c080002149ae1b57c95a5296bc6be1198ca3b", @ANYBLOB="e4b3fcdfaf28d2f54df080980ecba931899b8640680e3571ef9f074dae8564120ea7471c8734c4922298574f4a6257e44b155e19c37e446191e681261f836eaf0def84dce214261ca313fcce6833276cb1e4ba13668bbfeb3b2d24ed222970f99d7b7ea5a4df5dfe03e1ddabb042e3695f67e387c26fa634b4d9bfda45b262ff431c6d56785cf7fed495c7f6bc172da0e3349c47edadc95de0995d94dd27b749364800bdfa1bac1bbd842f1dbd4cf73f2a5311fa106c0c63b59bfa82276f2a1aadff1ad04e31a1ad41059976b940f5452f93e868863e967bd1ffb3e1515b9853f73052c3a841cfcb0c79e84358150018"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x800, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x300, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040880}, 0x4) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", ""]}, 0x24}}, 0x80000) poll(&(0x7f0000000200)=[{r1}, {r0, 0x1103}], 0x2, 0x1) 08:50:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc2(0x0) clone(0x1142d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0xf0, 0xf0, 0xf0, 0x70000000, 0xf0, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@unspec=@pkttype={{0x28, 'pkttype\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'ipvlan1\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0xd8, 0x8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) [ 1011.507302][T26725] xt_time: unknown flags 0x4 [ 1011.513637][T26728] device lo entered promiscuous mode [ 1011.529387][T26728] Y­4`Ò˜: renamed from lo 08:50:14 executing program 3: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}], 0xc6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8}, 0x0) [ 1011.564983][T26740] xt_time: unknown flags 0x4 08:50:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc2(0x0) clone(0x1142d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0xf0, 0xf0, 0xf0, 0x70000000, 0xf0, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@unspec=@pkttype={{0x28, 'pkttype\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'ipvlan1\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0xd8, 0x8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) 08:50:15 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(r1) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffa) 08:50:15 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {0x0, 0xdb3a}, [0x8]}) 08:50:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:15 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', &(0x7f00000001c0)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000200)={0x0, "f52d2c846858c28fa99b7988280bcac4cc61967949baaba1504f0a9c20e8ee708187fe3964803b345bcb56259692aff03bc67a526cc2c612311f63df931ffa13"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0, r0) 08:50:15 executing program 1: syz_open_dev$binderN(&(0x7f0000000800)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1012.276501][T26763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1012.291801][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 1012.291811][ T36] audit: type=1800 audit(1608713415.444:88): pid=26766 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16267 res=0 errno=0 08:50:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getflags(r0, 0x401) 08:50:15 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='c', 0xfffff, r0) [ 1012.325224][T26765] xt_time: unknown flags 0x4 [ 1012.333185][T26763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1012.399128][ T36] audit: type=1800 audit(1608713415.554:89): pid=26766 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16267 res=0 errno=0 08:50:15 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) read(r0, 0x0, 0x0) [ 1012.515963][T26787] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1012.549076][T26791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 08:50:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:16 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 08:50:16 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x5452, &(0x7f0000000300)={0x0, @l2tp={0x2, 0x0, @multicast2}, @xdp, @rc={0x1f, @fixed}}) 08:50:16 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) socket(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) dup3(r2, r0, 0x0) 08:50:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:16 executing program 1: syz_open_dev$binderN(&(0x7f0000000800)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 08:50:16 executing program 3: syz_open_dev$ndb(&(0x7f0000002380)='/dev/nbd#\x00', 0x0, 0x0) [ 1013.129851][T26808] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1013.141837][T26806] IPVS: ftp: loaded support on port[0] = 21 08:50:16 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:16 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 08:50:16 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1013.250544][T26846] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1013.656849][T26806] IPVS: ftp: loaded support on port[0] = 21 08:50:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:17 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:17 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 08:50:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:17 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) readahead(r1, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) socket(0x10, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 08:50:17 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x81]) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x7, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 08:50:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='c', 0xfffff, r2) 08:50:17 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 08:50:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:17 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:17 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, @l2tp={0x2, 0x0, @multicast2}, @xdp, @rc={0x2, @fixed}}) 08:50:17 executing program 2: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) readahead(r0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r0, 0x4) socket(0x10, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 08:50:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:17 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:17 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, @l2tp={0x2, 0x0, @multicast2}, @xdp, @rc={0x1f, @fixed}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='syzkaller1\x00'}) 08:50:17 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) readahead(r1, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) socket(0x10, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 08:50:17 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 08:50:18 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000004", @ANYRES32=r2, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x3c) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 08:50:18 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f00000001c0)=""/214) 08:50:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1014.854028][T26923] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:18 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) [ 1014.918016][T26931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 08:50:18 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) [ 1014.959848][T26931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1014.985351][T26935] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1015.054941][T26972] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1015.077096][T26972] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 1015.189470][T26931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 08:50:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000000)) 08:50:18 executing program 1: getresgid(&(0x7f0000000000), 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0, 0x4, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0xc080) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x20) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000800)=[{}, {}, {}], &(0x7f0000000840)=0x18) 08:50:18 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x201}, 0x14}}, 0x0) 08:50:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0x11, 0x3, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_VERSION={0x5, 0x7}]}}}]}, 0x48}}, 0x0) 08:50:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000000)={0x1}) 08:50:18 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) [ 1015.706393][T26997] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:18 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0x11, 0x3, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_VERSION={0x5, 0x7}]}}}]}, 0x48}}, 0x0) [ 1015.882829][T27033] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:19 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, @l2tp={0x2, 0x0, @multicast2}, @rc={0x1f, @fixed}, @vsock={0x28, 0x0, 0x0, @local}, 0x4}) 08:50:19 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r0}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:19 executing program 0: r0 = syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) mount$fuse(0x0, 0x0, 0x0, 0x48000, &(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYRESDEC=r0]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f00000000c0)=0x80, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 08:50:19 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r0, 0x80003, 0x0) 08:50:19 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, @l2tp={0x2, 0x0, @multicast2}, @rc={0x1f, @fixed}, @vsock={0x28, 0x0, 0x0, @local}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='erspan0\x00', 0x20000000}) 08:50:19 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000000300)={0x0, @l2tp={0x2, 0x0, @multicast2}, @xdp, @rc={0x1f, @fixed}, 0x4, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)='erspan0\x00'}) 08:50:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:19 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r0}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) [ 1016.544209][T27054] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:19 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000000300)={0x0, @l2tp={0x2, 0x0, @multicast2}, @xdp, @rc={0x1f, @fixed}, 0x4, 0x0, 0x0, 0x0, 0x700, &(0x7f00000002c0)='erspan0\x00'}) [ 1016.629660][T27069] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1016.749478][T27080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:20 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r0}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:20 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000000300)={0x0, @l2tp={0x2, 0x0, @multicast2}, @xdp, @can, 0x24, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='ip6_vti0\x00', 0x4}) 08:50:20 executing program 0: r0 = syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) mount$fuse(0x0, 0x0, 0x0, 0x48000, &(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYRESDEC=r0]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f00000000c0)=0x80, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 08:50:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000004", @ANYRES32=r2, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x3c) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xfffe, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1017.406917][T27093] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 08:50:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:20 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r0}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:20 