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"}) signalfd4(r4, &(0x7f0000000040)={[0x543]}, 0x8, 0x80000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x10001, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r6, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000880)={r5, r7, "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", "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"}) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000000000000d8) 23:37:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000300)="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", &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x203, 0xe7, 0x201, 0xffffffffffffffff, 0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000080), &(0x7f0000000140)=@udp6}, 0x20) sendfile(r2, r1, 0x0, 0x7fffffff) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:19 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x16a, 0x2}) r0 = socket$inet6(0xa, 0x3, 0x3c) sendto$inet6(r0, &(0x7f0000000000), 0x7b10, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x18) 23:37:19 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r11, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x34}}, 0x24040001) sendto$inet6(r0, &(0x7f0000000000), 0x7b10, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x18) 23:37:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) write(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x28, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000002}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 445.165410][ T22] audit: type=1326 audit(1601077039.684:593): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14539 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:37:19 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r11, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x34}}, 0x24040001) sendto$inet6(r0, &(0x7f0000000000), 0x7b10, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x18) 23:37:19 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r11, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x34}}, 0x24040001) sendto$inet6(r0, &(0x7f0000000000), 0x7b10, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x18) 23:37:19 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r11, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x34}}, 0x24040001) 23:37:19 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r11, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) [ 445.537969][T13714] usb 3-1: Using ep0 maxpacket: 16 [ 445.578048][T13714] usb 3-1: too many configurations: 68, using maximum allowed: 8 [ 445.698225][T13714] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 445.705875][T13714] usb 3-1: can't read configurations, error -61 [ 445.857945][T13714] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 446.108093][T13714] usb 3-1: Using ep0 maxpacket: 16 [ 446.148023][T13714] usb 3-1: too many configurations: 68, using maximum allowed: 8 [ 446.267993][T13714] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 446.275549][T13714] usb 3-1: can't read configurations, error -61 [ 446.281911][T13714] usb usb3-port1: attempt power cycle [ 446.987870][T13714] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 447.077942][T13714] usb 3-1: Using ep0 maxpacket: 16 [ 447.117943][T13714] usb 3-1: too many configurations: 68, using maximum allowed: 8 [ 447.257937][T13714] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 447.265507][T13714] usb 3-1: can't read configurations, error -61 [ 447.417865][T13714] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 447.507973][T13714] usb 3-1: Using ep0 maxpacket: 16 [ 447.547963][T13714] usb 3-1: too many configurations: 68, using maximum allowed: 8 [ 447.667944][T13714] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 447.675511][T13714] usb 3-1: can't read configurations, error -61 [ 447.683558][T13714] usb usb3-port1: unable to enumerate USB device 23:37:22 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x700, 0x0, 0x0, 0x0) 23:37:22 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) 23:37:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000000000000d8) 23:37:22 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) prlimit64(r0, 0x8, &(0x7f0000000100)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x891, 0xd88, 0x4, 0x2, 0x2000, 0x20}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = dup2(r4, r3) write$FUSE_POLL(r6, &(0x7f0000000180)={0x18}, 0xffa0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000040)={0x515e, 0x9, 0x7, 0x0, 0x12, "b64e5290219e265870a1a2d764f91c1a60c877"}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:22 executing program 2: dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 23:37:22 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) [ 448.163451][ T22] kauditd_printk_skb: 4 callbacks suppressed [ 448.163459][ T22] audit: type=1326 audit(1601077042.684:598): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14586 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 448.191400][ T22] audit: type=1326 audit(1601077042.694:599): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14587 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:37:22 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') 23:37:22 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 23:37:22 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) [ 448.214478][ T22] audit: type=1326 audit(1601077042.694:600): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:37:22 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 23:37:22 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) 23:37:22 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x4000, 0x0, 0x0, 0x0) 23:37:22 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') [ 448.617822][ T3034] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 448.857793][ T3034] usb 3-1: Using ep0 maxpacket: 16 23:37:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000000000000d8) 23:37:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r1, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0xffff, 0x8, [], 0x0, &(0x7f0000000000)=[0x0]}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 448.966820][ T22] audit: type=1326 audit(1601077043.484:601): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 448.989298][ T3034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 23:37:23 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) socket$nl_generic(0x10, 0x3, 0x10) [ 449.000735][ T22] audit: type=1326 audit(1601077043.494:602): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14635 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 449.025369][ T3034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.029232][ T22] audit: type=1326 audit(1601077043.524:603): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14587 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 449.037995][ T3034] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 449.059484][ T22] audit: type=1326 audit(1601077043.524:604): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14638 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 449.073689][ T3034] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 449.105125][ T3034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.113726][ T3034] usb 3-1: config 0 descriptor?? [ 449.588700][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x4 [ 449.597320][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.608067][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.616420][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.624491][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.632581][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.640863][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.649218][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.656582][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.665426][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.673639][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.681882][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.690000][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.697624][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.706548][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.714631][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.722789][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.730839][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.739157][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.746530][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.755318][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.763616][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.771719][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.780067][ T3034] hid-generic 0003:045E:03DA.0032: unknown main item tag 0x0 [ 449.789955][ T3034] hid-generic 0003:045E:03DA.0032: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 449.802298][ T22] audit: type=1326 audit(1601077044.324:605): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14638 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 449.805065][ T3034] usb 3-1: USB disconnect, device number 27 23:37:24 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x800000, 0x0, 0x0, 0x0) 23:37:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000880)={0xbb8, 0x0, 0x5, 0x801, 0x0, 0x0, {0x5}, [{{0x254, 0x1, {{0x2, 0x3f}, 0x7f, 0x5, 0x3, 0x2, 0x6, 'syz1\x00', "8be322a8c57bf78eae055abfff4786d5f35c56ca5115656953ab21602ab3cbee", "cb856f03b53d4b38d7056166f3189dacc73cc6560edb1b67a3c3ea3d3ae70e92", [{0x20, 0x2, {0x0, 0xffffffff}}, {0xffff, 0x3348, {0x1, 0x5}}, {0x1ff, 0x9, {0x0, 0x7}}, {0x5, 0xff, {0x2, 0x80000001}}, {0x8, 0x3, {0x2, 0x6}}, {0x2, 0x1, {0x0, 0x3f}}, {0x9452, 0x8, {0x2, 0x9}}, {0xffff, 0x9, {0x2, 0x83f}}, {0x9, 0x101, {0x0, 0x4}}, {0x64c, 0x8dc, {0x1, 0xfffff1ec}}, {0x2, 0x8, {0x3, 0x1}}, {0x200, 0x2, {0x1, 0x5}}, {0xaff7, 0x3ff, {0x0, 0x7}}, {0x3ff, 0x8, {0x3, 0xffff}}, {0x7ff, 0xfff8, {0x3, 0x1ff}}, {0x9, 0x0, {0x1, 0x22}}, {0x3, 0x8, {0x2, 0x8}}, {0x66f, 0x3, {0x3, 0xfffffa0a}}, {0xf2cb, 0x6}, {0x101, 0x5d, {0x2, 0x8}}, {0x8, 0xca, {0x2, 0x7ff}}, {0x81, 0x5, {0x0, 0x2}}, {0x0, 0x1, {0x2, 0x10001}}, {0xa5, 0xff, {0x0, 0x7fffffff}}, {0x4, 0x169, {0x3, 0x8e}}, {0x7fff, 0x100, {0x1, 0x1}}, {0x5e59, 0x1, {0x0, 0x220}}, {0x7f, 0x7, {0x0, 0xff}}, {0x5, 0x3, {0x3, 0x1f}}, {0x59d, 0x1, {0x1, 0x2}}, {0x9, 0x0, {0x2, 0xc0}}, {0x1f, 0x8, {0x2, 0xee44}}, {0x1, 0x4f06, {0x2}}, {0x3, 0x2, {0x3, 0x7}}, {0x7, 0x8001, {0x0, 0x8}}, {0x7, 0x6, {0x3, 0x3f}}, {0x9, 0x3, {0x3, 0x40}}, {0x5, 0x4, {0x3, 0x3}}, {0x101, 0xff, {0x3, 0x5}}, {0x2, 0x6, {0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0xff, 0x6, 0x9, 0x401, 0x7, 'syz0\x00', "5a1fd00174c08972247e012aab1e5f1677f1c6b458f246d6d41f70d77e66370e", "a3115fa2ddcfe5148ca5297c7864432b955e3ea23d68619075ee75d8380bebc6", [{0x4, 0x9, {0x2, 0x8}}, {0x8, 0x0, {0x3, 0x10001}}, {0x81, 0x4, {0x0, 0x4}}, {0x7, 0x200, {0x2, 0xffff}}, {0x400, 0x1, {0x2, 0xf4}}, {0x9, 0x1ff}, {0x6, 0x0, {0x2, 0x3}}, {0xe2a, 0x1ff, {0x3, 0xfff}}, {0xfff, 0x8, {0x1, 0x3}}, {0x6, 0x3ff, {0x0, 0xfff}}, {0x2, 0x0, {0x1, 0x10000}}, {0x40, 0x101, {0x3, 0x4}}, {0x7, 0xaf, {0x3, 0x6}}, {0xfff8, 0x8, {0x0, 0x7}}, {0xffff, 0xa0, {0x2, 0x3}}, {0x7, 0x1, {0x2, 0xd6}}, {0x40, 0x1, {0x2, 0x2}}, {0x5, 0x7, {0x2, 0x3ff}}, {0xd2c7, 0x4d33, {0x0, 0x1000}}, {0xfff8, 0x9dca, {0x2, 0x4de}}, {0x7fff, 0xd44, {0x6, 0xfff}}, {0x5, 0x3, {0x1, 0xffff}}, {0x5, 0x5, {0x0, 0x7ff}}, {0xfffb, 0xae60, {0x1, 0x7fffffff}}, {0x3, 0x6, {0x0, 0xfffffffa}}, {0x0, 0x1, {0x1, 0xe19}}, {0x3f, 0x7f, {0x0, 0x7fff}}, {0x1ff, 0x5, {0x0, 0x3}}, {0x1140, 0xc14, {0x1, 0x9}}, {0x40, 0x4, {0x0, 0x9}}, {0xfff, 0x80, {0x3, 0x8}}, {0x9, 0x3, {0x3, 0x9}}, {0x6, 0x200, {0x1, 0x80000001}}, {0x2, 0x5, {0x3, 0x1f}}, {0x2, 0x6, {0x3}}, {0x4, 0x9286, {0x0, 0x5}}, {0xfff7, 0x40, {0x2, 0x4}}, {0x40, 0x800, {0x3, 0x5}}, {0x1, 0xff}, {0x8, 0x57, {0x1, 0x7ff}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x20, 0x6, 0xbbb, 0x7f, 0x9, 'syz0\x00', "14a05109f9c91f4edc4844872fa3751775047fb642acc7a0d393612cf418328f", "3b2acd0b73341bf1fbea9a5d8969b459a8bbbbc4962d5a1b6954db59bf0464d2", [{0x82, 0x401, {0x2, 0x6}}, {0x3, 0x8, {0x0, 0xfff}}, {0x8, 0x800, {0x1, 0x47afb55a}}, {0x6, 0x9, {0x1, 0xf0000000}}, {0x401, 0x4376, {0x1, 0x7}}, {0x3, 0x6, {0x0, 0x7f}}, {0x8, 0x3, {0x0, 0x22b8}}, {0x81, 0xc6, {0x2, 0xffffffff}}, {0x4, 0x6, {0x0, 0x10000}}, {0x4, 0x2, {0x1, 0xfb5}}, {0x7ec, 0x200, {0x1, 0x1}}, {0x165f, 0xed, {0x2, 0x7}}, {0x2a2, 0x13c4, {0x1, 0x7}}, {0xbd62, 0x2, {0x1, 0x42dd}}, {0xffff, 0x6, {0x3, 0x5660}}, {0x7ad4, 0x6, {0x0, 0x80000001}}, {0x14, 0x8, {0x3, 0x9}}, {0x7fff, 0x9, {0x3, 0x9}}, {0xffff, 0x2, {0x2, 0x8}}, {0x842, 0x9, {0x0, 0xffffffff}}, {0xa3, 0xffce, {0x3, 0x1}}, {0x1000, 0x5, {0x1, 0x7}}, {0xe613, 0x2c18, {0x0, 0x8}}, {0x400, 0xfe00, {0x1, 0xffff8001}}, {0x9, 0xe2be, {0x1, 0x20}}, {0xffd6, 0x5, {0x0, 0x2}}, {0xff, 0xd5a, {0x2, 0x7}}, {0x8, 0x5, {0x1, 0x1}}, {0x0, 0x1, {0x1, 0x7ff}}, {0x2e09, 0x2, {0x1, 0x40}}, {0x401, 0x40, {0x2, 0x7f}}, {0x0, 0x7, {0x3}}, {0x2, 0x0, {0x2, 0x200}}, {0x800, 0xfd, {0x0, 0x1}}, {0x1, 0x9, {0x2, 0x401}}, {0x8001, 0x7, {0x3, 0x3f}}, {0x3, 0xb2, {0x2}}, {0x1, 0x8, {0x1}}, {0x40, 0xfff, {0x3, 0x78}}, {0xf47, 0x7, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0xff}, 0x8, 0x3, 0xee84, 0x40, 0x27, 'syz1\x00', "f62ec61fb3a888af95ff4b59c78322f122ca7fef2337ba0edfbd92b9c2ed61cf", "79cdc1b5d6c25a389894720a72eab8394b564d2ead7b20719820b19a665a511d", [{0x8, 0x5, {0x2, 0x2}}, {0x8cce, 0x8000, {0x1, 0x8}}, {0x9, 0x3, {0x2, 0xa06b}}, {0x3, 0x4, {0x0, 0x1f}}, {0x1, 0x3, {0x1, 0x258}}, {0xf5, 0x6, {0x1, 0xcd0d}}, {0x9, 0xff7f, {0x2, 0x9}}, {0xfc01, 0x4, {0x0, 0xfff}}, {0x3, 0x40, {0x2, 0x1}}, {0x3, 0x200, {0x2}}, {0x5, 0xfbff, {0x2, 0x6ef}}, {0x2, 0x9, {0x0, 0x101}}, {0x7a, 0xf48f, {0x2, 0x7f}}, {0x5, 0x9, {0x2, 0xff54}}, {0xfff8, 0x70, {0x1, 0x8}}, {0x4b, 0x8, {0x3, 0xffff}}, {0x1, 0x800, {0x1, 0xfa}}, {0x9, 0x8001, {0x2, 0x1}}, {0x400, 0x9745, {0x2, 0xfffffffb}}, {0x29, 0x5, {0x0, 0x3}}, {0xa4, 0x1000, {0x2, 0x5}}, {0x7e7, 0xfff9, {0x3, 0x9}}, {0x4, 0x7, {0x3, 0x7}}, {0x6, 0x401, {0x3, 0x8001}}, {0x1, 0x5, {0x3}}, {0x0, 0x200, {0x3, 0x1}}, {0x1, 0x4, {0x0, 0x7fff}}, {0x5, 0x8000, {0x0, 0x7fffffff}}, {0x8000, 0xd85, {0x0, 0x7ff}}, {0x1000, 0x7f, {0x1}}, {0x2bd, 0xff, {0x3, 0x8}}, {0x0, 0xfff, {0x3, 0x5}}, {0x3ff, 0x3b, {0x0, 0x904}}, {0xfff, 0x3, {0x0, 0x2}}, {0x5, 0x6, {0x3, 0x4}}, {0x401, 0x4, {0x2, 0x6}}, {0x2, 0x4, {0x1, 0x1000}}, {0x1, 0x5, {0x3}}, {0x4, 0x9, {0x0, 0x1}}, {0x6c, 0x5, {0x4, 0x73}}]}}}, {{0x254, 0x1, {{0x3, 0x401}, 0x1, 0x6c, 0x7, 0x8, 0x1f, 'syz0\x00', "d75c9f7b4a2224ab04aa25ca17b264f32618d95a35461f3c37266198620eab8e", "1d29e7be602eb54f529da92ee949a96a0a8358c4decbc8fa604482a7cb49800d", [{0x100, 0x2, {0x3, 0x28}}, {0x1, 0x3, {0x3, 0x1000}}, {0x4c, 0x7, {0x0, 0x1}}, {0x100, 0x1000, {0x2, 0xffffffff}}, {0x7fff, 0x8, {0x0, 0x1ca1de89}}, {0x2, 0x1, {0x0, 0x3}}, {0x9, 0x0, {0x3, 0x1f}}, {0x0, 0x7, {0x1, 0x5}}, {0xfffb, 0x613, {0x3, 0x53ee9496}}, {0x100, 0x2, {0x0, 0xff}}, {0x100, 0x3be4, {0x2, 0x1}}, {0x6, 0x200, {0x0, 0x8001}}, {0x4, 0x0, {0x0, 0x401}}, {0xf3c3, 0x100, {0x2, 0xfffffff9}}, {0x8, 0x1, {0x0, 0x7}}, {0x7, 0x6, {0x0, 0x9}}, {0x0, 0x9, {0x1, 0x2}}, {0x9, 0x2, {0x0, 0x1}}, {0x6, 0xb04, {0x1, 0x3}}, {0x2, 0x5, {0x0, 0x3f}}, {0xca7d, 0x7, {0x0, 0xffffffff}}, {0x2, 0xfc00, {0x3, 0xff}}, {0x6, 0x400, {0x1}}, {0xfff9, 0x6, {0x3, 0x7}}, {0x5, 0x7ff, {0x3, 0x10001}}, {0x3, 0x2, {0x1, 0x5f}}, {0x81, 0x1, {0x2, 0x9b}}, {0x0, 0x0, {0x3, 0x3}}, {0x4, 0x3, {0x1}}, {0xff, 0x5, {0x2, 0x80}}, {0x0, 0x7, {0x2, 0x1}}, {0x800, 0xfff, {0x0, 0x2}}, {0x401, 0x7, {0x2, 0x4}}, {0xfc00, 0x81, {0x0, 0x81}}, {0x7f, 0x8000, {0x0, 0x100}}, {0x3, 0x8001, {0x1, 0x5}}, {0x200, 0x3, {0x0, 0x9}}, {0x7f, 0x3ff, {0x1}}, {0x0, 0x6, {0x3, 0x3}}, {0x1, 0x2, {0x0, 0x200}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4800}, 0x8c0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:24 