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="c4add6820ad44f15b00eb91d856231ed54918a0dfe80201101c8767b2a8a7134af1b67ff113814a19944b83482f484104afd5f3398ad18c6c1faa5babe77ac86a0e268c9d33afda84865bbdc1908ea9fe2aa1f6c08f1cb839bbfee15e5ace64c43a2b5e864c0070616c777e0a3ec8b36e87adfaa6fe5a42e589014a837793fda73ba0d89b5a3adad5200950ded88d2b374b3b5e2d3e161a22d7b1295a0027c43567871d59f7502d939a1cafe32386d04b43c9893f6c37a6a297209bded68862623e54f", 0xc3, 0x8008, 0x0, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x1, 0x8, 0x0, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xffff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008810}, 0x4040000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000440)={0x0}}, 0x8000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@remote, @local}, &(0x7f0000000500)=0xc) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x300, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r1 = syz_open_dev$usbfs(&(0x7f0000000740)='/dev/bus/usb/00#/00#\x00', 0x6, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000780)={0x8000, 0x2, "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"}) r2 = syz_open_dev$audion(&(0x7f00000008c0)='/dev/audio#\x00', 0xfb, 0xc000) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200900}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0xc, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x200000d0) [ 1017.491787][T27102] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1017.530387][T27130] bond2: (slave vcan1): The slave device specified does not support setting the MAC address 08:50:20 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x8953, &(0x7f0000000300)={0x0, @l2tp={0x2, 0x0, @multicast2}, @xdp, @rc={0x1f, @fixed}}) [ 1017.569683][T27130] bond2: (slave vcan1): Error -22 calling dev_set_mtu 08:50:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)='[,)*\\-{(\x00') [ 1017.741691][T27102] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 1017.756391][T27102] bond2: (slave vcan1): Error -22 calling dev_set_mtu 08:50:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:21 executing program 1: getresgid(&(0x7f0000000000), &(0x7f0000000040), 0x0) setresgid(0xee01, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000500)=@nfc_llcp, &(0x7f0000000580)=0x80) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') 08:50:21 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r0}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000004", @ANYRES32=r2, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x3c) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xfffe, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 08:50:21 executing program 0: r0 = syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) mount$fuse(0x0, 0x0, 0x0, 0x48000, &(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYRESDEC=r0]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f00000000c0)=0x80, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 08:50:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:21 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r0}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) [ 1018.286325][T27176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1018.310336][T27176] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 1018.321687][T27176] bond3: (slave vcan1): Error -22 calling dev_set_mtu 08:50:21 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:21 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x80108906, 0x0) 08:50:21 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) [ 1018.526464][T18765] usb 2-1: new high-speed USB device number 18 using dummy_hcd 08:50:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) [ 1019.066895][T18765] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1019.082759][T18765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.093053][T18765] usb 2-1: Product: syz [ 1019.099836][T18765] usb 2-1: Manufacturer: syz [ 1019.116679][T18765] usb 2-1: SerialNumber: syz [ 1019.157120][T18765] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1019.726798][T18800] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1019.931159][T18765] usb 2-1: USB disconnect, device number 18 [ 1020.807092][T18800] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1020.814034][T18800] ath9k_htc: Failed to initialize the device [ 1020.823870][T18765] usb 2-1: ath9k_htc: USB layer deinitialized [ 1021.187202][T18765] usb 2-1: new high-speed USB device number 19 using dummy_hcd 08:50:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x7, 0x6, 0x3}, 0x14}}, 0x0) 08:50:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:24 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:24 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x2, 0x400, 0x8}, 0x40) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000080), 0x0}, 0x20) 08:50:24 executing program 0: r0 = syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) mount$fuse(0x0, 0x0, 0x0, 0x48000, &(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYRESDEC=r0]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f00000000c0)=0x80, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 08:50:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x0) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:24 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:24 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) readlink(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 08:50:24 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001580)=[{0x0, 0x7ffffffff000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 1021.288607][T27268] __nla_validate_parse: 6 callbacks suppressed [ 1021.288621][T27268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:24 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x3}, 0x14}}, 0x0) [ 1021.396001][T27285] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:24 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0xb0fa70153eee03dc) fcntl$dupfd(r0, 0x4, 0xffffffffffffffff) 08:50:24 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:24 executing program 4: r0 = socket(0x0, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1021.509159][T27296] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1021.640317][T27304] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-'}, 0xffffffffffffff31, 0x0) 08:50:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 08:50:27 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 08:50:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000080) 08:50:27 executing program 4: r0 = socket(0x0, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x0) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:27 executing program 4: r0 = socket(0x0, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:27 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcsa\x00', 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) [ 1024.321755][T27319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:27 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 08:50:27 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcsa\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 08:50:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 08:50:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40044) [ 1024.446186][T27330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:27 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 08:50:27 executing program 4: r0 = socket(0x10, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:27 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00000022c0), 0x8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x0) 08:50:27 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1f) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcsa\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) dup3(r2, r1, 0x0) 08:50:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) fstat(r1, &(0x7f0000000340)) [ 1024.605111][T27353] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x0) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:28 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x10}, 0x0) 08:50:28 executing program 0: timer_create(0x1, &(0x7f0000000000)={0x0, 0x28, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) 08:50:28 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f00000022c0), 0x8) signalfd(r0, &(0x7f0000000cc0), 0x8) 08:50:28 executing program 4: r0 = socket(0x10, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000080)={{}, {@void}}) 08:50:28 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcsa\x00', 0x0, 0x0) getsockname$unix(r0, 0x0, 0x0) 08:50:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000200)={'sit0\x00', 0x0}) 08:50:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1f) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcsa\x00', 0x0, 0x0) r2 = dup2(r0, r1) write$cgroup_freezer_state(r2, 0x0, 0x0) 08:50:28 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x10}, 0x0) [ 1025.162378][T27376] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:28 executing program 4: r0 = socket(0x10, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:28 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x10}, 0x0) [ 1025.285972][T27390] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 08:50:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0x0, 0x0) 08:50:29 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x10}, 0x0) 08:50:29 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) 08:50:29 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0}}, 0x800) 08:50:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x100) getsockopt$sock_int(r0, 0x1, 0x1, 0x0, &(0x7f0000002640)) 08:50:29 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x10}, 0x0) 08:50:29 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x80080, 0x0) [ 1026.045918][T27411] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:29 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000240)=0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000004c0)) 08:50:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20004000) 08:50:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x10}, 0x0) 08:50:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}}, 0x40000) 08:50:30 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x101, 0x0) 08:50:30 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 08:50:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r0, 0x0, 0x0) 08:50:30 executing program 1: pipe2$9p(&(0x7f00000000c0), 0x800) 08:50:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x4) 08:50:30 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, 0x0, 0x0) [ 1026.895235][T27440] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000180)=0x8, 0x4) 08:50:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(0x0, 0x0, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:30 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000100)=0x15e, 0x4) 08:50:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x20, 0x4) 08:50:30 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, 0x0) 08:50:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xfffffffffffffffe, 0x4) 08:50:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:30 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) 08:50:30 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000500)=0xd535) 08:50:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0xc, 0x0, &(0x7f0000000440)) [ 1027.745219][T27468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 1027.883002][T27491] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(0x0, 0x0, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:31 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x80247008, 0x0) 08:50:31 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000500)=0xd535) 08:50:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x7, 0x0, &(0x7f0000000440)) 08:50:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgrp(0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee01}}}], 0x20}, 0x0) 08:50:31 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000080c0)='/dev/zero\x00', 0x0, 0x0) ioctl$CHAR_RAW_BSZGET(r0, 0x80081270, 0x0) 08:50:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x20, 0x4) [ 1028.629219][T27504] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:31 executing program 0: fanotify_init(0x9, 0x0) [ 1028.769945][T27524] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(0x0, 0x0, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:32 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) 08:50:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0xf, 0x0, &(0x7f0000000440)) 08:50:32 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/102, &(0x7f0000000080)=0x66) 08:50:32 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:32 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000100)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 08:50:32 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000240), 0x4) 08:50:32 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) [ 1029.498744][T27538] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:32 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1029.663253][T27565] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000), 0x0, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:33 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x10}, 0x0) 08:50:33 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) 08:50:33 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000100)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 08:50:33 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000600)={'HL\x00'}, &(0x7f0000000640)=0x1e) 08:50:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:33 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000080)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x0, 0x0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}) 08:50:33 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x1c}, 0x1, 0x10}, 0x0) 08:50:33 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) [ 1030.355023][T27576] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:33 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000100)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 08:50:33 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000000)) [ 1030.496980][T27597] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:34 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x1c}, 0x1, 0x10}, 0x0) 08:50:34 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) 08:50:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000), 0x0, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:34 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000100)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 08:50:34 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000280)={0xffffffe0}) 08:50:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1031.208518][T27610] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:34 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) 08:50:34 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x1c}, 0x1, 0x10}, 0x0) 08:50:34 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) 08:50:34 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)) 08:50:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:34 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x2, 0x1, 0x4}) 08:50:34 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) 08:50:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000), 0x0, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:35 executing program 0: mlockall(0x3) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x0) 08:50:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8935, &(0x7f0000000040)={'geneve1\x00', @ifru_ivalue}) 08:50:35 executing program 1: ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000500)) 08:50:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:35 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/self/net/pfkey\x00', 0x143842, 0x0) 08:50:35 executing program 1: ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000500)) 08:50:35 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x400448c9, &(0x7f0000000180)) 08:50:35 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x20) [ 1032.096251][T27654] __nla_validate_parse: 2 callbacks suppressed [ 1032.096265][T27654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:35 executing program 1: ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000500)) 08:50:35 executing program 2: syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x343000) getegid() select(0x40, &(0x7f0000000000)={0x4, 0x67, 0x0, 0x800, 0x0, 0x8000, 0x2}, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x7, 0x5, 0x2, 0x6, 0x3}, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x3, 0xfb, 0x11b813c8, 0x0, 0x9322}, &(0x7f00000000c0)) clone(0x14821000, &(0x7f0000000400)="38029cdc0b23dcd2aa9ea88cf2d84dfa3614680d4504603ac271b07d4a0d533e2416a4dbb8fb88691218a787387cbbd8aa3009065e38919db83510b8de48f1f327d5d31167bd7fba5080e4a8df9142bb91384d32d2501e2b7d5d7aabc467b9594b69aad2ca3b278e4c241531b02e5ec8081d6e120e26f4ea", &(0x7f0000000340), &(0x7f0000000200), &(0x7f0000000380)="9a6d8e1ec65acbabc1b9c79b79b04eafb9767fcb7ebf89b188e66dd91747bdedff6af11c701c994faa619ca0e17c45e53518453106309fd28d62e5781c4f9839610769ffdb6912a82162d2a1c7ac90cf2bd0698c2d77cb98290a9fdd") [ 1032.235387][T27672] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{0xffffffffffffffff, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:36 executing program 3: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x410000, 0x0) 08:50:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:36 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0xe6001, 0x0) 08:50:36 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) 08:50:36 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r0, &(0x7f0000000300)=@qipcrtr, &(0x7f0000000080)=0x80) 08:50:36 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 08:50:36 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x0, @sdr}) 08:50:36 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x0, 0x258, 0x578, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}) 08:50:36 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) [ 1032.966693][T27690] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:36 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x58) 08:50:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1033.152266][T27710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{0xffffffffffffffff, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:36 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340)='/proc/self/net/pfkey\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000000)=""/50, 0x32) 08:50:36 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) 08:50:36 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000001880)) 08:50:36 executing program 0: syz_mount_image$nfs(&(0x7f0000001280)='nfs\x00', &(0x7f00000012c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)) 08:50:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:37 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xfff, 0x1, 0x0, "474b1509a76f8845f474b18b94650de4d14dd2e5986cb794f185445e3f4f91bd"}) 08:50:37 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) 08:50:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000002440)=[{0x0, 0x0, 0x13c}], 0x0, &(0x7f0000002500)) 08:50:37 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000400)={0x0, "800dba6ee6a001a681055065ba9473722324e731b45a6db562fae06e6c57bbce645b833f07b11288e641fef3784e15d960b1edf92da70f42cbc1f211e2f9d5ea5fa50c50a2ca14ad7bb4036a3c216fe688b5c4c995406113985351557c511eca6060aa99b9b02bc03bb7a9d582d54dc1321b8c9492c5f8504a39dfd34e8002f4"}) [ 1033.839800][T27723] NFS: Device name not specified [ 1033.840923][T27724] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1033.860549][T27723] NFS: Device name not specified 08:50:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:37 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1}) [ 1033.986063][T27741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:37 executing program 3: syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', 0x0, 0x6, 0x1, &(0x7f0000002100)=[{0x0}], 0x0, &(0x7f0000002180)={[{','}, {'&*@[\\$+]!'}, {'\'.\'.\'&$-{'}, {'[(-{'}, {'-\x06'}], [{@obj_type={'obj_type', 0x3d, '(-{:['}}, {@subj_type={'subj_type', 0x3d, '/'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_type={'obj_type', 0x3d, ':((\\\xb8'}}]}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x4000084) 08:50:37 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) 08:50:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{0xffffffffffffffff, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x14}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) 08:50:37 executing program 2: syz_mount_image$cramfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000002100)=[{0x0}], 0x0, 0x0) 08:50:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:37 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$FUSE_STATFS(r0, &(0x7f00000000c0)={0x60}, 0xfffffffffffffefb) 08:50:37 executing program 2: perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1034.691795][T27753] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:37 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net\x00') openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) 08:50:37 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) 08:50:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:37 executing program 0: r0 = openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) 08:50:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @loopback}}}}}, 0x0) 08:50:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}}, 0x0) [ 1034.808635][T27770] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:38 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'Y|\\', 0x28, 0x0, 0x0, @empty, @mcast2, {[@hopopts={0x0, 0x3, [], [@ra, @hao={0xc9, 0x10, @private2}, @jumbo]}]}}}}}, 0x0) 08:50:38 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) 08:50:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), 0x4) 08:50:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x0, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:38 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) 08:50:38 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000008240)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="db515d723b634a67cc807d43c5e5e4cce11ab7e50ac27028f1e058b593e0d02b38252c6cbe67584837c69e66b6edfa426c5153f8d166", 0x36}, {&(0x7f0000000080)="c65251007844f49451cbd7d3a7d0135b2aba90dbfbc17e7879b12860d11be888ec88d7eec85256d4db23b87ba96af0b773bd172676bc9a8d01057c0b59f4a2077b3f4477e046369d7c2a1c2167e046ddc14d14dcbeb24c48d1bc4f7ef4410dca23396077f15b994a3ee317b012c2f1c70443cbcfd357df89b0c00b14", 0x7c}, {&(0x7f0000000200)="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", 0xa97}], 0x3}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x0, @mcast1, 