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRES32=r2], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:37:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000000000000d8) 23:37:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x1, 0x9, 0x3f, 0x321b}, {0x100, 0x9, 0x9f, 0x80}, {0x2, 0x40, 0x9, 0x3}, {0x6, 0x5, 0x0, 0xffffffff}, {0x8f9, 0x1, 0x16, 0x7}, {0x7, 0x7, 0x0, 0x7f0}]}) 23:37:24 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:24 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:24 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) [ 450.312198][ T22] audit: type=1326 audit(1601077044.834:606): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14660 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 450.335078][ T22] audit: type=1326 audit(1601077044.834:607): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14664 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:37:24 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:24 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:24 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:24 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x1000000, 0x0, 0x0, 0x0) [ 450.757734][ T3034] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 451.037684][ T3034] usb 3-1: device descriptor read/64, error 18 23:37:25 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:25 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x3000000, 0x0, 0x0, 0x0) [ 451.487654][ T3034] usb 3-1: device descriptor read/64, error 18 [ 451.767730][ T3034] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 452.047643][ T3034] usb 3-1: device descriptor read/64, error 18 [ 452.447626][ T3034] usb 3-1: device descriptor read/64, error 18 [ 452.567716][ T3034] usb usb3-port1: attempt power cycle 23:37:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="50ba57a9"], 0x0}, 0x0) 23:37:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000000000000d8) 23:37:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:27 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x7ff}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x9, 0x8d87, 0x0, 0x0, 0x0, 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x7ff}, 0x0) ioprio_get$pid(0x1, r3) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:27 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x7000000, 0x0, 0x0, 0x0) [ 453.277560][ T3034] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 453.333022][ T22] kauditd_printk_skb: 3 callbacks suppressed [ 453.333030][ T22] audit: type=1326 audit(1601077047.855:611): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14721 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:37:27 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x4bc, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [{{0x254, 0x1, {{0x85d8322ce9dd738e, 0x1}, 0x2, 0xa, 0x0, 0x8001, 0xb, 'syz0\x00', "7d7dfcd8447cc1bb613c23583508c5054d2532f5063946ea10fb5a90390ce0cf", "6d187c1fbf6ab817886c80c66aef13f0328123b495545492e453bca5afc7aa21", [{0x100, 0x8000, {0x2, 0x7}}, {0x8001, 0xff7f, {0x1, 0xfffff001}}, {0xfff8, 0xffff, {0x1, 0x6}}, {0x1, 0x2, {0x0, 0x7}}, {0x9b6d, 0x80, {0x2, 0x1}}, {0x8, 0x8, {0x0, 0x2}}, {0x80, 0x9, {0x1, 0x5}}, {0x0, 0x101, {0x1}}, {0x400, 0xfff7, {0x2, 0xff}}, {0x3ff, 0x65c9, {0x1, 0x6}}, {0x4282, 0x40, {0x1, 0xdc}}, {0x1, 0x2, {0x1, 0x9}}, {0x9, 0x4, {0x0, 0x5}}, {0x1000, 0x1, {0x2, 0xfff}}, {0x8000, 0x8000, {0x2, 0x537a000}}, {0x5, 0x5, {0x2, 0x96}}, {0x5, 0x0, {0x1, 0x4}}, {0x6, 0x3, {0x3, 0x4a4}}, {0x1, 0xffff, {0x2, 0xfffffffa}}, {0x7, 0xfff7, {0x1, 0xffffffff}}, {0x80, 0x7, {0x1, 0x9c71}}, {0x3, 0x6, {0x3, 0x2}}, {0x7, 0x4, {0x0, 0x5}}, {0x101, 0x0, {0x1, 0x9}}, {0x8, 0x3ff, {0x3, 0x1}}, {0x4a, 0x401, {0x3, 0x80000001}}, {0x9, 0x0, {0x0, 0x3f}}, {0x5e, 0x1, {0x3, 0x88c}}, {0x80, 0xfc03, {0x2, 0x1}}, {0xff, 0x8, {0x2, 0x9}}, {0x84a3, 0x2, {0x3, 0xd45}}, {0x67e2, 0x6, {0x1, 0x8}}, {0x200, 0x40, {0x3, 0x3}}, {0x4, 0x9, {0x3, 0xfffffffb}}, {0x3, 0x0, {0x0, 0xfffffffa}}, {0x0, 0x1, {0x3, 0x100}}, {0xfff7, 0x53, {0x1, 0x8}}, {0x7, 0x400, {0x0, 0x401}}, {0x4, 0x3, {0x3, 0x7ff}}, {0x8, 0x2, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x9, 0x8, 0x411, 0x20, 0x1e, 'syz1\x00', "ef14ecdcaa846579b69fb54a8d727494c636cdb3afe029618a3f542e0a561ddd", "859d2cedf95f03292a19146f902e884358735a88e95d5093a7672b3cfab6306f", [{0x8, 0x0, {0x3, 0x81a}}, {0x100, 0x1, {0x1, 0x401}}, {0x1, 0xa3f8, {0x2, 0x4}}, {0x7f, 0x13, {0x2}}, {0x3, 0xea, {0x2, 0x1}}, {0x4, 0x3ff, {0x2, 0x1}}, {0x1, 0x3, {0x3, 0x8001}}, {0x1, 0xff13, {0x2, 0x20}}, {0x7, 0xac2, {0x1, 0x9}}, {0x8, 0x3, {0x0, 0x3}}, {0x9, 0x40, {0x3, 0x8}}, {0x0, 0x5, {0x3, 0x4}}, {0x5, 0x0, {0x1, 0x8}}, {0x3, 0x5, {0x0, 0x2}}, {0xced9, 0x40, {0x2, 0x9}}, {0xd4, 0x5, {0x3, 0x2}}, {0x6, 0x2f, {0x1, 0xfff}}, {0x72, 0x5, {0x0, 0x3f}}, {0x8014, 0xffff, {0x3, 0x80000001}}, {0x6, 0x4, {0x3, 0x101}}, {0x4, 0x0, {0x3, 0x101}}, {0x0, 0x7, {0x3, 0x9}}, {0x9, 0x7, {0x2, 0x8}}, {0x0, 0x7fff, {0x3, 0x6}}, {0x4af, 0x3ff, {0x0, 0x6d50e967}}, {0x8, 0x9, {0x0, 0x2}}, {0x4, 0x0, {0x2, 0x8bb}}, {0x4, 0x0, {0x1}}, {0x8000, 0x3, {0x3, 0x722}}, {0xff01, 0x8000, {0x1}}, {0x1, 0x8, {0x3, 0x1}}, {0x1, 0x4, {0x3, 0x5}}, {0x6, 0x5e, {0x7, 0x9}}, {0x0, 0x0, {0x2, 0x1}}, {0x9, 0x5, {0x2, 0x4}}, {0x3, 0xf800, {0x2, 0x9}}, {0x100, 0x0, {0x1, 0xfff}}, {0x3, 0x3, {0x2, 0x82}}, {0x0, 0x6c54, {0x0, 0x40}}, {0x0, 0xf4bc, {0x1}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 453.364500][ T22] audit: type=1326 audit(1601077047.855:612): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14720 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:37:27 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:27 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:27 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) [ 453.405030][ T22] audit: type=1326 audit(1601077047.925:613): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14741 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:37:27 executing program 3: socket$inet6(0xa, 0x0, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) [ 453.447590][ T3034] usb 3-1: device descriptor read/8, error -71 [ 453.657552][ T3034] usb 3-1: device descriptor read/8, error -71 23:37:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r3, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRES16=r0], 0x0}, 0x0) 23:37:28 executing program 3: socket$inet6(0xa, 0x0, 0x3c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = dup2(r4, r3) write$FUSE_POLL(r6, &(0x7f0000000180)={0x18}, 0xffa0) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f0000000000)=0x6, 0x4) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:28 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x10000000, 0x0, 0x0, 0x0) 23:37:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x0) [ 454.137701][ T22] audit: type=1326 audit(1601077048.665:614): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14720 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 454.160144][ T3034] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 454.178346][ T22] audit: type=1326 audit(1601077048.705:615): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14773 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 454.200915][ T22] audit: type=1326 audit(1601077048.705:616): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14776 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000480)="66c98ddadb2d905697d9a7af03eab1aff6849d01164adb1f45eb344e437e96ddd43affa02491a073c069a9478a27aae07f3e234c1e83ce35fe33c37e0647b987dcc0245f831b9450b70e838de60e97d50aadcdaebf845d2452a3684a4ec7552bcb1925ce10aea63907d483f3443ddd3c19914ff3e876f6ae6c51e8160f") sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x880088}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00022dbd7000fddbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d300009000000006c325f64726f7073000000000500830002000000"], 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x5) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') read(r3, &(0x7f0000000300)=""/35, 0x23) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pwritev(r3, &(0x7f0000000440)=[{&(0x7f0000000340)="f0cd5fcdb6b4967e66dfaa34673805fe0b5e51b21c399648a41d48b2f05b863d55521410abe4276224a05c07a5ed9d83d9a470ca3ba1e0f5a3a1d6bb9daaff4081e51ce3e4e8582db935d3dd54a81a5b5c13700109774d48e66363dbe48d68c1bf4a493ac353ab79c99900dbb4b657c256b6b15a08707ce4f4e11ab80c8ee4bdbaa4c1eaece059d8742864f193dbcd43c5797e83b5305b0939100065aafecac03f4fea7fce4b495f42fa05e0a65ca2e664345d0f275f120be0eb219f98554ff9f9c9d58d6b9415fab4663aec4150f071af980e6e82", 0xd5}, {&(0x7f0000000880)="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", 0x1000}], 0x2, 0x400, 0x7f) sendfile(r4, r3, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) [ 454.224922][ T22] audit: type=1326 audit(1601077048.755:617): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14741 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) [ 454.282861][ T22] audit: type=1326 audit(1601077048.805:618): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14791 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 454.306183][ T3034] usb 3-1: Using ep0 maxpacket: 16 [ 454.447605][ T3034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.458589][ T3034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.469452][ T3034] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 454.482289][ T3034] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 454.492367][ T3034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.500982][ T3034] usb 3-1: config 0 descriptor?? [ 454.988455][ T22] audit: type=1326 audit(1601077049.515:619): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14776 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 455.027506][ T3034] usbhid 3-1:0.0: can't add hid device: -71 [ 455.033532][ T3034] usbhid: probe of 3-1:0.0 failed with error -71 [ 455.042127][ T3034] usb 3-1: USB disconnect, device number 31 [ 455.086897][ T22] audit: type=1326 audit(1601077049.605:620): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14791 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 455.737448][ T5139] usb 3-1: new high-speed USB device number 32 using dummy_hcd 23:37:30 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x40000000, 0x0, 0x0, 0x0) 23:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x0) 23:37:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x100, 0xffffffc1, 0x709f, 0x17817bcb, 0x12, "61c82f3365120c0f86ac7830c1f0df7045ceea"}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10001, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000100)=0x3, 0x4) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/223, 0xdf) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r3 = dup(r1) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0xc) 23:37:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r3, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={0xffffffffffffffff, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000200)="21569a3550c15dc25718ee4dfb476bbd6118cad66c4e86f29f1207ca4c218ef5831d49453aaa7639314623e6f4e0be69d18df3993ad020960e1a8f9b1bb0880a3b778e80b3cfe617f6519138", &(0x7f0000000280)=@tcp=r6, 0x2}, 0x20) r7 = signalfd4(r0, &(0x7f0000000040)={[0x4]}, 0x8, 0x80000) r8 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ppoll(&(0x7f00000000c0)=[{r3, 0x8}, {r4}, {r1, 0x21}, {r0, 0x8000}, {r7, 0x80}, {r8, 0x1000}, {r0, 0x75e31b8239a46a06}], 0x7, &(0x7f0000000100), &(0x7f0000000180)={[0x3f]}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:30 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:30 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:30 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:30 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0xeffdffff, 0x0, 0x0, 0x0) 23:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x20040040) [ 456.227395][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 456.347595][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.358541][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.368457][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 456.381989][ T5139] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 456.391094][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.399979][ T5139] usb 3-1: config 0 descriptor?? 23:37:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x0) 23:37:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000000)) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) fadvise64(0xffffffffffffffff, 0x1, 0x7f, 0x3) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLOCK(r3, &(0x7f0000000180)={0x8, 0x35, 0x2}, 0x8) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400d000", @ANYBLOB="070736b1967890d985327363", @ANYBLOB="00082dbd7000ffdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0009000000080001007063690011000200303030303a30303a31302e300000000008000b0005000000080001007063690011000200303030303a30303a31302e300000000008000b00feffffff"], 0x84}, 0x1, 0x0, 0x0, 0x24000813}, 0x810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0xc0ec, 0x4) 23:37:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x20040040) [ 456.878359][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x4 [ 456.885833][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 456.893502][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 456.900950][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 456.908630][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 456.915991][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 456.923388][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 456.930796][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 456.938193][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 456.945571][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 456.953125][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 456.960521][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 456.968173][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 456.975553][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 456.982947][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 456.990366][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 456.997777][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 457.005146][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 457.012536][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 457.020209][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 457.027633][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 457.034999][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 457.042402][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 457.049814][ T5139] hid-generic 0003:045E:03DA.0033: unknown main item tag 0x0 [ 457.058286][ T5139] hid-generic 0003:045E:03DA.0033: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 457.079006][ T148] usb 3-1: USB disconnect, device number 32 [ 457.847293][ T5139] usb 3-1: new high-speed USB device number 33 using dummy_hcd 23:37:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) geteuid() syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:37:32 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0xfffffdef, 0x0, 0x0, 0x0) 23:37:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x20040040) 23:37:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000200)=0xff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x100, 0x505800) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0xc801) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0x3d}, 0x16, 0x1) setsockopt(r1, 0xffff, 0x9, &(0x7f0000000340)="7f31b71435ffabaefdf245db65256c93863daa768d306cfa18b039e637b1c0e04b213d97b5e7f56b64c158ab86b7ef2672c8077bf8f1846e7917f205b2bfe6729bed99c9dd37604ad4e91319cd86185e928674205fec7eb97c427fe77c219245698d8a346d7c8b226fc1999209e1ed268e073ad21fbcaee6f8791977768abc48d156267378588e850aa0af0983ab4809cc361dba94ce402816713934401f3cfb1141405cff45630be69e57a24328560557fd4025a6a676eaa38ec005434708d2671f3a884f8ee20e3d0be0", 0xcb) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000002c0)={0x3f, 