0x7}, 0x1c, 0x0}}, {{&(0x7f0000001500)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c, 0x0}}], 0x3, 0x20040001) 08:50:38 executing program 0: creat(&(0x7f0000002200)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000002280)='./file0\x00', 0xffffffffffffffff, 0xee01, 0x0) 08:50:38 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000200004c44, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, 0x48) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 08:50:38 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) [ 1035.562901][T27793] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:38 executing program 2: r0 = openat$dir(0xffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/248, 0x33) [ 1035.648649][T27807] NFS: Device name not specified 08:50:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000004080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 08:50:38 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) [ 1035.723480][T27813] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:39 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) 08:50:39 executing program 3: creat(&(0x7f0000002200)='./file0\x00', 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x77359400}}) 08:50:39 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x28, 0x14, 0x1, 0x0, 0x0, {0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "d0ec265c63bb6dcbd93880fc9b"}]}, 0x28}}, 0x0) 08:50:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x0, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:39 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000040c0)={0x14, 0x25, 0x1, 0x0, 0x0, "", [@generic='8']}, 0x14}], 0x1}, 0x0) 08:50:39 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) 08:50:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 08:50:39 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000500)) 08:50:39 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x14, 0x1, 0x0, 0x0, {0x10}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "ad3e9259b6d6de4314"}]}, 0x24}}, 0x0) 08:50:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'lo\x00', @ifru_flags}) 08:50:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:39 executing program 2: r0 = socket(0x2, 0x2, 0x0) connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc) 08:50:39 executing program 0: syz_mount_image$afs(&(0x7f0000000200)='afs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) [ 1036.657398][T27858] afs: Unknown parameter 'defcontext' [ 1036.677778][T27858] afs: Unknown parameter 'defcontext' 08:50:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x0, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 08:50:40 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000500)) 08:50:40 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @auto=[0x36, 0x52, 0x31, 0x30, 0x34, 0x37, 0x0, 0x31]}, &(0x7f0000000080)={0x0, "f1ce0d886ca718879507fd1ac40a82dc5c9c58b6686e0bb514e0a707bd50591a44240fb30c9c909540fb20201a361bf1c804ec596bb1c383e3ee9cb099a41066"}, 0x48, 0xfffffffffffffffb) 08:50:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:40 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000900)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000012c0)={0x0, 0x0, r0}) 08:50:40 executing program 0: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000800, &(0x7f0000000440)={[{@source={'source', 0x3d, '%'}}]}) 08:50:40 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000500)) 08:50:40 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) socket(0x10, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) 08:50:40 executing program 3: syz_read_part_table(0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x6692, 0x0, &(0x7f0000001e40), 0x84, 0x0) 08:50:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1037.290676][T27869] kAFS: unparsable volume name [ 1037.310386][T27869] kAFS: unparsable volume name 08:50:40 executing program 0: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000800, &(0x7f0000000440)={[{@source={'source', 0x3d, '%'}}]}) 08:50:40 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1037.392065][T27880] IPVS: ftp: loaded support on port[0] = 21 [ 1037.459454][T27892] kAFS: unparsable volume name [ 1037.505909][T27880] IPVS: ftp: loaded support on port[0] = 21 08:50:41 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000500)) 08:50:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:41 executing program 0: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000800, &(0x7f0000000440)={[{@source={'source', 0x3d, '%'}}]}) 08:50:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)) r2 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, 0x0, 0x0, 0x0) 08:50:41 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x101001) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 08:50:41 executing program 2: perf_event_open(&(0x7f0000000100)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:50:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r4, 0x3, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}}, 0x0) 08:50:41 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) [ 1038.156641][T27942] kAFS: unparsable volume name 08:50:41 executing program 3: add_key(&(0x7f0000000800)='rxrpc\x00', 0x0, &(0x7f0000000880)="601c4d7763b285303419c23938125e51a177003ee219a82ff430fb548ee55ea0", 0x20, 0xfffffffffffffffc) 08:50:41 executing program 0: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000800, &(0x7f0000000440)={[{@source={'source', 0x3d, '%'}}]}) 08:50:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:41 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @input_terminal={0xc}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 08:50:41 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) [ 1038.299165][T27956] kAFS: unparsable volume name [ 1038.622223][T13420] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1038.902341][T13420] usb 3-1: Using ep0 maxpacket: 16 08:50:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)) r2 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, 0x0, 0x0, 0x0) 08:50:42 executing program 3: request_key(0x0, &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='-\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={'sha224-ni\x00'}}) syz_open_dev$vim2m(0x0, 0x0, 0x2) 08:50:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:42 executing program 0: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000800, &(0x7f0000000440)={[{@source={'source', 0x3d, '%'}}]}) 08:50:42 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) 08:50:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:42 executing program 1: r0 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) 08:50:42 executing program 0: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000800, &(0x7f0000000440)={[{@source={'source', 0x3d, '%'}}]}) [ 1039.041195][T27974] could not allocate digest TFM handle sha224-ni [ 1039.055231][T13420] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 08:50:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1039.081541][T13420] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1039.097006][T27982] could not allocate digest TFM handle sha224-ni 08:50:42 executing program 0: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000800, &(0x7f0000000440)={[{@source={'source', 0x3d, '%'}}]}) [ 1039.322846][T13420] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1039.331893][T13420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.367238][T13420] usb 3-1: Product: syz [ 1039.379922][T13420] usb 3-1: Manufacturer: syz [ 1039.393328][T13420] usb 3-1: SerialNumber: syz [ 1039.752620][T13420] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1039.783435][T13420] usb 3-1: USB disconnect, device number 89 [ 1040.432847][T13420] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1040.672949][T13420] usb 3-1: Using ep0 maxpacket: 16 [ 1040.793325][T13420] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1040.804150][T13420] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1040.973073][T13420] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1040.982131][T13420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.994323][T13420] usb 3-1: Product: syz [ 1040.998483][T13420] usb 3-1: Manufacturer: syz [ 1041.007103][T13420] usb 3-1: SerialNumber: syz 08:50:44 executing program 2: setuid(0xee00) open$dir(&(0x7f000000dac0)='./file0\x00', 0x44040, 0x0) 08:50:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 08:50:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:44 executing program 3: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x800) 08:50:44 executing program 0: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', 0x0, 0x0, 0x0, 0x0, 0x1000800, &(0x7f0000000440)={[{@source={'source', 0x3d, '%'}}]}) 08:50:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)) r2 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, 0x0, 0x0, 0x0) 08:50:44 executing program 3: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @input_terminal={0xc}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 08:50:44 executing program 0: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', 0x0, 0x0, 0x0, 0x0, 0x1000800, &(0x7f0000000440)={[{@source={'source', 0x3d, '%'}}]}) 08:50:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000300)={0x0, 0x1, &(0x7f0000000240)="9f"}) 08:50:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1041.323175][T13420] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1041.359735][T13420] usb 3-1: USB disconnect, device number 90 08:50:44 executing program 0: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', 0x0, 0x0, 0x0, 0x0, 0x1000800, &(0x7f0000000440)={[{@source={'source', 0x3d, '%'}}]}) 08:50:44 executing program 2: syz_mount_image$afs(&(0x7f00000000c0)='afs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='flock=local,flock']) [ 1041.506600][T28083] afs: Bad value for 'flock' [ 1041.526487][T28083] afs: Bad value for 'flock' [ 1041.633486][T18765] usb 4-1: new high-speed USB device number 8 using dummy_hcd 08:50:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 08:50:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:45 executing program 0: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@source={'source', 0x3d, '%'}}]}) 08:50:45 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_io_uring_setup(0x1aac, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) [ 1041.893301][T18765] usb 4-1: Using ep0 maxpacket: 16 [ 1041.927949][T28096] __nla_validate_parse: 1 callbacks suppressed [ 1041.927964][T28096] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1041.947506][T28097] kAFS: unparsable volume name 08:50:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)) r2 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, 0x0}, 0x0, 0x0) [ 1042.024959][T18765] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1042.035809][T18765] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1042.046760][T18765] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1042.057831][T18765] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1042.233431][T18765] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1042.242874][T18765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.256060][T18765] usb 4-1: Product: syz [ 1042.260274][T18765] usb 4-1: Manufacturer: syz [ 1042.269513][T18765] usb 4-1: SerialNumber: syz [ 1042.648991][T18765] usb 4-1: USB disconnect, device number 8 [ 1043.303781][T18800] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1043.543866][T18800] usb 4-1: Using ep0 maxpacket: 16 [ 1043.664265][T18800] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1043.675163][T18800] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1043.684812][T18800] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1043.695802][T18800] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1043.866088][T18800] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1043.875360][T18800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.883326][T18800] usb 4-1: Product: syz [ 1043.887521][T18800] usb 4-1: Manufacturer: syz [ 1043.892192][T18800] usb 4-1: SerialNumber: syz 08:50:47 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:'}, &(0x7f0000000080)={0x0, "f1ce0d886ca718879507fd1ac40a82dc5c9c58b6686e0bb514e0a707bd50591a44240fb30c9c909540fb20201a361bf1c804ec596bb1c383e3ee9cb099a41066"}, 0x48, 0xfffffffffffffffb) keyctl$invalidate(0x15, r0) 08:50:47 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) 08:50:47 executing program 0: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 08:50:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:47 executing program 1: get_mempolicy(0x0, &(0x7f00000001c0), 0xffff, &(0x7f0000ffb000/0x2000)=nil, 0x3) 08:50:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)) r2 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, 0x0}, 0x0, 0x0) 08:50:47 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x5, 0x100010, r0, 0x83000000) 08:50:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @private}], 0x10) 08:50:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x8, 0xca9e}, 0x40) [ 1044.183231][T28151] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:47 executing program 0: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1044.238779][T18800] usb 4-1: USB disconnect, device number 9 08:50:47 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000340), 0x4) [ 1044.286323][T28181] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:47 executing program 1: socketpair(0x10, 0x2, 0x0, &(0x7f00000000c0)) 08:50:47 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000180)) 08:50:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:47 executing program 0: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 08:50:47 executing program 3: clock_getres(0x0, &(0x7f0000000300)) [ 1044.470089][T28199] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)) r2 = syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x4) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, 0x0}, 0x0, 0x0) 08:50:48 executing program 1: epoll_create(0x10000) 08:50:48 executing program 3: r0 = getpid() capget(&(0x7f0000001340)={0x19980330, r0}, &(0x7f0000001380)) 08:50:48 executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000080)='3\x00', 0x2) 08:50:48 executing program 0: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) 08:50:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:48 executing program 1: socketpair(0x22, 0x0, 0x9, &(0x7f0000000000)) 08:50:48 executing program 3: socketpair(0x1d, 0x0, 0x2, &(0x7f0000000000)) [ 1044.999901][T28208] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1045.017095][T28212] kAFS: No cell specified 08:50:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:48 executing program 0: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) 08:50:48 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 08:50:48 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007fff) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(r1) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 1045.088653][T28220] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1045.143716][T28225] kAFS: No cell specified [ 1045.206556][ T36] audit: type=1804 audit(1608713448.355:90): pid=28230 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir463949845/syzkaller.Tpk8e1/673/bus" dev="sda1" ino=16130 res=1 errno=0 [ 1045.265837][ T36] audit: type=1804 audit(1608713448.355:91): pid=28230 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir463949845/syzkaller.Tpk8e1/673/bus" dev="sda1" ino=16130 res=1 errno=0 [ 1045.305432][ T36] audit: type=1804 audit(1608713448.365:92): pid=28231 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir463949845/syzkaller.Tpk8e1/673/bus" dev="sda1" ino=16130 res=1 errno=0 [ 1045.331029][ T36] audit: type=1804 audit(1608713448.365:93): pid=28231 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir463949845/syzkaller.Tpk8e1/673/bus" dev="sda1" ino=16130 res=1 errno=0 08:50:48 executing program 3: capget(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)) 08:50:48 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x1, 0x4) 08:50:48 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) 08:50:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:48 executing program 0: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) 08:50:49 executing program 5: clone(0x20900, 0x0, 0x0, 0x0, 0x0) 08:50:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000048c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @private0, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@rthdr_2292={{0x18}}], 0x18}}], 0x2, 0x0) 08:50:49 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 08:50:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) [ 1045.869010][T28241] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1045.869028][T28238] kAFS: No cell specified 08:50:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:49 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) 08:50:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000048c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0}}], 0x2, 0x0) 08:50:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf000}}}, 0x24}}, 0x0) 08:50:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:49 executing program 2: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000080)="0f", 0x1, 0xffffffffffff0912}, {&(0x7f0000000140)="b9", 0x1, 0x100000001}, {&(0x7f0000000180)="88", 0x1}], 0x0, 0x0) [ 1045.977853][T28255] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1045.988049][T28256] ptrace attach of "/root/syz-executor.5"[28254] was attempted by "/root/syz-executor.5"[28256] 08:50:49 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 08:50:49 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) 08:50:49 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000190000000000000000940f95"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) r1 = memfd_create(&(0x7f00000001c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0h\x00\x00\x00\x00k\xc0\xa5velindf\r\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x13\x02\xfaw\xaa\xef\x96\xfbi\xf8\x00\bbQ\xd8gC\xb2-\xa1s\xeb\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\f7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x9e\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2JY\x8f\x19\x19\"\xe1Se:\xc9\x81\xda%\xaf*\x00\x18\xac35S\xc2\xb0\xf7<\xaf\xfa\x1dG\xc9dbaTM\xc1\x00\xe4\xd0\x94`\xb1}-\x1a\xe8MU\xc4\xb4\xc3\xcb0\x8a\xdaeQ\x15f\xfd\xa3O\xa5;H\xbf]=\xf8\x80\x94K\xa9\v\x9d\xa6\xab|\xa6n\x87\x80K\xeb\x95\xe4\xc2z\xad\xc4\x8d\xf1W\xad+`\xdb\xd2@U\x80H\xd0\xb4\xbe\xa8\xbbN\xce\x98\xbc\xee\xb6H\xa72', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x40003) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r2, r1, 0x0, 0xffffff10) 08:50:49 executing program 5: timer_create(0xa1059e19bcb8f467, 0x0, &(0x7f0000000080)) 08:50:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1046.074897][T28265] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:49 executing program 2: keyctl$set_reqkey_keyring(0xf, 0xfffffffd) 08:50:49 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000004740)='./file0\x00', 0xffff, 0x1, &(0x7f0000004800)=[{&(0x7f0000004780), 0x0, 0x7984}], 0x8008, 0x0) 08:50:49 executing program 1: syz_mount_image$vfat(&(0x7f0000004700)='vfat\x00', &(0x7f0000004740)='./file0\x00', 0x0, 0x0, &(0x7f0000004800), 0x0, &(0x7f0000004840)={[], [{@euid_lt={'euid<'}}]}) 08:50:49 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000004c0), 0x4) [ 1046.173660][T28279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:49 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/189, 0x34}], 0x1, 0x0, 0x0) 08:50:49 executing program 3: syz_mount_image$vfat(&(0x7f0000004700)='vfat\x00', &(0x7f0000004740)='./file0\x00', 0x0, 0x0, &(0x7f0000004800), 0x8008, &(0x7f0000004840)) 08:50:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:49 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:50:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0cfdff", 0x54, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x22, 0xa}, @fastopen={0x4, 0x2}, @md5sig={0x13, 0x12, "67dac79ed4aecc78ed658a9f35a6e17c"}, @timestamp={0x8, 0xa}, @mptcp=@syn={0x1e, 0xc}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 08:50:49 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) clone(0x80000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x11a, 0x0}) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() tkill(r3, 0x25) 08:50:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x2000c090) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0xa6ff8034}}], 0x1, 0x0) socket(0xa, 0x802, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000280)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202030e2fc1e9fe6778a5a33a0f0e12cdf7b108c29fc0151371bd18b4a254461311c1537aae29d00428db8c9900b8a6a95f54f8d2a3ff0c7bc2e4648045430d49fce1ea5e5e7e893f5c09413d0944f5e9afbeeee4f7ae05c7cd12cf7d87618eadd1a02130d11d2e7163e6c481688f483a741bb857f2ce6d4aa8326bf75a25e06c2bc52530f21af3ab19e674537fdc7b455db5c1f64335050c6578350b13695f57322385325202837de7227e849", 0xf6, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="696f636861727365743d61736369692c0069b8e4e24aecaa3260003c00"/44]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540)='NLBL_CALIPSO\x00') 08:50:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$CHAR_RAW_BSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000000)) exit_group(0x0) clone(0x4000091005d7d, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') exit(0x0) setfsgid(0xee01) preadv(r0, &(0x7f0000000500), 0x1f7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 08:50:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6b829}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 08:50:49 executing program 5: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, 0x0) 08:50:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:49 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000400)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x42) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) syz_genetlink_get_family_id$netlbl_mgmt(0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="0400d6941ab517f08eab8528bd7000fbdbdf2520"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) dup2(r1, r3) 08:50:49 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000400)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x42) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) syz_genetlink_get_family_id$netlbl_mgmt(0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0400d6941ab517f08eab8528bd7000fbdbdf25200000000c00a8ac929900080000041f000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) dup2(r1, r3) 08:50:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1046.406094][T28308] ptrace attach of "/root/syz-executor.1"[28307] was attempted by "/root/syz-executor.1"[28308] 08:50:49 executing program 1: clock_adjtime(0x0, &(0x7f0000000080)={0x101}) 08:50:49 