0x3f, 0x9, 0x2, 0xeaea}, 0x14) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyS3\x00', 0x240, 0x0) sendfile(r6, r5, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = dup2(r4, r3) write$FUSE_POLL(r6, &(0x7f0000000180)={0x18}, 0xffa0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000040)={0x515e, 0x9, 0x7, 0x0, 0x12, "b64e5290219e265870a1a2d764f91c1a60c877"}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2002, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0080204}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1b0, 0x12, 0x200, 0x70bd27, 0x25dfdbfd, {0x26, 0x3, 0x4, 0x7, {0x4e24, 0x4e24, [0x2, 0x8, 0xde, 0x2], [0x3, 0x7, 0x3, 0xff], 0x0, [0x24000, 0x7]}, 0x8, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xb5, 0x1, "e35da535e70df0ed1055425fded80f09800105f9f578d68c2ca16059d06910d7bf43bfae2d5bb43b3104b9a86750e5bc4d7736e68dbe7e4506415d00e6d1fe5239d111e1455f4374cc9d2d5d7077428a029863620b1eca7caa0298ce7b65549b19c01b12161ec43dad761d3e92005cf1f0c7137c798656a4cfa3143c84440a51ba91ab4ecc1e255953db2730a6360045f1597aea15c3a56942d1851da4b75f7bcf5430aa36cf4479b2f8b138da7fce931b"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "33b0e13a16902b172b076accc422fadaed90ecb26cc47045517bf549b37466a6af52601e6e955a1216f84bdc918528214f7af82d056d218718c896e75019c1607106117d85b69f84c47c8d4d34d385c48b5a026e9e0c0eec5729d9a20ce898d7e3698e25d96778bd8f1ac09f7b2a4c31cdecce282ea8ea45a49f6701cb2069cb7804f0bd8486f0a3f98caf140c68f73e10523f537c29d79c8551325dcd5e7f5097241cfeb804bd"}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000800) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20040040) 23:37:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20040040) 23:37:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20040040) 23:37:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x20040040) 23:37:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x20040040) 23:37:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x20040040) [ 458.307265][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 458.427326][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.438403][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.449053][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 458.462244][ T5139] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 458.471599][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.480648][ T5139] usb 3-1: config 0 descriptor?? [ 458.746458][ T22] kauditd_printk_skb: 11 callbacks suppressed [ 458.746465][ T22] audit: type=1326 audit(1601077053.265:632): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14888 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 458.783753][ T22] audit: type=1326 audit(1601077053.305:633): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14884 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 458.938202][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x4 [ 458.945599][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 458.953200][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 458.960606][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 458.968125][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 458.975757][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 458.983153][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 458.990565][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 458.997950][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 459.005417][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 459.013182][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 459.020650][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 459.028158][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 459.035516][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 459.042939][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 459.050337][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 459.057729][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 459.065110][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 459.072498][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 459.079902][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 459.087297][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 459.094661][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 459.102061][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 459.109468][ T5139] hid-generic 0003:045E:03DA.0034: unknown main item tag 0x0 [ 459.118029][ T5139] hid-generic 0003:045E:03DA.0034: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 459.141312][ T5139] usb 3-1: USB disconnect, device number 33 [ 459.907213][ T5139] usb 3-1: new high-speed USB device number 34 using dummy_hcd 23:37:34 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x3, 0x0, 0x0) 23:37:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:34 executing program 5 (fault-call:8 fault-nth:0): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:37:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = dup2(r4, r3) write$FUSE_POLL(r6, &(0x7f0000000180)={0x18}, 0xffa0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 23:37:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12fcff00000018000004da0300000080000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:37:34 executing program 1: prlimit64(0x0, 0x6, &(0x7f0000000280)={0x1000000000009, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) r1 = gettid() ptrace$setregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)="574024e9c7fa401c03584db36de39880a3799e0d546a156e3f699bc54b9e35506f1e4a6c557b67d3352c945fbe4e9a7699f220658fdf5677db343b317ff802773ea5b1bc44dde606cfde4c", 0x4b}) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) [ 460.010886][ T22] audit: type=1326 audit(1601077054.535:634): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14930 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 460.035136][ T22] audit: type=1326 audit(1601077054.535:635): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14932 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:37:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x244, r1, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x244}}, 0x20040040) 23:37:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x23c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}]}, 0x23c}}, 0x20040040) [ 460.062013][ T22] audit: type=1326 audit(1601077054.535:636): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14931 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 460.086267][T14949] FAULT_INJECTION: forcing a failure. [ 460.086267][T14949] name failslab, interval 1, probability 0, space 0, times 0 [ 460.099252][T14949] CPU: 1 PID: 14949 Comm: syz-executor.5 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 460.109641][T14949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.119666][T14949] Call Trace: [ 460.122947][T14949] dump_stack+0x1b0/0x21e [ 460.127255][T14949] ? devkmsg_release+0x11c/0x11c [ 460.132177][T14949] ? show_regs_print_info+0x12/0x12 [ 460.137450][T14949] ? unwind_get_return_address_ptr+0x130/0x130 [ 460.143587][T14949] should_fail+0x6fb/0x860 [ 460.147990][T14949] ? setup_fault_attr+0x2b0/0x2b0 [ 460.153114][T14949] ? __kernel_text_address+0x93/0x110 [ 460.159244][T14949] ? unwind_get_return_address+0x48/0x90 [ 460.164851][T14949] ? arch_stack_walk+0x98/0xe0 [ 460.169623][T14949] ? alloc_pipe_info+0xa1/0x3a0 [ 460.174446][T14949] should_failslab+0x5/0x20 [ 460.178941][T14949] kmem_cache_alloc_trace+0x39/0x270 [ 460.184200][T14949] alloc_pipe_info+0xa1/0x3a0 [ 460.188850][T14949] splice_direct_to_actor+0x94e/0xb00 [ 460.194201][T14949] ? kstrtol_from_user+0x180/0x180 [ 460.199309][T14949] ? avc_policy_seqno+0x17/0x70 [ 460.204147][T14949] ? do_splice_direct+0x3d0/0x3d0 [ 460.209151][T14949] ? pipe_to_sendpage+0x300/0x300 [ 460.214844][T14949] ? security_file_permission+0x128/0x300 [ 460.220531][T14949] do_splice_direct+0x279/0x3d0 [ 460.225365][T14949] ? splice_direct_to_actor+0xb00/0xb00 [ 460.231572][T14949] ? avc_policy_seqno+0x17/0x70 [ 460.236393][T14949] ? security_file_permission+0x128/0x300 [ 460.242092][T14949] do_sendfile+0x89d/0x1110 [ 460.246583][T14949] ? compat_writev+0x390/0x390 [ 460.251318][T14949] ? security_file_permission+0x128/0x300 [ 460.257015][T14949] ? vfs_write+0x427/0x4f0 [ 460.261422][T14949] ? fput_many+0x42/0x1a0 [ 460.265777][T14949] __x64_sys_sendfile64+0x1ae/0x220 [ 460.270961][T14949] ? __ia32_sys_sendfile+0x240/0x240 [ 460.276236][T14949] do_syscall_64+0xcb/0x150 [ 460.280710][T14949] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 460.286575][T14949] RIP: 0033:0x45e179 [ 460.290461][T14949] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 460.310049][T14949] RSP: 002b:00007fadda65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 460.318441][T14949] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045e179 [ 460.326396][T14949] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 460.334514][T14949] RBP: 00007fadda65bca0 R08: 0000000000000000 R09: 0000000000000000 [ 460.342476][T14949] R10: 20000000000000d8 R11: 0000000000000246 R12: 0000000000000000 [ 460.350415][T14949] R13: 00007ffc35114a8f R14: 00007fadda65c9c0 R15: 000000000118cff4 23:37:35 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x7, 0x0, 0x0) 23:37:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x23c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x220, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5f3e32cedf4180d93f67bf03984ec0d0785f0"}]}]}, 0x23c}}, 0x20040040) [ 460.717155][ T5139] usb 3-1: Using ep0 maxpacket: 16 23:37:35 executing program 5 (fault-call:8 fault-nth:1): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) [ 460.810668][ T22] audit: type=1326 audit(1601077055.335:637): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14932 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 460.832919][ T22] audit: type=1326 audit(1601077055.335:638): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14931 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:37:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xe8e9f7d0031a48e0}, 0x40000) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10000040, 0x0, 0x9, 0x855d, 0xfffffffffffffffd, 0x9, 0x0, 0xb9b7}, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000300)=""/153, 0x99, 0x10041, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000003c0)=@add_del={0x2, &(0x7f0000000180)='bridge0\x00'}) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 460.837199][ T5139] usb 3-1: device descriptor read/all, error -61 [ 460.857833][ T22] audit: type=1326 audit(1601077055.345:639): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14969 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 460.870665][T14971] FAULT_INJECTION: forcing a failure. [ 460.870665][T14971] name failslab, interval 1, probability 0, space 0, times 0 [ 460.896739][T14971] CPU: 0 PID: 14971 Comm: syz-executor.5 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 460.906880][T14971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.916917][T14971] Call Trace: [ 460.920225][T14971] dump_stack+0x1b0/0x21e [ 460.924532][T14971] ? devkmsg_release+0x11c/0x11c [ 460.929445][T14971] ? show_regs_print_info+0x12/0x12 [ 460.934634][T14971] ? __rcu_read_lock+0x50/0x50 [ 460.939367][T14971] ? unwind_get_return_address_ptr+0x130/0x130 [ 460.945488][T14971] should_fail+0x6fb/0x860 [ 460.945635][ T22] audit: type=1326 audit(1601077055.435:640): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14976 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 460.949889][T14971] ? setup_fault_attr+0x2b0/0x2b0 [ 460.949898][T14971] ? stack_trace_save+0x1e0/0x1e0 [ 460.949905][T14971] ? setup_fault_attr+0x2b0/0x2b0 [ 460.949913][T14971] ? __kernel_text_address+0x93/0x110 [ 460.949921][T14971] ? unwind_get_return_address+0x48/0x90 [ 460.949936][T14971] ? kcalloc+0x32/0x60 [ 461.002003][T14971] should_failslab+0x5/0x20 [ 461.006483][T14971] __kmalloc+0x5f/0x2c0 [ 461.007117][ T5139] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 461.010630][T14971] ? kmem_cache_alloc_trace+0xc3/0x270 [ 461.010640][T14971] kcalloc+0x32/0x60 [ 461.010654][T14971] alloc_pipe_info+0x1b9/0x3a0 [ 461.032294][T14971] splice_direct_to_actor+0x94e/0xb00 [ 461.037683][T14971] ? kstrtol_from_user+0x180/0x180 [ 461.042783][T14971] ? avc_policy_seqno+0x17/0x70 [ 461.047609][T14971] ? do_splice_direct+0x3d0/0x3d0 [ 461.052624][T14971] ? pipe_to_sendpage+0x300/0x300 [ 461.057628][T14971] ? security_file_permission+0x128/0x300 [ 461.063323][T14971] do_splice_direct+0x279/0x3d0 [ 461.069102][T14971] ? splice_direct_to_actor+0xb00/0xb00 [ 461.074632][T14971] ? avc_policy_seqno+0x17/0x70 [ 461.079451][T14971] ? security_file_permission+0x128/0x300 [ 461.085138][T14971] do_sendfile+0x89d/0x1110 [ 461.089623][T14971] ? compat_writev+0x390/0x390 [ 461.094367][T14971] ? security_file_permission+0x128/0x300 [ 461.100070][T14971] ? vfs_write+0x427/0x4f0 [ 461.104480][T14971] ? fput_many+0x42/0x1a0 [ 461.108779][T14971] __x64_sys_sendfile64+0x1ae/0x220 [ 461.113960][T14971] ? __ia32_sys_sendfile+0x240/0x240 [ 461.119220][T14971] do_syscall_64+0xcb/0x150 [ 461.123716][T14971] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 461.129574][T14971] RIP: 0033:0x45e179 [ 461.133439][T14971] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 461.153033][T14971] RSP: 002b:00007fadda65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 461.161461][T14971] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045e179 [ 461.169403][T14971] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 461.177350][T14971] RBP: 00007fadda65bca0 R08: 0000000000000000 R09: 0000000000000000 [ 461.185303][T14971] R10: 20000000000000d8 R11: 0000000000000246 R12: 0000000000000001 [ 461.193258][T14971] R13: 00007ffc35114a8f R14: 00007fadda65c9c0 R15: 000000000118cff4 [ 461.287151][ T5139] usb 3-1: device descriptor read/64, error 18 [ 461.687091][ T5139] usb 3-1: device descriptor read/64, error 18 [ 461.710601][ T22] audit: type=1326 audit(1601077056.235:641): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14976 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 461.807177][ T5139] usb usb3-port1: attempt power cycle [ 462.517053][ T5139] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 462.687057][ T5139] usb 3-1: device descriptor read/8, error -61 [ 462.957040][ T5139] usb 3-1: device descriptor read/8, error -61 23:37:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESHEX=r1], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = dup2(r4, r3) write$FUSE_POLL(r6, &(0x7f0000000180)={0x18}, 0xffa0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x6) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x8ec0, 0x0) r11 = dup2(r9, r8) write$FUSE_POLL(r11, &(0x7f0000000180)={0x18}, 0xffa0) fsconfig$FSCONFIG_SET_FD(r11, 0x5, &(0x7f0000000040)='!&\'}:-]#-}\x00', 0x0, r1) 23:37:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x20040040) 23:37:37 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x10, 0x0, 0x0) 23:37:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r3 = socket$nl_route(0x10, 0x3, 0x0) fsync(r3) 23:37:37 executing program 5 (fault-call:8 fault-nth:2): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:37:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x20040040) 23:37:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x20040040) [ 463.126737][T15001] FAULT_INJECTION: forcing a failure. [ 463.126737][T15001] name failslab, interval 1, probability 0, space 0, times 0 [ 463.139508][T15001] CPU: 1 PID: 15001 Comm: syz-executor.5 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 463.149665][T15001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.159711][T15001] Call Trace: [ 463.163021][T15001] dump_stack+0x1b0/0x21e [ 463.167346][T15001] ? devkmsg_release+0x11c/0x11c [ 463.172402][T15001] ? show_regs_print_info+0x12/0x12 [ 463.177702][T15001] ? unwind_get_return_address_ptr+0x130/0x130 [ 463.183865][T15001] should_fail+0x6fb/0x860 [ 463.188272][T15001] ? setup_fault_attr+0x2b0/0x2b0 [ 463.193284][T15001] ? __kernel_text_address+0x93/0x110 [ 463.198650][T15001] ? unwind_get_return_address+0x48/0x90 [ 463.204273][T15001] ? arch_stack_walk+0x98/0xe0 [ 463.209026][T15001] ? kvmalloc_node+0xc2/0x120 [ 463.213697][T15001] should_failslab+0x5/0x20 [ 463.218191][T15001] __kmalloc+0x5f/0x2c0 [ 463.222336][T15001] kvmalloc_node+0xc2/0x120 23:37:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x1ec, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1d0, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}]}]}, 0x1ec}}, 0x20040040) [ 463.226921][T15001] iov_iter_get_pages_alloc+0xbb5/0x10f0 [ 463.232563][T15001] ? iov_iter_get_pages+0xea0/0xea0 [ 463.237751][T15001] default_file_splice_read+0x17d/0x920 [ 463.243284][T15001] ? kcalloc+0x32/0x60 [ 463.247337][T15001] ? alloc_pipe_info+0x1b9/0x3a0 [ 463.252259][T15001] ? splice_direct_to_actor+0x94e/0xb00 [ 463.257796][T15001] ? do_sendfile+0x89d/0x1110 [ 463.262461][T15001] ? __x64_sys_sendfile64+0x1ae/0x220 [ 463.267823][T15001] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 463.273890][T15001] ? __ia32_sys_tee+0xa0/0xa0 [ 463.278562][T15001] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 463.284620][T15001] ? __rcu_read_lock+0x50/0x50 [ 463.289377][T15001] ? unwind_get_return_address_ptr+0x130/0x130 [ 463.295526][T15001] ? memset+0x1f/0x40 [ 463.299557][T15001] ? fsnotify+0x13a0/0x1460 [ 463.304095][T15001] ? setup_fault_attr+0x2b0/0x2b0 [ 463.309108][T15001] ? __fsnotify_parent+0xeb/0x300 [ 463.314121][T15001] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 463.320873][T15001] ? __fsnotify_parent+0x300/0x300 23:37:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x1ec, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1d0, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}]}]}, 0x1ec}}, 0x20040040) [ 463.325975][T15001] ? selinux_file_permission+0x2d0/0x520 [ 463.331623][T15001] ? security_file_permission+0x1e9/0x300 [ 463.337333][T15001] ? __ia32_sys_tee+0xa0/0xa0 [ 463.341999][T15001] splice_direct_to_actor+0x3cf/0xb00 [ 463.347360][T15001] ? do_splice_direct+0x3d0/0x3d0 [ 463.352373][T15001] ? pipe_to_sendpage+0x300/0x300 [ 463.357390][T15001] ? security_file_permission+0x128/0x300 [ 463.363099][T15001] do_splice_direct+0x279/0x3d0 [ 463.367970][T15001] ? splice_direct_to_actor+0xb00/0xb00 [ 463.373504][T15001] ? avc_policy_seqno+0x17/0x70 [ 463.378359][T15001] ? security_file_permission+0x128/0x300 [ 463.384065][T15001] do_sendfile+0x89d/0x1110 [ 463.388563][T15001] ? compat_writev+0x390/0x390 [ 463.393318][T15001] ? security_file_permission+0x128/0x300 [ 463.399048][T15001] ? vfs_write+0x427/0x4f0 [ 463.403455][T15001] ? fput_many+0x42/0x1a0 [ 463.407774][T15001] __x64_sys_sendfile64+0x1ae/0x220 [ 463.412962][T15001] ? __ia32_sys_sendfile+0x240/0x240 [ 463.418237][T15001] do_syscall_64+0xcb/0x150 [ 463.422733][T15001] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 463.428607][T15001] RIP: 0033:0x45e179 [ 463.432487][T15001] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 463.452083][T15001] RSP: 002b:00007fadda65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 463.460486][T15001] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045e179 [ 463.468462][T15001] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 23:37:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x1ec, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1d0, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}]}]}, 0x1ec}}, 0x20040040) [ 463.476421][T15001] RBP: 00007fadda65bca0 R08: 0000000000000000 R09: 0000000000000000 [ 463.484404][T15001] R10: 20000000000000d8 R11: 0000000000000246 R12: 0000000000000002 [ 463.492367][T15001] R13: 00007ffc35114a8f R14: 00007fadda65c9c0 R15: 000000000118cff4 23:37:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x1f0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1d4, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x1f0}}, 0x20040040) 23:37:38 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x300, 0x0, 0x0) [ 463.786970][ T5139] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 463.856774][ T22] kauditd_printk_skb: 2 callbacks suppressed [ 463.856782][ T22] audit: type=1326 audit(1601077058.375:644): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14987 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 463.997027][ T5139] usb 3-1: device descriptor read/8, error -61 [ 464.277045][ T5139] usb 3-1: device descriptor read/8, error -61 [ 464.396982][ T5139] usb usb3-port1: unable to enumerate USB device 23:37:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000280)) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220002ff5e7881a900000000"], 0x0}, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r1, 0x2, 0x401, 0x1000000000000}) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c, 0x40000) sysinfo(&(0x7f0000000200)=""/120) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000380)={{0x10b, 0x7f, 0x3, 0x3a, 0x3ac, 0x5, 0xa9, 0x400}, "e75259392156a7985e7c979aedaca0329e89802342d5ada49c809d09a1d981bda7dbd891f8a948d2", [[], [], [], [], []]}, 0x548) 23:37:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x1f0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1d4, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x1f0}}, 0x20040040) 23:37:40 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x700, 0x0, 0x0) 23:37:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r2}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e24}}]}, 0x30}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x5}, [{0x2, 0x7, 0xee00}, {0x2, 0x3, r2}, {0x2, 0x4, r3}], {0x4, 0x3}, [{0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x3}, {0x20, 0x4}}, 0x44, 0x1) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={0xffffffffffffffff, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000180)={{}, {@val, @max='max'}}) sendfile(r5, r4, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x5, 0x5, 0x8}}, 0x28) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x0, 0x0, 0x40000006, 0x0, 0x3fe}, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000080)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x323a02, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140)) sendfile(r4, r0, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:40 executing program 5 (fault-call:8 fault-nth:3): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:37:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x1f0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1d4, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x1f0}}, 0x20040040) 23:37:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x218, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1fc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x2a, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5"}]}]}, 0x218}}, 0x20040040) [ 466.056204][ T22] audit: type=1326 audit(1601077060.575:645): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15023 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 466.082471][ T22] audit: type=1326 audit(1601077060.585:646): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15021 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 466.111511][T15037] FAULT_INJECTION: forcing a failure. [ 466.111511][T15037] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 466.112822][ T22] audit: type=1326 audit(1601077060.585:647): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15024 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 466.125399][T15037] CPU: 0 PID: 15037 Comm: syz-executor.5 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 23:37:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x218, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1fc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x2a, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5"}]}]}, 0x218}}, 0x20040040) 23:37:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x218, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1fc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x2a, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5"}]}]}, 0x218}}, 0x20040040) 23:37:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x22c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x210, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x3d, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5"}]}]}, 0x22c}}, 0x20040040) 23:37:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x22c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x210, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x3d, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5"}]}]}, 0x22c}}, 0x20040040) [ 466.156841][T15037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.166890][T15037] Call Trace: [ 466.170177][T15037] dump_stack+0x1b0/0x21e [ 466.174492][T15037] ? devkmsg_release+0x11c/0x11c [ 466.179420][T15037] ? show_regs_print_info+0x12/0x12 [ 466.184784][T15037] ? __kasan_kmalloc+0x179/0x1b0 [ 466.189699][T15037] ? __kasan_kmalloc+0x117/0x1b0 [ 466.194615][T15037] ? __kmalloc+0xf7/0x2c0 [ 466.198941][T15037] ? kvmalloc_node+0xc2/0x120 [ 466.203628][T15037] should_fail+0x6fb/0x860 [ 466.208059][T15037] ? setup_fault_attr+0x2b0/0x2b0 [ 466.213084][T15037] __alloc_pages_nodemask+0x1ee/0x7c0 [ 466.219499][T15037] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 466.225043][T15037] ? should_fail+0x182/0x860 [ 466.229632][T15037] ? setup_fault_attr+0x2b0/0x2b0 [ 466.234685][T15037] ? __kernel_text_address+0x93/0x110 [ 466.240136][T15037] ? unwind_get_return_address+0x48/0x90 [ 466.245738][T15037] ? arch_stack_walk+0x98/0xe0 [ 466.250479][T15037] ? kvmalloc_node+0xc2/0x120 [ 466.255145][T15037] push_pipe+0x385/0x740 [ 466.259372][T15037] iov_iter_get_pages_alloc+0xc2c/0x10f0 [ 466.264972][T15037] ? iov_iter_get_pages+0xea0/0xea0 [ 466.270156][T15037] default_file_splice_read+0x17d/0x920 [ 466.275678][T15037] ? kcalloc+0x32/0x60 [ 466.279716][T15037] ? alloc_pipe_info+0x1b9/0x3a0 [ 466.284641][T15037] ? splice_direct_to_actor+0x94e/0xb00 [ 466.290168][T15037] ? do_sendfile+0x89d/0x1110 [ 466.294832][T15037] ? __x64_sys_sendfile64+0x1ae/0x220 [ 466.300171][T15037] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 466.306219][T15037] ? __ia32_sys_tee+0xa0/0xa0 [ 466.310872][T15037] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 466.316922][T15037] ? __rcu_read_lock+0x50/0x50 [ 466.321680][T15037] ? unwind_get_return_address_ptr+0x130/0x130 [ 466.327808][T15037] ? memset+0x1f/0x40 [ 466.331773][T15037] ? fsnotify+0x13a0/0x1460 [ 466.336264][T15037] ? setup_fault_attr+0x2b0/0x2b0 [ 466.341256][T15037] ? __fsnotify_parent+0xeb/0x300 [ 466.346265][T15037] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 466.353019][T15037] ? __fsnotify_parent+0x300/0x300 [ 466.358113][T15037] ? selinux_file_permission+0x2d0/0x520 [ 466.363734][T15037] ? security_file_permission+0x1e9/0x300 [ 466.369447][T15037] ? __ia32_sys_tee+0xa0/0xa0 [ 466.374112][T15037] splice_direct_to_actor+0x3cf/0xb00 [ 466.379472][T15037] ? do_splice_direct+0x3d0/0x3d0 [ 466.384477][T15037] ? pipe_to_sendpage+0x300/0x300 [ 466.389481][T15037] ? security_file_permission+0x128/0x300 [ 466.395174][T15037] do_splice_direct+0x279/0x3d0 [ 466.400015][T15037] ? splice_direct_to_actor+0xb00/0xb00 [ 466.405552][T15037] ? avc_policy_seqno+0x17/0x70 [ 466.410380][T15037] ? security_file_permission+0x128/0x300 [ 466.416093][T15037] do_sendfile+0x89d/0x1110 [ 466.420577][T15037] ? compat_writev+0x390/0x390 [ 466.425319][T15037] ? security_file_permission+0x128/0x300 [ 466.431016][T15037] ? vfs_write+0x427/0x4f0 [ 466.435404][T15037] ? fput_many+0x42/0x1a0 [ 466.439720][T15037] __x64_sys_sendfile64+0x1ae/0x220 [ 466.444888][T15037] ? __ia32_sys_sendfile+0x240/0x240 [ 466.450148][T15037] do_syscall_64+0xcb/0x150 [ 466.454637][T15037] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 466.460502][T15037] RIP: 0033:0x45e179 [ 466.464375][T15037] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 466.483952][T15037] RSP: 002b:00007fadda65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 466.492338][T15037] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045e179 [ 466.500286][T15037] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 466.508227][T15037] RBP: 00007fadda65bca0 R08: 0000000000000000 R09: 0000000000000000 [ 466.516174][T15037] R10: 20000000000000d8 R11: 0000000000000246 R12: 0000000000000003 [ 466.524141][T15037] R13: 00007ffc35114a8f R14: 00007fadda65c9c0 R15: 000000000118cff4 [ 466.855384][ T22] audit: type=1326 audit(1601077061.375:648): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15023 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 466.876812][ T148] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 466.917841][ T22] audit: type=1326 audit(1601077061.445:649): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15021 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 467.116793][ T148] usb 3-1: Using ep0 maxpacket: 16 [ 467.236884][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.247862][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.258339][ T148] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 467.271481][ T148] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 467.280785][ T148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.289626][ T148] usb 3-1: config 0 descriptor?? [ 468.026838][ T148] usbhid 3-1:0.0: can't add hid device: -71 [ 468.032953][ T148] usbhid: probe of 3-1:0.0 failed with error -71 [ 468.040656][ T148] usb 3-1: USB disconnect, device number 38 [ 468.736937][ T148] usb 3-1: new high-speed USB device number 39 using dummy_hcd 23:37:43 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x4000, 0x0, 0x0) 23:37:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x22c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x210, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x3d, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5ebf4ddd3087c6ecb3aa25027b198ecf5d731c5"}]}]}, 0x22c}}, 0x20040040) 23:37:43 executing program 5 (fault-call:8 fault-nth:4): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:37:43 executing program 4: ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xffffffff7fffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x965b5871bf68bfed, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000, 0x0, 0x400000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da03000000000001090224000100000000090400000903746fece5e500000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000200)={0x0, "966680b7bcf185b58b3bcae87631fc6e"}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0x100000001, 0x5, 0x80}) r5 = getpid() sched_setattr(r5, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x7ff}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r5) 23:37:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x7ff}, 0x0) sched_setattr(r3, &(0x7f0000000000)={0x38, 0x0, 0x20, 0x1, 0x447, 0x3ff, 0x100, 0x1, 0x0, 0x9}, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x218, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1fc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x2b, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc5b29c42ada22af5c06a76ed08928173ed5eb"}]}]}, 0x218}}, 0x20040040) 23:37:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x208, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1ec, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x19, 0x1, "3bfa8872ca154dba353aa79b2530f378476468f9fc"}]}]}, 0x208}}, 0x20040040) [ 468.838901][ T22] audit: type=1326 audit(1601077063.365:650): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15069 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 468.864479][ T22] audit: type=1326 audit(1601077063.365:651): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15068 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:37:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x1f4, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1d8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x7, 