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000002980)=[{&(0x7f0000001880)="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", 0x1f7, 0x9}]) [ 1046.521481][ T36] audit: type=1804 audit(1608713449.665:94): pid=28330 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605193892/syzkaller.javO3i/598/bus" dev="sda1" ino=16282 res=1 errno=0 08:50:49 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa080, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000080)={0xa, 0x4e22, 0x1000000080000, @dev}, 0x1c, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x80200, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 08:50:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1046.595668][ T36] audit: type=1804 audit(1608713449.707:95): pid=28330 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir605193892/syzkaller.javO3i/598/bus" dev="sda1" ino=16282 res=1 errno=0 [ 1046.637610][ T36] audit: type=1804 audit(1608713449.707:96): pid=28328 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir463949845/syzkaller.Tpk8e1/680/bus" dev="sda1" ino=15788 res=1 errno=0 [ 1046.691107][ T36] audit: type=1804 audit(1608713449.707:97): pid=28328 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir463949845/syzkaller.Tpk8e1/680/bus" dev="sda1" ino=15788 res=1 errno=0 [ 1046.731752][ T36] audit: type=1804 audit(1608713449.727:98): pid=28330 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir605193892/syzkaller.javO3i/598/bus" dev="sda1" ino=16282 res=1 errno=0 [ 1046.766971][ T36] audit: type=1804 audit(1608713449.727:99): pid=28338 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir463949845/syzkaller.Tpk8e1/680/bus" dev="sda1" ino=15788 res=1 errno=0 08:50:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:50 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000400)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x42) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) syz_genetlink_get_family_id$netlbl_mgmt(0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0400d6941ab517f08eab8528bd7000fbdbdf25200000000c00a8ac929900080000041f000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) dup2(r1, r3) 08:50:50 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000400)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x42) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) syz_genetlink_get_family_id$netlbl_mgmt(0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="0400d6941ab517f08eab8528bd7000fbdbdf2520"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) dup2(r1, r3) 08:50:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa080, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000080)={0xa, 0x4e22, 0x1000000080000, @dev}, 0x1c, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x80200, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 08:50:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1047.226523][T28373] __nla_validate_parse: 4 callbacks suppressed [ 1047.226537][T28373] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1047.273445][T28377] kvm [28370]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x4000001b data 0xffff5ffe0000000f [ 1047.292659][T28377] kvm [28370]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000050 data 0xffff86fe00000037 08:50:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa080, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000080)={0xa, 0x4e22, 0x1000000080000, @dev}, 0x1c, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x80200, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 08:50:50 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000400)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x42) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) syz_genetlink_get_family_id$netlbl_mgmt(0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0400d6941ab517f08eab8528bd7000fbdbdf25200000000c00a8ac929900080000041f000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) dup2(r1, r3) 08:50:50 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000400)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x42) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) syz_genetlink_get_family_id$netlbl_mgmt(0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="0400d6941ab517f08eab8528bd7000fbdbdf2520"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) dup2(r1, r3) [ 1047.364666][T28389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1047.419588][T28394] kvm [28370]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x4000001b data 0xffff5ffe0000000f [ 1047.434760][T28394] kvm [28370]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000050 data 0xffff86fe00000037 08:50:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa080, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000080)={0xa, 0x4e22, 0x1000000080000, @dev}, 0x1c, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x80200, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 08:50:50 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000400)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x42) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) syz_genetlink_get_family_id$netlbl_mgmt(0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0400d6941ab517f08eab8528bd7000fbdbdf25200000000c00a8ac929900080000041f000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) dup2(r1, r3) 08:50:50 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000400)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x42) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) syz_genetlink_get_family_id$netlbl_mgmt(0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="0400d6941ab517f08eab8528bd7000fbdbdf2520"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) dup2(r1, r3) [ 1047.562444][T28410] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:50 executing program 0: capget(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)) 08:50:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:50 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 1047.636306][T28418] kvm [28415]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x4000001b data 0xffff5ffe0000000f [ 1047.670548][T28418] kvm [28415]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000050 data 0xffff86fe00000037 08:50:50 executing program 5: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000000c0)) 08:50:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x103, 0x1}, 0x20) r1 = openat$ptmx(0xffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) dup2(r1, r0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) 08:50:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1047.767735][T28435] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:51 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000400)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x4004000) dup2(r1, r2) 08:50:51 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000400)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x42) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) syz_genetlink_get_family_id$netlbl_mgmt(0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) write$P9_ROPEN(r2, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x0, 0x3}, 0xffffffff}}, 0x18) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x3, 0x4) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0400d6941ab517f08eab8528bd7000fbdbdf25200000000c00a8ac929900080000041f000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) dup2(r1, r3) [ 1047.906975][T28451] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1047.920780][T28447] kvm [28441]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x4000001b data 0xffff5ffe0000000f [ 1047.944521][T28448] kvm [28444]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x4000001b data 0xffff5ffe0000000f 08:50:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1047.972618][T28447] kvm [28441]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000050 data 0xffff86fe00000037 [ 1047.991841][T28448] kvm [28444]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000050 data 0xffff86fe00000037 [ 1048.030093][T28461] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:51 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000400)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x4004000) dup2(r1, r2) 08:50:51 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x38, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x2000c090) socket(0xa, 0x802, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000280)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202030e2fc1e9fe6778a5a33a0f0e12cdf7b108c29fc0151371bd18b4a254461311c1537aae29d00428db8c9900b8a6a95f54f8d2a3ff0c7bc2e4648045430d49fce1ea5e5e7e893f5c09413d0944f5e9afbeeee4f7ae05c7cd12cf7d87618eadd1a02130d11d2e7163e6c481688f483a741bb857f2ce6d4aa8326bf75a25e06c2bc52530f21af3ab19e674537fdc7", 0xd8, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="696f636861727365743d61736369692c0069b8e4e24aecaa3260003c00"/44]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540)='NLBL_CALIPSO\x00') [ 1048.221988][T28478] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:51 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200006000000000000b9010000000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1101000000000000000001130000000022001701", 0xa0, 0x8800}, {&(0x7f0000014600)="2200170100000000011700080000000008007809140b2a3a0802", 0x1a, 0x8b800}], 0x0, &(0x7f0000000600)={[{@mode={'mode'}}]}) 08:50:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:51 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000400)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x4004000) dup2(r1, r2) 08:50:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:51 executing program 3: r0 = openat$full(0xffffff9c, &(0x7f0000006040)='/dev/full\x00', 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 08:50:51 executing program 1: openat$ttyS3(0xffffff9c, &(0x7f0000000300)='/dev/ttyS3\x00', 0x0, 0x0) 08:50:51 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000400)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x4004000) dup2(r1, r2) [ 1048.347303][T28490] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x4a4}}) 08:50:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:51 executing program 3: syz_read_part_table(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x3, &(0x7f0000001e40)=[{&(0x7f0000001a40)="0f", 0x1}, {&(0x7f0000001b00)=' ', 0x1, 0xffffffff}, {&(0x7f0000001c00)='e', 0x1}], 0x0, 0x0) 08:50:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1048.544585][T28510] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:51 executing program 5: syslog(0x2, &(0x7f0000002400)=""/171, 0xab) 08:50:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:51 executing program 3: socket(0xb, 0x807, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000400)="8081", 0x2, 0x1600}], 0x1800485, &(0x7f0000000080)={[{@nouid32='nouid32'}]}) [ 1048.747744][T28536] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:52 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) r2 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x0, 0x2011, r2, 0x0) 08:50:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:52 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 08:50:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:52 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) r2 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x0, 0x2011, r2, 0x0) 08:50:52 executing program 0: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:52 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000001380)=[{0x0, 