0x1, "3bfa88"}]}]}, 0x1f4}}, 0x20040040) 23:37:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x1f4, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1d8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x5, 0x1, ';'}]}]}, 0x1f4}}, 0x20040040) [ 468.887414][ T22] audit: type=1326 audit(1601077063.385:652): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15066 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 468.913727][T15081] FAULT_INJECTION: forcing a failure. [ 468.913727][T15081] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 468.927192][T15081] CPU: 0 PID: 15081 Comm: syz-executor.5 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 468.937331][T15081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.947568][T15081] Call Trace: [ 468.950844][T15081] dump_stack+0x1b0/0x21e [ 468.955148][T15081] ? devkmsg_release+0x11c/0x11c [ 468.960054][T15081] ? show_regs_print_info+0x12/0x12 [ 468.965233][T15081] ? __kasan_kmalloc+0x179/0x1b0 [ 468.970138][T15081] ? kasan_alloc_pages+0x4a/0x60 [ 468.975048][T15081] should_fail+0x6fb/0x860 [ 468.979461][T15081] ? setup_fault_attr+0x2b0/0x2b0 [ 468.984556][T15081] __alloc_pages_nodemask+0x1ee/0x7c0 [ 468.989909][T15081] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 468.995423][T15081] ? should_fail+0x182/0x860 [ 468.999989][T15081] ? setup_fault_attr+0x2b0/0x2b0 [ 469.005093][T15081] ? __kernel_text_address+0x93/0x110 [ 469.010434][T15081] ? unwind_get_return_address+0x48/0x90 [ 469.016039][T15081] ? arch_stack_walk+0x98/0xe0 [ 469.020774][T15081] ? kvmalloc_node+0xc2/0x120 [ 469.025425][T15081] push_pipe+0x385/0x740 [ 469.029640][T15081] iov_iter_get_pages_alloc+0xc2c/0x10f0 [ 469.035255][T15081] ? iov_iter_get_pages+0xea0/0xea0 [ 469.040429][T15081] default_file_splice_read+0x17d/0x920 [ 469.046067][T15081] ? kcalloc+0x32/0x60 [ 469.050125][T15081] ? alloc_pipe_info+0x1b9/0x3a0 [ 469.055045][T15081] ? splice_direct_to_actor+0x94e/0xb00 [ 469.060572][T15081] ? do_sendfile+0x89d/0x1110 [ 469.065233][T15081] ? __x64_sys_sendfile64+0x1ae/0x220 [ 469.070586][T15081] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 469.076626][T15081] ? __ia32_sys_tee+0xa0/0xa0 [ 469.081297][T15081] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 469.087333][T15081] ? _raw_spin_lock+0xa1/0x170 [ 469.092073][T15081] ? memset+0x1f/0x40 [ 469.096039][T15081] ? fsnotify+0x13a0/0x1460 [ 469.100530][T15081] ? __fsnotify_parent+0xeb/0x300 [ 469.105524][T15081] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 469.112256][T15081] ? __fsnotify_parent+0x300/0x300 [ 469.117349][T15081] ? selinux_file_permission+0x2d0/0x520 [ 469.122964][T15081] ? security_file_permission+0x1e9/0x300 [ 469.128659][T15081] ? __ia32_sys_tee+0xa0/0xa0 [ 469.133574][T15081] splice_direct_to_actor+0x3cf/0xb00 [ 469.138916][T15081] ? do_splice_direct+0x3d0/0x3d0 [ 469.143911][T15081] ? pipe_to_sendpage+0x300/0x300 [ 469.148924][T15081] ? security_file_permission+0x128/0x300 [ 469.154619][T15081] do_splice_direct+0x279/0x3d0 [ 469.159452][T15081] ? splice_direct_to_actor+0xb00/0xb00 [ 469.165937][T15081] ? avc_policy_seqno+0x17/0x70 [ 469.170767][T15081] ? security_file_permission+0x128/0x300 [ 469.176494][T15081] do_sendfile+0x89d/0x1110 [ 469.180973][T15081] ? compat_writev+0x390/0x390 [ 469.185722][T15081] ? security_file_permission+0x128/0x300 [ 469.191423][T15081] ? vfs_write+0x427/0x4f0 [ 469.195820][T15081] ? fput_many+0x42/0x1a0 [ 469.200119][T15081] __x64_sys_sendfile64+0x1ae/0x220 [ 469.205304][T15081] ? __ia32_sys_sendfile+0x240/0x240 [ 469.210568][T15081] do_syscall_64+0xcb/0x150 [ 469.215068][T15081] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 469.220928][T15081] RIP: 0033:0x45e179 [ 469.224792][T15081] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 469.244369][T15081] RSP: 002b:00007fadda65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 469.252804][T15081] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045e179 [ 469.260772][T15081] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 469.268737][T15081] RBP: 00007fadda65bca0 R08: 0000000000000000 R09: 0000000000000000 [ 469.276699][T15081] R10: 20000000000000d8 R11: 0000000000000246 R12: 0000000000000004 23:37:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x1f0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1d4, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "17dd8360748d4543f0ac261391a28d188e536aaa4d9520a41f57e063e23088b08ede7a65d7ad7e6ad39b89399b39b337d0e8f924e0e76465c9ddc2014b9aa164106a59681bfb7dff25b7210aa64a42cf215c3b4a4b4c1b3d2ead2863b175bfecf7cf1ff7b99d3633440e88c7c0b3b0d56c371b3759ebaeebaff66560552ba347cd1a8d791d49dd6fe24e44cd77be0d36fc9082bc745a24a69aea0222d5e0f288556c80335c3b48108bfd5140905d42beb6399300198aa3a8e13a9e97a7ce00445f2ec18e65b2965a387f59533a29d978a04225e1a7d347f6fde532e4d6958333579ed80d5107e3"}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x1f0}}, 0x20040040) 23:37:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x104, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0xe8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "419d8320a95a098e292b6ef7593523f30ed081ec559b7e5ca4a0f434a37b776e075beb231f2efe751dd135ed056c709559e0fc09c19fa97950eae4afbd24cb75cf7252b697f9ab42deb8"}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x104}}, 0x20040040) [ 469.284648][T15081] R13: 00007ffc35114a8f R14: 00007fadda65c9c0 R15: 000000000118cff4 23:37:43 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x800000, 0x0, 0x0) 23:37:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0xb4, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x98, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x7f, 0x1, "ab450bb6329859396b088d4cfafe672c0901197d76ee5bb91c8d1e20280d638f8679aebfdfe45d087b520b2ff0059cfebbd5ceca8f78e82992fd0c7fb7abee4113be9a9bbc8f116442d6a649a2879f79f828f7055fe890153839a7d564a65187184c239b04a0015be1bb9c182b8a086eedfe0f143eb5c6f9d99c6f"}, @NL80211_BAND_5GHZ={0x4}]}]}, 0xb4}}, 0x20040040) [ 469.426739][ T148] usb 3-1: Using ep0 maxpacket: 16 [ 469.566703][ T148] usb 3-1: config 0 has an invalid descriptor of length 229, skipping remainder of the config [ 469.577039][ T148] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 469.590759][ T148] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 469.600099][ T148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.609773][ T148] usb 3-1: config 0 descriptor?? 23:37:44 executing program 5 (fault-call:8 fault-nth:5): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:37:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1f, 0x8240) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x80, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x55}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4001) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x114, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x41}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r3, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 469.638988][ T22] audit: type=1326 audit(1601077064.165:653): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15069 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 469.668794][ T22] audit: type=1326 audit(1601077064.185:654): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15066 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 469.691308][ T22] audit: type=1326 audit(1601077064.205:655): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15106 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 469.713431][ T22] audit: type=1326 audit(1601077064.205:656): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15105 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 469.732813][T15110] FAULT_INJECTION: forcing a failure. [ 469.732813][T15110] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 469.749064][T15110] CPU: 0 PID: 15110 Comm: syz-executor.5 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 469.759213][T15110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.769256][T15110] Call Trace: [ 469.772519][T15110] dump_stack+0x1b0/0x21e [ 469.776819][T15110] ? devkmsg_release+0x11c/0x11c [ 469.781754][T15110] ? show_regs_print_info+0x12/0x12 [ 469.786925][T15110] ? __kasan_kmalloc+0x179/0x1b0 [ 469.791836][T15110] ? kasan_alloc_pages+0x4a/0x60 [ 469.796752][T15110] should_fail+0x6fb/0x860 [ 469.801141][T15110] ? setup_fault_attr+0x2b0/0x2b0 [ 469.806145][T15110] __alloc_pages_nodemask+0x1ee/0x7c0 [ 469.811493][T15110] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 469.817012][T15110] ? should_fail+0x182/0x860 [ 469.822182][T15110] ? setup_fault_attr+0x2b0/0x2b0 [ 469.827970][T15110] ? __kernel_text_address+0x93/0x110 [ 469.833330][T15110] ? unwind_get_return_address+0x48/0x90 [ 469.839191][T15110] ? arch_stack_walk+0x98/0xe0 [ 469.843937][T15110] ? kvmalloc_node+0xc2/0x120 [ 469.848585][T15110] push_pipe+0x385/0x740 [ 469.852798][T15110] iov_iter_get_pages_alloc+0xc2c/0x10f0 [ 469.858400][T15110] ? iov_iter_get_pages+0xea0/0xea0 [ 469.863589][T15110] default_file_splice_read+0x17d/0x920 [ 469.869127][T15110] ? kcalloc+0x32/0x60 [ 469.873190][T15110] ? alloc_pipe_info+0x1b9/0x3a0 [ 469.878116][T15110] ? splice_direct_to_actor+0x94e/0xb00 [ 469.883893][T15110] ? do_sendfile+0x89d/0x1110 [ 469.888551][T15110] ? __x64_sys_sendfile64+0x1ae/0x220 [ 469.893898][T15110] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 469.899956][T15110] ? __ia32_sys_tee+0xa0/0xa0 [ 469.904599][T15110] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 469.910637][T15110] ? __rcu_read_lock+0x50/0x50 [ 469.915372][T15110] ? unwind_get_return_address_ptr+0x130/0x130 [ 469.921499][T15110] ? memset+0x1f/0x40 [ 469.925457][T15110] ? fsnotify+0x13a0/0x1460 [ 469.929950][T15110] ? setup_fault_attr+0x2b0/0x2b0 [ 469.934952][T15110] ? __fsnotify_parent+0xeb/0x300 [ 469.939945][T15110] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 469.946687][T15110] ? __fsnotify_parent+0x300/0x300 [ 469.951769][T15110] ? selinux_file_permission+0x2d0/0x520 [ 469.957387][T15110] ? security_file_permission+0x1e9/0x300 [ 469.963074][T15110] ? __ia32_sys_tee+0xa0/0xa0 [ 469.967736][T15110] splice_direct_to_actor+0x3cf/0xb00 [ 469.973080][T15110] ? do_splice_direct+0x3d0/0x3d0 [ 469.978082][T15110] ? pipe_to_sendpage+0x300/0x300 [ 469.983077][T15110] ? security_file_permission+0x128/0x300 [ 469.988765][T15110] do_splice_direct+0x279/0x3d0 [ 469.993583][T15110] ? splice_direct_to_actor+0xb00/0xb00 [ 469.999108][T15110] ? avc_policy_seqno+0x17/0x70 [ 470.003930][T15110] ? security_file_permission+0x128/0x300 [ 470.009620][T15110] do_sendfile+0x89d/0x1110 [ 470.014107][T15110] ? compat_writev+0x390/0x390 [ 470.018841][T15110] ? security_file_permission+0x128/0x300 [ 470.024530][T15110] ? vfs_write+0x427/0x4f0 [ 470.028913][T15110] ? fput_many+0x42/0x1a0 [ 470.033212][T15110] __x64_sys_sendfile64+0x1ae/0x220 [ 470.038389][T15110] ? __ia32_sys_sendfile+0x240/0x240 [ 470.043648][T15110] do_syscall_64+0xcb/0x150 [ 470.048125][T15110] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 470.053995][T15110] RIP: 0033:0x45e179 [ 470.057871][T15110] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 470.077448][T15110] RSP: 002b:00007fadda65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 470.085839][T15110] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045e179 [ 470.093780][T15110] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 470.101723][T15110] RBP: 00007fadda65bca0 R08: 0000000000000000 R09: 0000000000000000 [ 470.109857][T15110] R10: 20000000000000d8 R11: 0000000000000246 R12: 0000000000000005 [ 470.117796][T15110] R13: 00007ffc35114a8f R14: 00007fadda65c9c0 R15: 000000000118cff4 [ 470.196662][ T148] usb 3-1: string descriptor 0 read error: -71 [ 470.203178][ T148] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 470.211402][ T148] usb 3-1: USB disconnect, device number 39 [ 470.489754][ T22] audit: type=1326 audit(1601077065.005:657): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15106 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 470.926619][ T148] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 471.176598][ T148] usb 3-1: Using ep0 maxpacket: 16 23:37:45 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x1000000, 0x0, 0x0) 23:37:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x18, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x8, 0x2, "2e1b0867"}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x34}}, 0x20040040) 23:37:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x4a) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)={'ip_vti0', 0x32, 0x39}, 0xa) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:45 executing program 5 (fault-call:8 fault-nth:6): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:37:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8ec0, 0x0) dup2(r4, r3) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 23:37:45 executing program 4: setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e24, 0x3, 'wlc\x00', 0x1, 0x2, 0x56}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x17, 0x0, 0x5, 0x0, 0xfffffffffffffff8, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x20040040) 23:37:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x20040040) 23:37:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x20040040) [ 471.298060][ T22] audit: type=1326 audit(1601077065.826:658): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15127 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 471.321473][ T22] audit: type=1326 audit(1601077065.826:659): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15123 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 471.345676][ T22] audit: type=1326 audit(1601077065.826:660): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15126 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 471.346583][ T148] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 471.381558][T15140] FAULT_INJECTION: forcing a failure. [ 471.381558][T15140] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:37:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x14, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5, 0x2, "d0"}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x30}}, 0x20040040) 23:37:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x28}}, 0x20040040) 23:37:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x28}}, 0x20040040) [ 471.396944][T15140] CPU: 0 PID: 15140 Comm: syz-executor.5 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 471.407074][T15140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.417123][T15140] Call Trace: [ 471.420406][T15140] dump_stack+0x1b0/0x21e [ 471.424748][T15140] ? devkmsg_release+0x11c/0x11c [ 471.429679][T15140] ? show_regs_print_info+0x12/0x12 [ 471.434906][T15140] ? __kasan_kmalloc+0x179/0x1b0 [ 471.439844][T15140] ? kasan_alloc_pages+0x4a/0x60 [ 471.444782][T15140] should_fail+0x6fb/0x860 [ 471.449361][T15140] ? setup_fault_attr+0x2b0/0x2b0 [ 471.454372][T15140] __alloc_pages_nodemask+0x1ee/0x7c0 [ 471.459719][T15140] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 471.465235][T15140] ? should_fail+0x182/0x860 [ 471.469801][T15140] ? setup_fault_attr+0x2b0/0x2b0 [ 471.474818][T15140] ? __kernel_text_address+0x93/0x110 [ 471.480192][T15140] ? unwind_get_return_address+0x48/0x90 [ 471.485797][T15140] ? arch_stack_walk+0x98/0xe0 [ 471.490544][T15140] ? kvmalloc_node+0xc2/0x120 [ 471.495204][T15140] push_pipe+0x385/0x740 [ 471.499419][T15140] iov_iter_get_pages_alloc+0xc2c/0x10f0 [ 471.505056][T15140] ? iov_iter_get_pages+0xea0/0xea0 [ 471.510228][T15140] default_file_splice_read+0x17d/0x920 [ 471.515744][T15140] ? kcalloc+0x32/0x60 [ 471.519789][T15140] ? alloc_pipe_info+0x1b9/0x3a0 [ 471.524719][T15140] ? splice_direct_to_actor+0x94e/0xb00 [ 471.530234][T15140] ? do_sendfile+0x89d/0x1110 [ 471.534917][T15140] ? __x64_sys_sendfile64+0x1ae/0x220 [ 471.540269][T15140] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 471.546320][T15140] ? __ia32_sys_tee+0xa0/0xa0 [ 471.550982][T15140] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 471.557042][T15140] ? __rcu_read_lock+0x50/0x50 [ 471.562845][T15140] ? unwind_get_return_address_ptr+0x130/0x130 [ 471.568972][T15140] ? memset+0x1f/0x40 [ 471.572946][T15140] ? fsnotify+0x13a0/0x1460 [ 471.577423][T15140] ? setup_fault_attr+0x2b0/0x2b0 [ 471.582425][T15140] ? __fsnotify_parent+0xeb/0x300 [ 471.587423][T15140] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 471.594170][T15140] ? __fsnotify_parent+0x300/0x300 [ 471.599280][T15140] ? selinux_file_permission+0x2d0/0x520 [ 471.604906][T15140] ? security_file_permission+0x1e9/0x300 [ 471.610616][T15140] ? __ia32_sys_tee+0xa0/0xa0 [ 471.615287][T15140] splice_direct_to_actor+0x3cf/0xb00 [ 471.620632][T15140] ? do_splice_direct+0x3d0/0x3d0 [ 471.625626][T15140] ? pipe_to_sendpage+0x300/0x300 [ 471.630651][T15140] ? security_file_permission+0x128/0x300 [ 471.636346][T15140] do_splice_direct+0x279/0x3d0 [ 471.641179][T15140] ? splice_direct_to_actor+0xb00/0xb00 [ 471.646718][T15140] ? avc_policy_seqno+0x17/0x70 [ 471.651553][T15140] ? security_file_permission+0x128/0x300 [ 471.657337][T15140] do_sendfile+0x89d/0x1110 [ 471.661837][T15140] ? compat_writev+0x390/0x390 [ 471.666605][T15140] ? security_file_permission+0x128/0x300 [ 471.672321][T15140] ? vfs_write+0x427/0x4f0 [ 471.676708][T15140] ? fput_many+0x42/0x1a0 [ 471.681007][T15140] __x64_sys_sendfile64+0x1ae/0x220 [ 471.686178][T15140] ? __ia32_sys_sendfile+0x240/0x240 [ 471.691434][T15140] do_syscall_64+0xcb/0x150 [ 471.695910][T15140] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 471.701770][T15140] RIP: 0033:0x45e179 [ 471.705637][T15140] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 471.725232][T15140] RSP: 002b:00007fadda65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 471.733638][T15140] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045e179 [ 471.741598][T15140] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 23:37:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x28}}, 0x20040040) 23:37:46 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x3000000, 0x0, 0x0) [ 471.749553][T15140] RBP: 00007fadda65bca0 R08: 0000000000000000 R09: 0000000000000000 [ 471.757494][T15140] R10: 20000000000000d8 R11: 0000000000000246 R12: 0000000000000006 [ 471.765434][T15140] R13: 00007ffc35114a8f R14: 00007fadda65c9c0 R15: 000000000118cff4 [ 471.777290][ T148] usb 3-1: can't read configurations, error -71 23:37:46 executing program 1: seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000da) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x20040040) [ 472.156507][ T148] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 472.396502][ T148] usb 3-1: Using ep0 maxpacket: 16 [ 472.516581][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.527697][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.538730][ T148] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 472.551850][ T148] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 472.561215][ T148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.570120][ T148] usb 3-1: config 0 descriptor?? [ 473.037751][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x4 [ 473.045151][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.054044][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.062101][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.070216][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.078801][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.086172][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.094864][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.102984][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.111211][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.119250][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.127398][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.134759][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.142708][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.150128][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.157619][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.164971][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.172383][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.179792][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.187233][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.194592][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.201989][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.209395][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.216784][ T148] hid-generic 0003:045E:03DA.0035: unknown main item tag 0x0 [ 473.224788][ T148] hid-generic 0003:045E:03DA.0035: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 23:37:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={0x0, 0xec, 0x5c}, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'vmac64(sm4-ce)\x00'}}, &(0x7f0000000200)="e2fb835a0d7a97beaaa271db5dfcfd7f1e117db20caf7f29e3fec54edfc10d25e39ef2fb5ae30af78c2a7bc686f887e173befbc77aeb77845d2aa6ba8ec9d67394de39c48e23cbe9392bb802696cf5e5144a75514a2c27aa6a34015f0bc5ca08176acf10f99a0fec6c57fe306c173bed8f442766315645fbed7c7795e2a5a141e5a672f8116c671a0c8acb43dd1a15465f81d56861f4a6ba466b9c175df523680a06ffa3309029c30c6148c2ee30d1ba8efaf3f62edf258cb2f3cec8739cdbf78b7d954173905f8781fdeaad6d3b525532d24c76d5b8bd0429c27a0b804a9344843850fa0f37fc9eb3baaf30", &(0x7f0000000380)=""/92) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:37:48 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x7000000, 0x0, 0x0) 23:37:48 executing program 5 (fault-call:8 fault-nth:7): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:37:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000071}, 0x844) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000080)) ptrace$pokeuser(0x6, 0x0, 0x3, 0x6) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x10000]}, 0x8) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000140)={0x2, 0x100, 0x6, 0x3, 0x8, 0x80000001, 0x7fffffff, 0x3, 0x3ff, 0x1ff, 0x80000000, 0xfffffffb, 0x7, 0x9}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000000)) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x1, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200c8014}, 0x4000) sendfile(r3, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x20040040) 23:37:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r1, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x0, r1, 0x5, 0x80000}) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x20040040) 23:37:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x20040040) [ 474.296521][ T148] usb 3-1: USB disconnect, device number 41 [ 474.319487][ T22] kauditd_printk_skb: 4 callbacks suppressed 23:37:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x20040040) [ 474.319495][ T22] audit: type=1326 audit(1601077068.846:665): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15179 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 474.351826][ T22] audit: type=1326 audit(1601077068.846:666): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15177 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 474.365524][T15195] FAULT_INJECTION: forcing a failure. [ 474.365524][T15195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:37:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x20040040) 23:37:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x20040040) [ 474.380442][ T22] audit: type=1326 audit(1601077068.876:667): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15181 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 474.387327][T15195] CPU: 0 PID: 15195 Comm: syz-executor.5 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 474.419141][T15195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.429182][T15195] Call Trace: [ 474.432464][T15195] dump_stack+0x1b0/0x21e [ 474.436785][T15195] ? devkmsg_release+0x11c/0x11c [ 474.441711][T15195] ? show_regs_print_info+0x12/0x12 [ 474.446902][T15195] ? __kasan_kmalloc+0x179/0x1b0 [ 474.451836][T15195] ? kasan_alloc_pages+0x4a/0x60 [ 474.456756][T15195] should_fail+0x6fb/0x860 [ 474.461162][T15195] ? setup_fault_attr+0x2b0/0x2b0 [ 474.466385][T15195] __alloc_pages_nodemask+0x1ee/0x7c0 [ 474.471729][T15195] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 474.477262][T15195] ? should_fail+0x182/0x860 [ 474.481820][T15195] ? setup_fault_attr+0x2b0/0x2b0 [ 474.486821][T15195] ? __kernel_text_address+0x93/0x110 [ 474.492184][T15195] ? unwind_get_return_address+0x48/0x90 [ 474.497798][T15195] ? arch_stack_walk+0x98/0xe0 [ 474.502541][T15195] ? kvmalloc_node+0xc2/0x120 [ 474.507212][T15195] push_pipe+0x385/0x740 [ 474.511448][T15195] iov_iter_get_pages_alloc+0xc2c/0x10f0 [ 474.517103][T15195] ? iov_iter_get_pages+0xea0/0xea0 [ 474.522322][T15195] default_file_splice_read+0x17d/0x920 [ 474.527853][T15195] ? kcalloc+0x32/0x60 [ 474.531893][T15195] ? alloc_pipe_info+0x1b9/0x3a0 [ 474.536805][T15195] ? splice_direct_to_actor+0x94e/0xb00 [ 474.542331][T15195] ? do_sendfile+0x89d/0x1110 [ 474.546984][T15195] ? __x64_sys_sendfile64+0x1ae/0x220 [ 474.552340][T15195] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.558383][T15195] ? __ia32_sys_tee+0xa0/0xa0 [ 474.563052][T15195] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.570066][T15195] ? __rcu_read_lock+0x50/0x50 [ 474.574830][T15195] ? unwind_get_return_address_ptr+0x130/0x130 [ 474.580978][T15195] ? memset+0x1f/0x40 [ 474.584934][T15195] ? fsnotify+0x13a0/0x1460 [ 474.589426][T15195] ? setup_fault_attr+0x2b0/0x2b0 [ 474.594419][T15195] ? __fsnotify_parent+0xeb/0x300 [ 474.599427][T15195] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 474.606171][T15195] ? __fsnotify_parent+0x300/0x300 [ 474.611253][T15195] ? selinux_file_permission+0x2d0/0x520 [ 474.616856][T15195] ? security_file_permission+0x1e9/0x300 [ 474.622543][T15195] ? __ia32_sys_tee+0xa0/0xa0 [ 474.627189][T15195] splice_direct_to_actor+0x3cf/0xb00 [ 474.632530][T15195] ? do_splice_direct+0x3d0/0x3d0 [ 474.637526][T15195] ? pipe_to_sendpage+0x300/0x300 [ 474.642536][T15195] ? security_file_permission+0x128/0x300 [ 474.648228][T15195] do_splice_direct+0x279/0x3d0 [ 474.653060][T15195] ? splice_direct_to_actor+0xb00/0xb00 [ 474.658628][T15195] ? avc_policy_seqno+0x17/0x70 [ 474.663456][T15195] ? security_file_permission+0x128/0x300 [ 474.669160][T15195] do_sendfile+0x89d/0x1110 [ 474.673664][T15195] ? compat_writev+0x390/0x390 [ 474.678402][T15195] ? security_file_permission+0x128/0x300 [ 474.686888][T15195] ? vfs_write+0x427/0x4f0 [ 474.691293][T15195] ? fput_many+0x42/0x1a0 [ 474.695612][T15195] __x64_sys_sendfile64+0x1ae/0x220 [ 474.700781][T15195] ? __ia32_sys_sendfile+0x240/0x240 [ 474.706041][T15195] do_syscall_64+0xcb/0x150 [ 474.710518][T15195] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.716377][T15195] RIP: 0033:0x45e179 [ 474.720239][T15195] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 474.739821][T15195] RSP: 002b:00007fadda65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 23:37:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 474.748215][T15195] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045e179 [ 474.756157][T15195] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 474.764098][T15195] RBP: 00007fadda65bca0 R08: 0000000000000000 R09: 0000000000000000 [ 474.772058][T15195] R10: 20000000000000d8 R11: 0000000000000246 R12: 0000000000000007 [ 474.780008][T15195] R13: 00007ffc35114a8f R14: 00007fadda65c9c0 R15: 000000000118cff4 [ 475.086357][ T148] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 475.117038][ T22] audit: type=1326 audit(1601077069.646:668): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15177 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 475.142503][ T22] audit: type=1326 audit(1601077069.666:669): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15181 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 475.366343][ T148] usb 3-1: Using ep0 maxpacket: 16 [ 475.486424][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.497557][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.507946][ T148] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 475.521179][ T148] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 475.530534][ T148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.539414][ T148] usb 3-1: config 0 descriptor?? [ 476.007793][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x4 [ 476.015256][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.024128][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.032157][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.040463][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.048709][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.056085][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.064873][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.072953][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.081262][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.090057][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.098174][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.105532][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.113463][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.120912][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.128412][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.135805][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.143210][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.150634][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.158042][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.165439][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.172861][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.180280][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.187711][ T148] hid-generic 0003:045E:03DA.0036: unknown main item tag 0x0 [ 476.195714][ T148] hid-generic 0003:045E:03DA.0036: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 476.209158][ T148] usb 3-1: USB disconnect, device number 42 23:37:51 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x10000000, 0x0, 0x0) 23:37:51 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000000)={0x8}) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:51 executing program 5 (fault-call:8 fault-nth:8): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:37:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x42000003, 0x0) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000880)={0xb5e, "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"}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000080)='net/tcp\x00', &(0x7f0000000100)='/dev/ttyS3\x00', &(0x7f0000000140)='[\x00', &(0x7f0000000180)='\x00', &(0x7f0000000200)='/dev/ttyS3\x00', &(0x7f0000000240)='(/-$\x00', &(0x7f0000000300)='/dev/ttyS3\x00', &(0x7f0000000340)='/dev/ttyS3\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='net/tcp\x00', &(0x7f0000000400)='\'\x00'], 0x800) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x8ec0, 0x0) r9 = dup2(r7, r6) write$FUSE_POLL(r9, &(0x7f0000000180)={0x18}, 0xffa0) ioctl$USBDEVFS_GET_CAPABILITIES(r9, 0x8004551a, &(0x7f00000002c0)) splice(r3, 0x0, r5, 0x0, 0x8ec0, 0x0) r10 = dup2(r4, r3) write$FUSE_POLL(r10, &(0x7f0000000180)={0x18}, 0xffa0) sendmsg$IPCTNL_MSG_EXP_GET(r10, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8404}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x2, 0x900, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x810) syz_usb_control_io$hid(r2, 0x0, 0x0) epoll_create1(0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000200000000000000a993edd005d454d687e70e399cd55d42805a8583757b7b4daca113174484aa60af5795c9bbfcdd298409d2c75cacc28606c48e39308c3367bdf32d940252773752ece675ce4aa86f46bfd9ac11eebfbc406d0527095bfc2d31cb6fc711f2f5619dec3f7592676652434793b91fc763d66b1fc6d37a2fa62e5699128efb0e5c6943cf6dc66b3caff35cf244d25e6baf3027"], 0x0}, 0x0) [ 476.730766][ T22] audit: type=1326 audit(1601077071.256:670): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15225 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 