0x0, 0xfffffffffffffff8}]) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:50:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:52 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f00000053c0)='TIPCv2\x00') 08:50:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:52 executing program 1: io_setup(0x10000, &(0x7f00000000c0)=0x0) io_submit(r0, 0x0, 0x0) 08:50:52 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) r2 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x0, 0x2011, r2, 0x0) 08:50:52 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) 08:50:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1049.344657][T28593] kvm [28590]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x4000001b 08:50:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:52 executing program 0: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:52 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) r2 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x0, 0x2011, r2, 0x0) 08:50:52 executing program 1: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:52 executing program 3: add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000240)={0x0, "96cfa8cd8cbce74ef7760137ed46ce541ccab207cb2e54a8e7c79dbd336e94ea9cafbceb53336b6e2916b8cb7d174f5700"}, 0x48, 0xfffffffffffffffd) 08:50:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1049.552697][T28619] kvm [28617]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x4000001b 08:50:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:52 executing program 0: open$dir(&(0x7f0000000080)='./file0\x00', 0xc28c0, 0x0) 08:50:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 08:50:52 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f000000a780)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) 08:50:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:50:52 executing program 0: sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) 08:50:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1049.765017][T28644] kvm [28640]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x4000001b 08:50:53 executing program 5: getrandom(&(0x7f00000000c0)=""/131, 0x83, 0x3) 08:50:53 executing program 3: perf_event_open(&(0x7f0000001480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x4) 08:50:53 executing program 1: syz_mount_image$iso9660(&(0x7f00000008c0)='iso9660\x00', &(0x7f0000000900)='./file1\x00', 0x0, 0x0, &(0x7f0000000ec0), 0x0, &(0x7f0000001080)) 08:50:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x8001, @none}, 0xe) 08:50:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:53 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000004240)='ns/cgroup\x00') 08:50:53 executing program 3: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) socket(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000003c80)={0x0, 0x0, 0x0}, 0x5) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x804) syz_genetlink_get_family_id$nl80211(&(0x7f0000003e80)='nl80211\x00') sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) syz_open_procfs$namespace(0x0, 0x0) 08:50:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 08:50:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:53 executing program 0: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x1052c0) 08:50:53 executing program 5: add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="e1", 0x1, 0xfffffffffffffffe) 08:50:53 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000500)={0x0, "0b4fa410ba0f74194c2c8a55bfee085ee0feb97786a1df431cd1dc21cc2ec7980205a74698787f28615792ee55057e2b00cc9e9d11f039046dc56b1509b1f6d4"}, 0x48, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000440)='ceph\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0) 08:50:53 executing program 3: add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 08:50:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:53 executing program 5: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)='\x00') 08:50:53 executing program 0: add_key$fscrypt_v1(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000001c0)={0x0, "5a3c9674c952342d4102dd0cca9794ca0e18404f839e50a7f3165bca106ff7276a69e294c3ca49fbb20c3214d8d95b7135457707923f83d0cc7f43539b1550c1"}, 0x48, 0xffffffffffffffff) 08:50:53 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0xfffffffffffffffe}]) 08:50:53 executing program 5: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, &(0x7f0000000440)="f9", 0x1, 0xfffffffffffffffd) 08:50:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:53 executing program 0: syz_open_dev$vcsn(&(0x7f0000000900)='/dev/vcs#\x00', 0x0, 0x60440) 08:50:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:53 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, "7b8fc2bc5182ec81c37c8f8712e48dcd64ec0b53dcc8cef96cb635dc35bb979546f5a3e5156a8c938288c4"}}, 0x143) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 08:50:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:50:53 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 08:50:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000003280)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003240)={&(0x7f0000001100)={0x1ec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_MATCH={0x7d, 0x5b, "4fe6e4de4d888c66df1c2a1fd5642f7a2e32a8867ca2e020bcb511e0027f471e1e30ba7feb742749567d7b877288195293cb28f222701dbfa2daa2be4679d45328cef1097209bacbb663776ae4f3e9feeae3745233894705d52a46ddd3bba64aea6db83984301f0372b1e567f2d60c294d3704a5382436dbac"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x1001, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x59, 0x5b, "b5b19a45bc60534b36417bf3b804e32e9a8de8cb62453f8a525660fcea21bbf700205478dd6a51410fc74706ed745cd926bfdc67cd9bb284650c5a4f3b391e48d739ecfd3b181006e409a390a88c7c3d41782858ce"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xda9, 0x5b, "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"}]}, 0x1ec4}}, 0x0) [ 1050.285820][T20178] hid (null): unknown global tag 0xe [ 1050.291968][T20178] hid-generic 0000:0000:0000.0005: collection stack underflow [ 1050.326745][T20178] hid-generic 0000:0000:0000.0005: item 0 4 0 12 parsing failed 08:50:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:53 executing program 1: r0 = getpgrp(0x0) process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/245, 0xf5}, {&(0x7f0000000100)=""/56, 0x38}], 0x2, &(0x7f0000000440)=[{&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000340)=""/242, 0xf2}], 0x2, 0x0) 08:50:53 executing program 0: syz_read_part_table(0x0, 0x2, &(0x7f00000001c0)=[{0x0, 0x0, 0x9}, {&(0x7f0000000100), 0x0, 0xfffffffffffffffe}]) [ 1050.369476][T20178] hid-generic: probe of 0000:0000:0000.0005 failed with error -22 [ 1050.403336][ T35] hid (null): unknown global tag 0xe [ 1050.412521][ T35] hid-generic 0000:0000:0000.0006: collection stack underflow 08:50:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000162, 0x0) 08:50:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) [ 1050.432918][ T35] hid-generic 0000:0000:0000.0006: item 0 4 0 12 parsing failed [ 1050.447471][ T35] hid-generic: probe of 0000:0000:0000.0006 failed with error -22 08:50:53 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @auto=[0x39, 0x0, 0x36]}, &(0x7f00000013c0)={0x0, "fe93b57954950e42f0a8399548d10c28a9f5c24e92d3dc100a5da9d77bcdce655def2f9e25a1d261a36013b1abc096900c3d46113f0756fae697cbc350a66d14"}, 0x48, 0xfffffffffffffffc) 08:50:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:53 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '{'}}, 0x119) write$UHID_INPUT(r0, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) 08:50:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0xd, 0x4) 08:50:53 executing program 0: timer_create(0x0, &(0x7f0000001440)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}, 0x0) 08:50:53 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000003e80)='nl80211\x00') sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1050.636021][ T35] hid-generic 0000:0000:0000.0007: item fetching failed at offset 0/1 [ 1050.664725][ T35] hid-generic: probe of 0000:0000:0000.0007 failed with error -22 08:50:53 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000001780)={&(0x7f00000010c0), 0xc, &(0x7f0000001100)={&(0x7f00000012c0)={0x18, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x4}]}, 0x18}}, 0x0) 08:50:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:53 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f000000a780)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) io_setup(0xffff, &(0x7f0000000100)) [ 1050.693905][T18800] hid-generic 0000:0000:0000.0008: item fetching failed at offset 0/1 [ 1050.716505][T18800] hid-generic: probe of 0000:0000:0000.0008 failed with error -22 08:50:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:53 executing program 3: sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 08:50:53 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f000000a780)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 08:50:53 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000003e80)='nl80211\x00') 08:50:54 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '{'}}, 0x119) write$UHID_DESTROY(r0, &(0x7f00000002c0), 0x4) 08:50:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}, 0x0) 08:50:54 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x74e, &(0x7f0000000000)) 08:50:54 executing program 4: socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1050.924895][ T9281] hid-generic 0000:0000:0000.0009: item fetching failed at offset 0/1 [ 1050.949011][ T9281] hid-generic: probe of 0000:0000:0000.0009 failed with error -22 08:50:54 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000006d40)) 08:50:54 executing program 3: syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x0, 0x8001) [ 1050.980282][T18800] hid-generic 0000:0000:0000.000A: item fetching failed at offset 0/1 [ 1051.007000][T18800] hid-generic: probe of 0000:0000:0000.000A failed with error -22 08:50:54 executing program 4: socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0xf9f}]}) 08:50:54 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000012c0)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @void}}}, 0x14}}, 0x0) 08:50:54 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x1004, 0x0, 0x0, 0x0, 0x0, '{'}}, 0x119) write$UHID_DESTROY(r0, &(0x7f00000002c0), 0x4) 08:50:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0xf9f}]}) 08:50:54 executing program 1: syz_open_dev$vcsn(&(0x7f0000000900)='/dev/vcs#\x00', 0x1, 0x60440) 08:50:54 executing program 4: socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) 08:50:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:54 executing program 3: timer_create(0x2, 0x0, &(0x7f00000018c0)) timer_settime(0x0, 0x0, &(0x7f0000001900)={{0x77359400}}, &(0x7f0000001940)) 08:50:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0xf9f}]}) [ 1051.234220][ T9281] hid-generic 1004:0000:0000.000B: item fetching failed at offset 0/1 [ 1051.252989][ T9281] hid-generic: probe of 1004:0000:0000.000B failed with error -22 08:50:54 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 08:50:54 executing program 1: add_key$fscrypt_v1(&(0x7f0000000140)='logon\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="f9", 0x1, 0xfffffffffffffffd) 08:50:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0xf9f}]}) 08:50:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 1051.320000][ T9281] hid-generic 1004:0000:0000.000C: item fetching failed at offset 0/1 [ 1051.356686][ T9281] hid-generic: probe of 1004:0000:0000.000C failed with error -22 08:50:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:50:54 executing program 1: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000002580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 08:50:54 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="82", 0x1, 0xfffffffffffffffe}]) 08:50:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:54 executing program 0: io_setup(0x1ff, &(0x7f00000011c0)=0x0) io_submit(r0, 0x0, 0x0) 08:50:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 08:50:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x39, 0x0, &(0x7f00000000c0)) 08:50:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x3, &(0x7f00000001c0)={0x10}, 0xc) [ 1051.544282][T28881] loop5: detected capacity change from 16383 to 0 08:50:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x2c, 0x0, &(0x7f00000000c0)) 08:50:54 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000840)={&(0x7f0000000540)=@name={0x1e, 0x2, 0x0, {{}, 0x3}}, 0x10, 0x0}, 0x0) 08:50:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 08:50:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x2e, 0x0, &(0x7f00000000c0)) [ 1051.673974][T28881] loop5: detected capacity change from 16383 to 0 08:50:54 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_cred(r0, 0x7, 0x11, 0x0, 0x0) 08:50:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 08:50:54 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x0, 0x1429, 0x1}, 0x40) 08:50:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 08:50:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xf, 0x0, &(0x7f0000000040)) 08:50:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 08:50:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)) 08:50:55 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000100)={'hsr0\x00', @ifru_map}) 08:50:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xa, 0x0, &(0x7f0000000040)) 08:50:55 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x60, &(0x7f0000000300)=[{&(0x7f0000000200)="f4", 0x1}], 0x1, 0x0, 0x0, 0x1000e}}], 0x4000000000001ea, 0x0) 08:50:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 08:50:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x3, 0x4) 08:50:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x2, 0x0, &(0x7f00000000c0)) 08:50:55 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$qrtr(r0, &(0x7f0000000000), 0xc) 08:50:55 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x60, &(0x7f0000000300)=[{&(0x7f0000000200)="f4", 0x1}], 0x1, 0x0, 0x0, 0x1000e}}], 0x4000000000001ea, 0x0) 08:50:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002a80)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x34}}, 0x0) 08:50:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xbc3}, 0x40) 08:50:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x6, 0xb, 0x0, 0x0) 08:50:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 08:50:55 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x541b, &(0x7f0000000100)={'hsr0\x00', @ifru_map}) 08:50:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x6, 0x0, &(0x7f00000000c0)) 08:50:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:55 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x60, &(0x7f0000000300)=[{&(0x7f0000000200)="f4", 0x1}], 0x1, 0x0, 0x0, 0x1000e}}], 0x4000000000001ea, 0x0) 08:50:55 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000100)={'hsr0\x00', @ifru_map}) [ 1052.268202][T28975] __nla_validate_parse: 21 callbacks suppressed [ 1052.268217][T28975] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:55 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000240)) 08:50:55 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x80004040) 08:50:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 08:50:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000000008000c, 0x8, &(0x7f0000000200)=[{&(0x7f0000000140)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000011000000b138d8447495b25a38517e1411f64d55010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff01", 0x403, 0xc00}, {&(0x7f0000010d00)="ed4100006f776e2135e77af7d8f4655fd8f4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000000840)="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", 0x282, 0x1980}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000000c0)=ANY=[]) 08:50:55 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x60, &(0x7f0000000300)=[{&(0x7f0000000200)="f4", 0x1}], 0x1, 0x0, 0x0, 0x1000e}}], 0x4000000000001ea, 0x0) 08:50:55 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0}, 0x20) 08:50:55 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="db", 0x1}, {&(0x7f0000000240)="14", 0x1}], 0x2}, 0x0) [ 1052.468683][T28990] kvm_hv_set_msr: 28 callbacks suppressed [ 1052.468698][T28990] kvm [28985]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x4000001b data 0xffff5ffe0000000f [ 1052.498603][T28990] kvm [28985]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000050 data 0xffff86fe00000037 08:50:55 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_cred(r0, 0x7, 0x11, 0x0, 0x0) 08:50:55 executing program 5: ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) pipe(0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 1052.539034][T29008] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x10, 0x0, &(0x7f00000000c0)) 08:50:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 08:50:55 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self\x00', 0x40, 0x0) 08:50:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000001440)=""/160, &(0x7f0000001500)=0xa0) 08:50:55 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0xc02c0, 0x0) 08:50:55 executing program 0: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xb) [ 1052.686424][T29029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1052.713602][T29028] kvm [29021]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x4000001b data 0xffff5ffe0000000f 08:50:55 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@size={'size'}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) 08:50:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1052.756054][T29028] kvm [29021]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000050 data 0xffff86fe00000037 [ 1052.809011][T29031] ================================================================== [ 1052.817111][T29031] BUG: KCSAN: data-race in dput / select_collect [ 1052.823449][T29031] [ 1052.825761][T29031] write to 0xffff88801576e6c0 of 4 bytes by task 8484 on cpu 1: [ 1052.833382][T29031] select_collect+0xaf/0x2a0 [ 1052.837976][T29031] d_walk+0x298/0x4c0 [ 1052.840184][T29053] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1052.842564][T29031] shrink_dcache_parent+0x85/0x3c0 08:50:55 executing program 5: io_setup(0xfe67, &(0x7f0000000000)=0x0) io_destroy(r0) [ 1052.842591][T29031] d_invalidate+0x70/0x1b0 [ 1052.861853][T29031] proc_invalidate_siblings_dcache+0x1e3/0x2d0 [ 1052.868000][T29031] proc_flush_pid+0x16/0x20 [ 1052.872504][T29031] release_task+0xb01/0xd30 [ 1052.877010][T29031] wait_consider_task+0xf89/0x1820 [ 1052.882126][T29031] do_wait+0x1b1/0x4e0 [ 1052.886197][T29031] kernel_wait4+0x13c/0x1a0 [ 1052.890700][T29031] __x64_sys_wait4+0x7a/0x100 [ 1052.895380][T29031] do_syscall_64+0x39/0x80 [ 1052.899793][T29031] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1052.906166][T29031] 08:50:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8}}]}}}]}, 0x78}}, 0x0) [ 1052.909401][T29031] read to 0xffff88801576e6c0 of 4 bytes by task 29031 on cpu 0: [ 1052.917023][T29031] dput+0x2f/0x420 [ 1052.921304][T29031] proc_invalidate_siblings_dcache+0x1eb/0x2d0 [ 1052.927457][T29031] proc_flush_pid+0x16/0x20 [ 1052.931958][T29031] release_task+0xc1e/0xd30 [ 1052.936448][T29031] do_exit+0xeb1/0x1630 [ 1052.940590][T29031] do_group_exit+0xc8/0x170 [ 1052.945101][T29031] get_signal+0xd5e/0x1440 [ 1052.949514][T29031] arch_do_signal_or_restart+0x2a/0x270 [ 1052.955044][T29031] exit_to_user_mode_prepare+0x109/0x1a0 [ 1052.960659][T29031] syscall_exit_to_user_mode+0x20/0x40 [ 1052.966099][T29031] do_syscall_64+0x45/0x80 [ 1052.970503][T29031] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1052.976380][T29031] [ 1052.978684][T29031] Reported by Kernel Concurrency Sanitizer on: [ 1052.984808][T29031] CPU: 0 PID: 29031 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 1052.993212][T29031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1053.003245][T29031] ================================================================== [ 1053.011279][T29031] Kernel panic - not syncing: panic_on_warn set ... [ 1053.017848][T29031] CPU: 0 PID: 29031 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 1053.026246][T29031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1053.038113][T29031] Call Trace: [ 1053.041383][T29031] dump_stack+0x116/0x15d [ 1053.045697][T29031] panic+0x1e7/0x5fa [ 1053.049584][T29031] ? vprintk_emit+0x2e2/0x360 [ 1053.054246][T29031] kcsan_report+0x67b/0x680 [ 1053.058734][T29031] ? kcsan_setup_watchpoint+0x47b/0x4e0 [ 1053.064274][T29031] ? dput+0x2f/0x420 [ 1053.068156][T29031] ? proc_invalidate_siblings_dcache+0x1eb/0x2d0 [ 1053.074562][T29031] ? proc_flush_pid+0x16/0x20 [ 1053.079220][T29031] ? release_task+0xc1e/0xd30 [ 1053.083892][T29031] ? do_exit+0xeb1/0x1630 [ 1053.088203][T29031] ? do_group_exit+0xc8/0x170 [ 1053.092950][T29031] ? get_signal+0xd5e/0x1440 [ 1053.097522][T29031] ? arch_do_signal_or_restart+0x2a/0x270 [ 1053.103228][T29031] ? exit_to_user_mode_prepare+0x109/0x1a0 [ 1053.109015][T29031] ? syscall_exit_to_user_mode+0x20/0x40 [ 1053.114627][T29031] ? do_syscall_64+0x45/0x80 [ 1053.119201][T29031] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1053.125267][T29031] ? async_schedule_node_domain+0x40/0x340 [ 1053.131056][T29031] ? __rcu_read_unlock+0x51/0x250 [ 1053.136064][T29031] ? _raw_spin_unlock+0x22/0x40 [ 1053.140992][T29031] ? __rcu_read_unlock+0x51/0x250 [ 1053.146000][T29031] ? d_walk+0x480/0x4c0 [ 1053.150227][T29031] kcsan_setup_watchpoint+0x47b/0x4e0 [ 1053.155671][T29031] ? d_invalidate+0x1b0/0x1b0 [ 1053.160332][T29031] dput+0x2f/0x420 [ 1053.164036][T29031] proc_invalidate_siblings_dcache+0x1eb/0x2d0 [ 1053.170176][T29031] proc_flush_pid+0x16/0x20 [ 1053.174674][T29031] release_task+0xc1e/0xd30 [ 1053.179176][T29031] do_exit+0xeb1/0x1630 [ 1053.183314][T29031] do_group_exit+0xc8/0x170 [ 1053.187800][T29031] get_signal+0xd5e/0x1440 [ 1053.192215][T29031] arch_do_signal_or_restart+0x2a/0x270 [ 1053.197745][T29031] ? __se_sys_futex+0x2a8/0x390 [ 1053.202838][T29031] exit_to_user_mode_prepare+0x109/0x1a0 [ 1053.208462][T29031] syscall_exit_to_user_mode+0x20/0x40 [ 1053.213910][T29031] do_syscall_64+0x45/0x80 [ 1053.218319][T29031] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1053.224198][T29031] RIP: 0033:0x45e149 [ 1053.228077][T29031] Code: Unable to access opcode bytes at RIP 0x45e11f. [ 1053.234898][T29031] RSP: 002b:00007fcd106eecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1053.243289][T29031] RAX: fffffffffffffe00 RBX: 000000000119c030 RCX: 000000000045e149 [ 1053.251242][T29031] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000119c030 [ 1053.259193][T29031] RBP: 000000000119c028 R08: 0000000000000000 R09: 0000000000000000 [ 1053.267493][T29031] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1053.275442][T29031] R13: 00007ffee83dec0f R14: 00007fcd106ef9c0 R15: 000000000119c034 [ 1053.284192][T29031] Kernel Offset: disabled [ 1053.288540][T29031] Rebooting in 86400 seconds..