476.739694][T15228] FAULT_INJECTION: forcing a failure. [ 476.739694][T15228] name failslab, interval 1, probability 0, space 0, times 0 [ 476.755825][ T22] audit: type=1326 audit(1601077071.256:671): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15224 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 476.769882][T15228] CPU: 0 PID: 15228 Comm: syz-executor.3 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 476.791815][ T22] audit: type=1326 audit(1601077071.316:672): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15226 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 476.797165][T15228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.797168][T15228] Call Trace: [ 476.797185][T15228] dump_stack+0x1b0/0x21e [ 476.797195][T15228] ? devkmsg_release+0x11c/0x11c [ 476.797203][T15228] ? show_regs_print_info+0x12/0x12 [ 476.797212][T15228] ? netlink_insert+0xb8f/0x1090 [ 476.797228][T15228] ? __rcu_read_lock+0x50/0x50 [ 476.838656][T15237] FAULT_INJECTION: forcing a failure. [ 476.838656][T15237] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 476.842550][T15228] should_fail+0x6fb/0x860 [ 476.842561][T15228] ? setup_fault_attr+0x2b0/0x2b0 [ 476.842571][T15228] ? netlink_data_ready+0x10/0x10 [ 476.842579][T15228] ? jhash+0x740/0x740 [ 476.842586][T15228] ? netlink_hash+0xd0/0xd0 [ 476.842595][T15228] ? __alloc_skb+0x88/0x4d0 [ 476.842603][T15228] should_failslab+0x5/0x20 [ 476.842611][T15228] kmem_cache_alloc+0x36/0x250 [ 476.842621][T15228] ? unwind_get_return_address+0x48/0x90 [ 476.842628][T15228] __alloc_skb+0x88/0x4d0 [ 476.842637][T15228] ? netlink_autobind+0x163/0x190 [ 476.842646][T15228] netlink_sendmsg+0x73b/0xd40 [ 476.842656][T15228] ? netlink_getsockopt+0x8e0/0x8e0 [ 476.842665][T15228] ? security_socket_sendmsg+0xad/0xc0 [ 476.842679][T15228] ? netlink_getsockopt+0x8e0/0x8e0 [ 476.942809][T15228] ____sys_sendmsg+0x56f/0x860 [ 476.947557][T15228] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 476.952738][T15228] __sys_sendmsg+0x26a/0x350 [ 476.957310][T15228] ? ____sys_sendmsg+0x860/0x860 [ 476.962228][T15228] ? fsnotify+0x13a0/0x1460 [ 476.966730][T15228] ? __fsnotify_parent+0x300/0x300 [ 476.971823][T15228] ? security_file_permission+0x128/0x300 [ 476.977519][T15228] ? __sb_end_write+0xa4/0xf0 [ 476.982184][T15228] ? vfs_write+0x427/0x4f0 [ 476.986587][T15228] do_syscall_64+0xcb/0x150 [ 476.991076][T15228] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 476.996945][T15228] RIP: 0033:0x45e179 [ 477.000819][T15228] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.020408][T15228] RSP: 002b:00007f550ceaec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.028816][T15228] RAX: ffffffffffffffda RBX: 000000000002b640 RCX: 000000000045e179 [ 477.036773][T15228] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 [ 477.044732][T15228] RBP: 00007f550ceaeca0 R08: 0000000000000000 R09: 0000000000000000 [ 477.052688][T15228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.060662][T15228] R13: 00007ffdea7dfdaf R14: 00007f550ceaf9c0 R15: 000000000118cf4c [ 477.068626][T15237] CPU: 1 PID: 15237 Comm: syz-executor.5 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 23:37:51 executing program 3 (fault-call:4 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 477.078772][T15237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.088933][T15237] Call Trace: [ 477.092217][T15237] dump_stack+0x1b0/0x21e [ 477.096537][T15237] ? devkmsg_release+0x11c/0x11c [ 477.098734][T15241] FAULT_INJECTION: forcing a failure. [ 477.098734][T15241] name failslab, interval 1, probability 0, space 0, times 0 [ 477.101462][T15237] ? show_regs_print_info+0x12/0x12 [ 477.101471][T15237] ? __kasan_kmalloc+0x179/0x1b0 [ 477.101478][T15237] ? kasan_alloc_pages+0x4a/0x60 [ 477.101495][T15237] should_fail+0x6fb/0x860 [ 477.133463][T15237] ? setup_fault_attr+0x2b0/0x2b0 [ 477.138484][T15237] __alloc_pages_nodemask+0x1ee/0x7c0 [ 477.143879][T15237] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 477.149411][T15237] ? should_fail+0x182/0x860 [ 477.153983][T15237] ? setup_fault_attr+0x2b0/0x2b0 [ 477.158992][T15237] ? ___slab_alloc+0x9b/0x450 [ 477.163651][T15237] ? unwind_get_return_address+0x48/0x90 [ 477.169273][T15237] ? kvmalloc_node+0xc2/0x120 [ 477.173941][T15237] ? kvmalloc_node+0xc2/0x120 [ 477.178604][T15237] push_pipe+0x385/0x740 [ 477.182834][T15237] iov_iter_get_pages_alloc+0xc2c/0x10f0 [ 477.188888][T15237] ? iov_iter_get_pages+0xea0/0xea0 [ 477.194072][T15237] default_file_splice_read+0x17d/0x920 [ 477.199605][T15237] ? kcalloc+0x32/0x60 [ 477.203656][T15237] ? alloc_pipe_info+0x1b9/0x3a0 [ 477.208572][T15237] ? splice_direct_to_actor+0x94e/0xb00 [ 477.214100][T15237] ? do_sendfile+0x89d/0x1110 [ 477.218757][T15237] ? __x64_sys_sendfile64+0x1ae/0x220 [ 477.224114][T15237] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.230163][T15237] ? __ia32_sys_tee+0xa0/0xa0 [ 477.234823][T15237] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.240875][T15237] ? __rcu_read_lock+0x50/0x50 [ 477.245623][T15237] ? unwind_get_return_address_ptr+0x130/0x130 [ 477.251786][T15237] ? memset+0x1f/0x40 [ 477.255750][T15237] ? fsnotify+0x13a0/0x1460 [ 477.260241][T15237] ? setup_fault_attr+0x2b0/0x2b0 [ 477.265245][T15237] ? __fsnotify_parent+0xeb/0x300 [ 477.270250][T15237] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 477.276993][T15237] ? __fsnotify_parent+0x300/0x300 [ 477.282090][T15237] ? selinux_file_permission+0x2d0/0x520 [ 477.287708][T15237] ? security_file_permission+0x1e9/0x300 [ 477.293405][T15237] ? __ia32_sys_tee+0xa0/0xa0 [ 477.298087][T15237] splice_direct_to_actor+0x3cf/0xb00 [ 477.303443][T15237] ? do_splice_direct+0x3d0/0x3d0 [ 477.308446][T15237] ? pipe_to_sendpage+0x300/0x300 [ 477.313455][T15237] ? security_file_permission+0x128/0x300 [ 477.319176][T15237] do_splice_direct+0x279/0x3d0 [ 477.324010][T15237] ? splice_direct_to_actor+0xb00/0xb00 [ 477.329536][T15237] ? avc_policy_seqno+0x17/0x70 [ 477.334370][T15237] ? security_file_permission+0x128/0x300 [ 477.340081][T15237] do_sendfile+0x89d/0x1110 [ 477.344681][T15237] ? compat_writev+0x390/0x390 [ 477.349426][T15237] ? security_file_permission+0x128/0x300 [ 477.355127][T15237] ? vfs_write+0x427/0x4f0 [ 477.359532][T15237] ? fput_many+0x42/0x1a0 [ 477.363854][T15237] __x64_sys_sendfile64+0x1ae/0x220 [ 477.369045][T15237] ? __ia32_sys_sendfile+0x240/0x240 [ 477.374329][T15237] do_syscall_64+0xcb/0x150 [ 477.378815][T15237] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.384691][T15237] RIP: 0033:0x45e179 [ 477.388572][T15237] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.408175][T15237] RSP: 002b:00007fadda65bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 477.416568][T15237] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045e179 [ 477.424542][T15237] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 477.432495][T15237] RBP: 00007fadda65bca0 R08: 0000000000000000 R09: 0000000000000000 [ 477.440450][T15237] R10: 20000000000000d8 R11: 0000000000000246 R12: 0000000000000008 [ 477.448429][T15237] R13: 00007ffc35114a8f R14: 00007fadda65c9c0 R15: 000000000118cff4 [ 477.456390][T15241] CPU: 0 PID: 15241 Comm: syz-executor.3 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 477.466536][T15241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.476753][T15241] Call Trace: [ 477.480017][T15241] dump_stack+0x1b0/0x21e [ 477.484315][T15241] ? devkmsg_release+0x11c/0x11c [ 477.489227][T15241] ? show_regs_print_info+0x12/0x12 [ 477.494402][T15241] ? netlink_insert+0xb8f/0x1090 [ 477.499308][T15241] ? __rcu_read_lock+0x50/0x50 [ 477.504045][T15241] should_fail+0x6fb/0x860 [ 477.508433][T15241] ? setup_fault_attr+0x2b0/0x2b0 [ 477.513430][T15241] ? netlink_data_ready+0x10/0x10 [ 477.518776][T15241] ? jhash+0x740/0x740 [ 477.522814][T15241] ? netlink_hash+0xd0/0xd0 [ 477.527285][T15241] ? netlink_sendmsg+0x73b/0xd40 [ 477.532194][T15241] should_failslab+0x5/0x20 [ 477.536666][T15241] __kmalloc_track_caller+0x5d/0x2b0 [ 477.541940][T15241] ? kmem_cache_alloc+0x1d5/0x250 [ 477.546942][T15241] ? unwind_get_return_address+0x48/0x90 [ 477.552554][T15241] ? netlink_sendmsg+0x73b/0xd40 [ 477.557473][T15241] __alloc_skb+0xd1/0x4d0 [ 477.561783][T15241] ? netlink_autobind+0x163/0x190 [ 477.566792][T15241] netlink_sendmsg+0x73b/0xd40 [ 477.571525][T15241] ? netlink_getsockopt+0x8e0/0x8e0 [ 477.576703][T15241] ? security_socket_sendmsg+0xad/0xc0 [ 477.577104][ T22] audit: type=1326 audit(1601077072.106:673): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15225 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 477.582152][T15241] ? netlink_getsockopt+0x8e0/0x8e0 [ 477.609090][T15241] ____sys_sendmsg+0x56f/0x860 [ 477.613854][T15241] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 477.619032][T15241] __sys_sendmsg+0x26a/0x350 [ 477.623617][T15241] ? ____sys_sendmsg+0x860/0x860 [ 477.628555][T15241] ? fsnotify+0x13a0/0x1460 [ 477.633043][T15241] ? __fsnotify_parent+0x300/0x300 [ 477.638135][T15241] ? security_file_permission+0x128/0x300 [ 477.643840][T15241] ? __sb_end_write+0xa4/0xf0 [ 477.648503][T15241] ? vfs_write+0x427/0x4f0 [ 477.652903][T15241] do_syscall_64+0xcb/0x150 [ 477.657375][T15241] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.663246][T15241] RIP: 0033:0x45e179 23:37:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0xd, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 477.667112][T15241] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.686701][T15241] RSP: 002b:00007f550ceaec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.695094][T15241] RAX: ffffffffffffffda RBX: 000000000002b640 RCX: 000000000045e179 [ 477.703058][T15241] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 [ 477.711171][T15241] RBP: 00007f550ceaeca0 R08: 0000000000000000 R09: 0000000000000000 [ 477.719111][T15241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.727063][T15241] R13: 00007ffdea7dfdaf R14: 00007f550ceaf9c0 R15: 000000000118cf4c 23:37:52 executing program 3 (fault-call:4 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:52 executing program 5 (fault-call:8 fault-nth:9): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) [ 477.749329][ T22] audit: type=1326 audit(1601077072.276:674): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15224 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 477.771201][T15252] FAULT_INJECTION: forcing a failure. [ 477.771201][T15252] name failslab, interval 1, probability 0, space 0, times 0 [ 477.771212][T15252] CPU: 0 PID: 15252 Comm: syz-executor.3 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 477.771216][T15252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.771218][T15252] Call Trace: [ 477.771233][T15252] dump_stack+0x1b0/0x21e [ 477.771242][T15252] ? devkmsg_release+0x11c/0x11c [ 477.771251][T15252] ? show_regs_print_info+0x12/0x12 [ 477.771260][T15252] ? cred_has_capability+0x18c/0x3f0 [ 477.771267][T15252] ? cred_has_capability+0x2b2/0x3f0 [ 477.771279][T15252] should_fail+0x6fb/0x860 [ 477.771289][T15252] ? setup_fault_attr+0x2b0/0x2b0 [ 477.771296][T15252] ? cap_capable+0x23f/0x280 [ 477.771311][T15252] ? cap_capable+0x23f/0x280 [ 477.850787][T15252] ? kmalloc_array+0x2b/0x50 [ 477.855350][T15252] should_failslab+0x5/0x20 [ 477.859823][T15252] __kmalloc+0x5f/0x2c0 [ 477.863966][T15252] kmalloc_array+0x2b/0x50 [ 477.868353][T15252] genl_rcv_msg+0x621/0x1330 [ 477.872926][T15252] ? genl_rcv+0x40/0x40 [ 477.877054][T15252] ? _raw_spin_lock_bh+0xa4/0x180 [ 477.882079][T15252] ? rhashtable_jhash2+0x1cf/0x2f0 [ 477.887185][T15252] ? jhash+0x740/0x740 [ 477.891238][T15252] ? rht_key_hashfn+0x157/0x240 [ 477.896093][T15252] ? deferred_put_nlk_sk+0x210/0x210 [ 477.901375][T15252] ? netlink_sendmsg+0x73b/0xd40 [ 477.906403][T15252] ? jhash+0x740/0x740 [ 477.910442][T15252] ? netlink_hash+0xd0/0xd0 [ 477.914922][T15252] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.920962][T15252] ? _raw_spin_lock_irq+0x180/0x180 [ 477.926164][T15252] netlink_rcv_skb+0x1f0/0x460 [ 477.930917][T15252] ? genl_rcv+0x40/0x40 [ 477.935058][T15252] ? netlink_ack+0xa90/0xa90 [ 477.939618][T15252] ? __down_read+0xf1/0x210 [ 477.944090][T15252] ? __init_rwsem+0x120/0x120 [ 477.948737][T15252] ? __rcu_read_lock+0x50/0x50 [ 477.953472][T15252] ? selinux_vm_enough_memory+0x160/0x160 [ 477.959181][T15252] ? setup_fault_attr+0x2b0/0x2b0 [ 477.964350][T15252] genl_rcv+0x24/0x40 [ 477.968303][T15252] netlink_unicast+0x87c/0xa20 [ 477.973040][T15252] ? netlink_detachskb+0x60/0x60 [ 477.977947][T15252] ? __virt_addr_valid+0x1fd/0x290 [ 477.983027][T15252] netlink_sendmsg+0x9a7/0xd40 [ 477.987761][T15252] ? netlink_getsockopt+0x8e0/0x8e0 [ 477.993036][T15252] ? security_socket_sendmsg+0xad/0xc0 [ 477.998466][T15252] ? netlink_getsockopt+0x8e0/0x8e0 [ 478.003650][T15252] ____sys_sendmsg+0x56f/0x860 [ 478.008388][T15252] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 478.013593][T15252] __sys_sendmsg+0x26a/0x350 [ 478.018157][T15252] ? ____sys_sendmsg+0x860/0x860 [ 478.023091][T15252] ? fsnotify+0x13a0/0x1460 [ 478.027571][T15252] ? __fsnotify_parent+0x300/0x300 [ 478.032661][T15252] ? security_file_permission+0x128/0x300 [ 478.038353][T15252] ? __sb_end_write+0xa4/0xf0 [ 478.043003][T15252] ? vfs_write+0x427/0x4f0 [ 478.047588][T15252] do_syscall_64+0xcb/0x150 [ 478.052065][T15252] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 478.057930][T15252] RIP: 0033:0x45e179 [ 478.061796][T15252] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 478.081376][T15252] RSP: 002b:00007f550ceaec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.089762][T15252] RAX: ffffffffffffffda RBX: 000000000002b640 RCX: 000000000045e179 23:37:52 executing program 3 (fault-call:4 fault-nth:3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:52 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x40000000, 0x0, 0x0) 23:37:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x622523343f45be99, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 478.097723][T15252] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 [ 478.106127][T15252] RBP: 00007f550ceaeca0 R08: 0000000000000000 R09: 0000000000000000 [ 478.114095][T15252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.122040][T15252] R13: 00007ffdea7dfdaf R14: 00007f550ceaf9c0 R15: 000000000118cf4c [ 478.159396][T15261] FAULT_INJECTION: forcing a failure. [ 478.159396][T15261] name failslab, interval 1, probability 0, space 0, times 0 [ 478.172679][T15261] CPU: 0 PID: 15261 Comm: syz-executor.3 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 478.182839][T15261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.192882][T15261] Call Trace: [ 478.196156][T15261] dump_stack+0x1b0/0x21e [ 478.200570][T15261] ? devkmsg_release+0x11c/0x11c [ 478.205482][T15261] ? genl_rcv+0x24/0x40 [ 478.209651][T15261] ? show_regs_print_info+0x12/0x12 [ 478.214845][T15261] ? __sys_sendmsg+0x26a/0x350 [ 478.219580][T15261] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 478.226971][T15261] ? unwind_get_return_address_ptr+0x130/0x130 [ 478.233096][T15261] ? unwind_get_return_address+0x48/0x90 [ 478.238700][T15261] should_fail+0x6fb/0x860 [ 478.243123][T15261] ? setup_fault_attr+0x2b0/0x2b0 [ 478.248121][T15261] ? mutex_is_locked+0xe/0x40 [ 478.252785][T15261] ? kzalloc+0x1b/0x30 [ 478.256823][T15261] should_failslab+0x5/0x20 [ 478.261299][T15261] __kmalloc+0x5f/0x2c0 [ 478.265425][T15261] kzalloc+0x1b/0x30 [ 478.269296][T15261] nl80211_trigger_scan+0x739/0x24d0 [ 478.274564][T15261] genl_rcv_msg+0xe76/0x1330 [ 478.279128][T15261] ? genl_rcv+0x40/0x40 [ 478.283300][T15261] ? rhashtable_jhash2+0x1cf/0x2f0 [ 478.288406][T15261] ? jhash+0x740/0x740 [ 478.292449][T15261] ? rht_key_hashfn+0x157/0x240 [ 478.297286][T15261] ? deferred_put_nlk_sk+0x210/0x210 [ 478.302538][T15261] ? netlink_sendmsg+0x73b/0xd40 [ 478.307444][T15261] ? jhash+0x740/0x740 [ 478.311483][T15261] ? netlink_hash+0xd0/0xd0 [ 478.315954][T15261] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 478.322002][T15261] ? _raw_spin_lock_irq+0x180/0x180 [ 478.327170][T15261] netlink_rcv_skb+0x1f0/0x460 [ 478.331904][T15261] ? genl_rcv+0x40/0x40 [ 478.336833][T15261] ? netlink_ack+0xa90/0xa90 [ 478.341491][T15261] ? __down_read+0xf1/0x210 [ 478.345974][T15261] ? __init_rwsem+0x120/0x120 [ 478.350627][T15261] ? __rcu_read_lock+0x50/0x50 [ 478.355376][T15261] ? selinux_vm_enough_memory+0x160/0x160 [ 478.361106][T15261] ? setup_fault_attr+0x2b0/0x2b0 [ 478.366111][T15261] genl_rcv+0x24/0x40 [ 478.370105][T15261] netlink_unicast+0x87c/0xa20 [ 478.374852][T15261] ? netlink_detachskb+0x60/0x60 [ 478.379766][T15261] ? __virt_addr_valid+0x1fd/0x290 [ 478.384847][T15261] netlink_sendmsg+0x9a7/0xd40 [ 478.389583][T15261] ? netlink_getsockopt+0x8e0/0x8e0 [ 478.394751][T15261] ? security_socket_sendmsg+0xad/0xc0 [ 478.400179][T15261] ? netlink_getsockopt+0x8e0/0x8e0 [ 478.405356][T15261] ____sys_sendmsg+0x56f/0x860 [ 478.410096][T15261] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 478.415268][T15261] __sys_sendmsg+0x26a/0x350 [ 478.419856][T15261] ? ____sys_sendmsg+0x860/0x860 [ 478.424762][T15261] ? fsnotify+0x13a0/0x1460 [ 478.429237][T15261] ? __fsnotify_parent+0x300/0x300 [ 478.434320][T15261] ? security_file_permission+0x128/0x300 [ 478.440009][T15261] ? __sb_end_write+0xa4/0xf0 [ 478.444656][T15261] ? vfs_write+0x427/0x4f0 [ 478.449065][T15261] do_syscall_64+0xcb/0x150 [ 478.453554][T15261] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 478.459414][T15261] RIP: 0033:0x45e179 [ 478.463281][T15261] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 478.482857][T15261] RSP: 002b:00007f550ceaec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.491257][T15261] RAX: ffffffffffffffda RBX: 000000000002b640 RCX: 000000000045e179 [ 478.499201][T15261] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 23:37:53 executing program 3 (fault-call:4 fault-nth:4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 478.507249][T15261] RBP: 00007f550ceaeca0 R08: 0000000000000000 R09: 0000000000000000 [ 478.515197][T15261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 478.524100][T15261] R13: 00007ffdea7dfdaf R14: 00007f550ceaf9c0 R15: 000000000118cf4c [ 478.550467][T15269] FAULT_INJECTION: forcing a failure. [ 478.550467][T15269] name failslab, interval 1, probability 0, space 0, times 0 [ 478.563180][T15269] CPU: 0 PID: 15269 Comm: syz-executor.3 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 478.573323][T15269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.583437][T15269] Call Trace: [ 478.586702][T15269] dump_stack+0x1b0/0x21e [ 478.591010][T15269] ? devkmsg_release+0x11c/0x11c [ 478.595946][T15269] ? show_regs_print_info+0x12/0x12 [ 478.601137][T15269] ? genl_rcv_msg+0xf10/0x1330 [ 478.605872][T15269] ? kfree+0x12b/0x5d0 [ 478.609948][T15269] should_fail+0x6fb/0x860 [ 478.614341][T15269] ? setup_fault_attr+0x2b0/0x2b0 [ 478.619353][T15269] ? genl_rcv_msg+0xf46/0x1330 [ 478.624110][T15269] ? __alloc_skb+0x88/0x4d0 [ 478.628598][T15269] should_failslab+0x5/0x20 [ 478.633079][T15269] kmem_cache_alloc+0x36/0x250 [ 478.637830][T15269] __alloc_skb+0x88/0x4d0 [ 478.642145][T15269] netlink_ack+0x282/0xa90 [ 478.646535][T15269] ? deferred_put_nlk_sk+0x210/0x210 [ 478.651804][T15269] ? netlink_dump+0x1260/0x1260 [ 478.656639][T15269] ? jhash+0x740/0x740 [ 478.660683][T15269] ? netlink_hash+0xd0/0xd0 [ 478.665170][T15269] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 478.671205][T15269] ? _raw_spin_lock_irq+0x180/0x180 [ 478.676377][T15269] netlink_rcv_skb+0x289/0x460 [ 478.681126][T15269] ? genl_rcv+0x40/0x40 [ 478.685259][T15269] ? netlink_ack+0xa90/0xa90 [ 478.689843][T15269] ? __down_read+0xf1/0x210 [ 478.694335][T15269] ? __init_rwsem+0x120/0x120 [ 478.698995][T15269] ? __rcu_read_lock+0x50/0x50 [ 478.703757][T15269] ? selinux_vm_enough_memory+0x160/0x160 [ 478.709449][T15269] ? setup_fault_attr+0x2b0/0x2b0 [ 478.714444][T15269] genl_rcv+0x24/0x40 [ 478.718400][T15269] netlink_unicast+0x87c/0xa20 [ 478.723142][T15269] ? netlink_detachskb+0x60/0x60 [ 478.728055][T15269] ? __virt_addr_valid+0x1fd/0x290 [ 478.733138][T15269] netlink_sendmsg+0x9a7/0xd40 [ 478.737878][T15269] ? netlink_getsockopt+0x8e0/0x8e0 [ 478.743075][T15269] ? security_socket_sendmsg+0xad/0xc0 [ 478.748522][T15269] ? netlink_getsockopt+0x8e0/0x8e0 [ 478.753706][T15269] ____sys_sendmsg+0x56f/0x860 [ 478.758458][T15269] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 478.763636][T15269] __sys_sendmsg+0x26a/0x350 [ 478.768206][T15269] ? ____sys_sendmsg+0x860/0x860 [ 478.773114][T15269] ? fsnotify+0x13a0/0x1460 [ 478.777694][T15269] ? __fsnotify_parent+0x300/0x300 [ 478.782783][T15269] ? security_file_permission+0x128/0x300 [ 478.788492][T15269] ? __sb_end_write+0xa4/0xf0 [ 478.793141][T15269] ? vfs_write+0x427/0x4f0 [ 478.797547][T15269] do_syscall_64+0xcb/0x150 [ 478.802038][T15269] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 478.807963][T15269] RIP: 0033:0x45e179 [ 478.811868][T15269] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 478.831464][T15269] RSP: 002b:00007f550ceaec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.839858][T15269] RAX: ffffffffffffffda RBX: 000000000002b640 RCX: 000000000045e179 [ 478.847814][T15269] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 23:37:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:37:53 executing program 3 (fault-call:4 fault-nth:5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 478.855768][T15269] RBP: 00007f550ceaeca0 R08: 0000000000000000 R09: 0000000000000000 [ 478.863731][T15269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 478.871678][T15269] R13: 00007ffdea7dfdaf R14: 00007f550ceaf9c0 R15: 000000000118cf4c [ 478.900070][T15274] FAULT_INJECTION: forcing a failure. [ 478.900070][T15274] name failslab, interval 1, probability 0, space 0, times 0 [ 478.912754][T15274] CPU: 0 PID: 15274 Comm: syz-executor.3 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 478.922900][T15274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.932931][T15274] Call Trace: [ 478.936199][T15274] dump_stack+0x1b0/0x21e [ 478.940518][T15274] ? devkmsg_release+0x11c/0x11c [ 478.945521][T15274] ? show_regs_print_info+0x12/0x12 [ 478.950699][T15274] ? genl_rcv_msg+0xf10/0x1330 [ 478.955596][T15274] ? kfree+0x12b/0x5d0 23:37:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 478.959666][T15274] should_fail+0x6fb/0x860 [ 478.964066][T15274] ? setup_fault_attr+0x2b0/0x2b0 [ 478.969085][T15274] ? genl_rcv_msg+0xf46/0x1330 [ 478.973854][T15274] ? netlink_ack+0x282/0xa90 [ 478.978436][T15274] should_failslab+0x5/0x20 [ 478.982927][T15274] __kmalloc_track_caller+0x5d/0x2b0 [ 478.988187][T15274] ? kmem_cache_alloc+0x1d5/0x250 [ 478.993234][T15274] ? netlink_ack+0x282/0xa90 [ 478.997799][T15274] __alloc_skb+0xd1/0x4d0 [ 479.002104][T15274] netlink_ack+0x282/0xa90 [ 479.006507][T15274] ? deferred_put_nlk_sk+0x210/0x210 [ 479.011869][T15274] ? netlink_dump+0x1260/0x1260 [ 479.016704][T15274] ? jhash+0x740/0x740 [ 479.020759][T15274] ? netlink_hash+0xd0/0xd0 [ 479.025243][T15274] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 479.031289][T15274] ? _raw_spin_lock_irq+0x180/0x180 [ 479.036499][T15274] netlink_rcv_skb+0x289/0x460 [ 479.041684][T15274] ? genl_rcv+0x40/0x40 [ 479.045828][T15274] ? netlink_ack+0xa90/0xa90 [ 479.050388][T15274] ? __down_read+0xf1/0x210 [ 479.054861][T15274] ? __init_rwsem+0x120/0x120 [ 479.059519][T15274] ? __rcu_read_lock+0x50/0x50 [ 479.064266][T15274] ? selinux_vm_enough_memory+0x160/0x160 [ 479.069975][T15274] ? setup_fault_attr+0x2b0/0x2b0 [ 479.074983][T15274] genl_rcv+0x24/0x40 [ 479.078964][T15274] netlink_unicast+0x87c/0xa20 [ 479.083731][T15274] ? netlink_detachskb+0x60/0x60 [ 479.088639][T15274] ? __virt_addr_valid+0x1fd/0x290 [ 479.093725][T15274] netlink_sendmsg+0x9a7/0xd40 [ 479.098517][T15274] ? netlink_getsockopt+0x8e0/0x8e0 [ 479.104778][T15274] ? security_socket_sendmsg+0xad/0xc0 [ 479.110384][T15274] ? netlink_getsockopt+0x8e0/0x8e0 [ 479.115554][T15274] ____sys_sendmsg+0x56f/0x860 [ 479.120296][T15274] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 479.125482][T15274] __sys_sendmsg+0x26a/0x350 [ 479.130058][T15274] ? ____sys_sendmsg+0x860/0x860 [ 479.134968][T15274] ? fsnotify+0x13a0/0x1460 [ 479.139443][T15274] ? __fsnotify_parent+0x300/0x300 [ 479.144529][T15274] ? security_file_permission+0x128/0x300 [ 479.150221][T15274] ? __sb_end_write+0xa4/0xf0 [ 479.154869][T15274] ? vfs_write+0x427/0x4f0 [ 479.159276][T15274] do_syscall_64+0xcb/0x150 [ 479.163845][T15274] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 479.169718][T15274] RIP: 0033:0x45e179 [ 479.173612][T15274] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 479.193193][T15274] RSP: 002b:00007f550ceaec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.201575][T15274] RAX: ffffffffffffffda RBX: 000000000002b640 RCX: 000000000045e179 [ 479.209532][T15274] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 [ 479.217516][T15274] RBP: 00007f550ceaeca0 R08: 0000000000000000 R09: 0000000000000000 [ 479.225470][T15274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 479.233426][T15274] R13: 00007ffdea7dfdaf R14: 00007f550ceaf9c0 R15: 000000000118cf4c [ 479.316185][ T148] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 479.566127][ T148] usb 3-1: Using ep0 maxpacket: 16 [ 479.686146][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.697286][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.710462][ T148] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 479.723618][ T148] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 23:37:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(0xffffffffffffffff) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x3) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da03000000000001090224000100000000090400000903000000092100000001221f1a01011404c572220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200400000000000000057a9"], 0x0}, 0x0) 23:37:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000880)={0x8, {"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", 0x1000}}, 0x1006) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000080)=0x78) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_open_dev$hiddev(&(0x7f0000000300)='/dev/usb/hiddev#\x00', 0x8, 0x2005c2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000018c0)={0x12b4, 0x1, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [{{0x254, 0x1, {{0x1, 0x4}, 0xfb, 0x8, 0x7fff, 0x2, 0x1e, 'syz1\x00', "e81357f42c03725acaf9c9f81cd8e7b6a935617a256d8cbc74f00a8df1959624", "8605efc7bc8871d5dfbe8d25215e546a4e501f2158cb5c1b52f2d7e49c0e8231", [{0x3f, 0x3, {0x2, 0x9}}, {0x4, 0x35, {0x3, 0xf246}}, {0x8000, 0x4, {0x0, 0x81}}, {0x4, 0x7, {0x2, 0x100}}, {0x184, 0x0, {0x0, 0x6}}, {0x7ff, 0x1, {0x0, 0x6}}, {0x800, 0x9, {0x0, 0x267ff439}}, {0x40, 0x1, {0x1, 0x20}}, {0x180, 0x81, {0x2, 0x7}}, {0x17, 0x2, {0x1, 0x400}}, {0xec, 0x3ff, {0x2, 0x2000000}}, {0x4, 0x1, {0x3, 0x1ff}}, {0x3, 0x5, {0x1, 0x1}}, {0x200, 0x4, {0x3, 0x100}}, {0x8, 0x4b, {0x1, 0x3}}, {0x4, 0x1ff, {0x1, 0x3}}, {0x80, 0x1, {0x2, 0x10000}}, {0x3ff, 0x3, {0x2}}, {0x8, 0x4, {0x3, 0xb38}}, {0x3, 0x4, {0x0, 0x3}}, {0x5, 0x4, {0x3, 0xfff}}, {0x9, 0x8000, {0x2, 0x8}}, {0x87, 0x9, {0x0, 0x8fe30c5}}, {0x8, 0x9, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x3ff}}, {0x1, 0x7ff, {0x1, 0xc5f3}}, {0x1, 0xf0ad, {0x1, 0x6}}, {0x80, 0x7, {0x3, 0xaa0}}, {0x7f, 0x928, {0x0, 0x2}}, {0x7fff, 0x27f3, {0x3, 0xff}}, {0x1, 0x40, {0x3}}, {0x8, 0x24, {0x1, 0x7}}, {0x3, 0x5, {0x1, 0xfff}}, {0x1, 0xe000, {0x1, 0x3}}, {0xfffc, 0x3, {0x3, 0x4}}, {0x0, 0x0, {0x4, 0x3f}}, {0x0, 0x3, {0x0, 0x1f}}, {0x2, 0x7fff, {0x3, 0x7000000}}, {0x89, 0x8, {0x1, 0x5}}, {0x2, 0x200, {0x0, 0x8000}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x9, 0x80, 0x0, 0x9, 0x1a, 'syz1\x00', "944eb74052e475c08b26c8630d7235f41f5f81c72f860ef03ae72e188ac53974", "e047250b93e805a362bcea14204f110cf010c4a10be4ab437c3c27a181b966f4", [{0xbd, 0x9, {0x1, 0x1}}, {0x101, 0x4, {0x1, 0x1}}, {0xd05, 0x2, {0x3, 0x7}}, {0xf9, 0x5, {0x2, 0x3}}, {0x25, 0x3e, {0x1, 0x8}}, {0x4, 0x0, {0x3, 0x7}}, {0x7, 0x6, {0x3, 0x7}}, {0x7, 0x6}, {0x3f, 0xfff9, {0x1, 0xffff}}, {0x0, 0x8, {0x3, 0x8}}, {0x1, 0x6, {0x1, 0x6}}, {0x9, 0x7ff, {0x0, 0x81}}, {0x8e5, 0x6, {0x2, 0xfffffffb}}, {0x8, 0x4, {0x1, 0x8}}, {0x4, 0x9, {0x0, 0x1}}, {0x401, 0x6, {0x1, 0x2}}, {0x1, 0x9cf5, {0x0, 0x7fff}}, {0x8, 0x7ff, {0x2, 0x32ac}}, {0x74, 0x2ec, {0x3, 0x3ff}}, {0x8, 0xeb, {0x2, 0x9}}, {0x2b24, 0x78f}, {0x6, 0x3, {0x3, 0xffff}}, {0x7, 0x5fc, {0x0, 0x401}}, {0x800, 0x1f, {0x2, 0x1}}, {0x12e, 0xbee1, {0x0, 0x9}}, {0x200, 0x7, {0x2, 0x4}}, {0x9, 0x1, {0x2, 0x8}}, {0x40, 0x36, {0x3, 0x2}}, {0x2, 0x3, {0x2, 0x8f23}}, {0x7ff, 0x7, {0x2, 0x3f}}, {0x0, 0x1, {0x3}}, {0x400, 0x2, {0xcb6f55a74b49b75, 0x7}}, {0x3, 0xffff, {0x0, 0x6}}, {0x3510, 0x2d4a, {0x2, 0x7fff}}, {0x9, 0x0, {0x2, 0x3aa}}, {0x7ff, 0x100, {0x1, 0xcca}}, {0x8, 0x6a, {0x2, 0xfffffff9}}, {0xaf, 0xffff, {0x2, 0x2}}, {0x1, 0x401, {0x0, 0x7}}, {0x1, 0x3, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x9c}, 0x6, 0x1, 0x0, 0x7, 0x1, 'syz0\x00', "2a6c1016cbe49d9c64c9862f6bc30c506034dc59781f555b15494ee4c3e228bd", "e233fe87dfbd691bfcd524392ab9dd13cc1165cb0bfe91115730515d5b56523e", [{0x0, 0x2f, {0x1, 0x6}}, {0x401, 0x5, {0x0, 0x20}}, {0xfff, 0x4, {0x2, 0x7fffffff}}, {0x5, 0x0, {0x2, 0x6}}, {0xfff, 0x1, {0x1, 0x8}}, {0x9, 0xdac0, {0x1}}, {0x1, 0x3ff}, {0x4, 0x413c, {0x1, 0x7fffffff}}, {0x8, 0x0, {0x1, 0x3}}, {0x5, 0x2, {0x2, 0xa982bd8}}, {0xfe00, 0x8, {0x1, 0x6}}, {0x5, 0x2, {0x3, 0x9b}}, {0x8, 0x1, {0x0, 0x3ff}}, {0x1, 0x7fff, {0x2, 0x80000000}}, {0x8, 0x54, {0x0, 0x3e}}, {0x6, 0x30, {0x2, 0x7}}, {0x6, 0x6, {0x0, 0x3b}}, {0x2, 0x0, {0x2, 0x2}}, {0x9f, 0xc80, {0x43b04fe7d53e3c06, 0xffff}}, {0x6, 0x3f, {0x1, 0x4}}, {0x97cd, 0x1, {0x3, 0x7}}, {0x4, 0xee, {0x1, 0x7}}, {0x7, 0xbb9, {0x1, 0x70c1}}, {0x7, 0x81, {0x1, 0x100}}, {0x7fff, 0x7, {0x0, 0x7f}}, {0x81, 0xffff, {0x3, 0x2}}, {0x400, 0x81, {0x1, 0x7}}, {0x74, 0xfff, {0x1, 0xbb}}, {0x5, 0x6, {0x3, 0x9}}, {0xefde, 0x38, {0x2, 0x5}}, {0xd3, 0x81, {0x2, 0x5}}, {0x3f, 0x0, {0x1, 0x4}}, {0x256, 0x8, {0x1, 0x3eb}}, {0x6, 0x9d6}, {0x2, 0x3db, {0x1, 0xfff}}, {0x0, 0x4, {0x2, 0xffff7fff}}, {0x3, 0x0, {0x1, 0xd7a}}, {0x1f, 0x3f, {0x2, 0x34}}, {0x0, 0x800, {0x1, 0x9}}, {0x2f56, 0x1ff, {0x2, 0xfff}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x20, 0x81, 0x9, 0xfe00, 0x23, 'syz0\x00', "ec69605ee4956f81c69cf0bfb9e99dab1c592931a038d879f78b61c89e7a63e6", "3a172919eaa18a9308231280c467917ca1cfa990cbd79027d74f34af80534790", [{0x1ff, 0x8, {0x1, 0x3}}, {0x3, 0x3, {0x3, 0xff}}, {0x3, 0x6, {0x1, 0x1}}, {0x81, 0x9, {0x4, 0x8}}, {0x8000, 0x1, {0x2, 0x4}}, {0x8, 0xffff, {0x3, 0x6}}, {0x14, 0x80, {0x1, 0x1}}, {0x6, 0x7ff, {0x0, 0x5}}, {0x7ff, 0x7, {0x3, 0x7fffffff}}, {0x800, 0x5, {0x1, 0x400}}, {0x7fff, 0xf20, {0x0, 0x4}}, {0x2fc7, 0x800, {0x0, 0x1}}, {0x2a81, 0x1000, {0x1, 0x5}}, {0x3, 0x7fff, {0x3, 0x7}}, {0x0, 0x8001, {0x3, 0x8}}, {0x5, 0x9, {0x1, 0x9}}, {0x8, 0xf000, {0x0, 0x93}}, {0x9, 0x3, {0x0, 0x7}}, {0x6, 0x9, {0x1, 0xd87a}}, {0x7, 0x81, {0x0, 0x1ff}}, {0x4, 0x80f, {0x3}}, {0x0, 0xfffa, {0x3, 0x1}}, {0x7, 0xff, {0x3, 0xfffffffb}}, {0x1, 0x0, {0x2, 0x80000001}}, {0x4, 0x8001, {0x0, 0x79}}, {0x1, 0xb0, {0x1, 0x3}}, {0x6, 0x9, {0x3, 0x4}}, {0x0, 0x100, {0x2}}, {0x1, 0x0, {0x2, 0x8001}}, {0xfbff, 0xfff, {0x0, 0x1}}, {0x8, 0x6, {0x2, 0xfffffffe}}, {0x9, 0x7, {0x1, 0x5}}, {0x1ff, 0x8000, {0x2, 0x4}}, {0x1, 0xba, {0x2, 0x7f}}, {0x8000, 0x0, {0x2, 0x2}}, {0x1, 0x0, {0x1, 0x2}}, {0xb90f, 0x1, {0x3, 0x400}}, {0x5, 0x7, {0x3, 0x1}}, {0x2, 0x9, {0x3, 0x1}}, {0x1000, 0x0, {0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0x3, 0xa3, 0x9, 0x5, 0x22, 'syz1\x00', "e716f5cb2ae597eaaab663153a6c4e2fa86b749d7606cdc3ea1f06e9f6a98053", "423c6bc368799c2f96309ae3dd438aacaaccd526ec033489756488dbabdf17b1", [{0x6, 0x3, {0x2}}, {0x8, 0x4, {0x0, 0x7fffffff}}, {0x9, 0x5, {0x1, 0xb61b}}, {0x7, 0x7f, {0x1, 0x6}}, {0x0, 0x0, {0x0, 0x144}}, {0x8, 0x8, {0x3, 0x8001}}, {0x9, 0xff56, {0x1, 0x406}}, {0x5, 0x1000, {0x1, 0x3}}, {0x800, 0x7, {0x1, 0x80000001}}, {0x5, 0x9, {0x1, 0x7}}, {0x272f, 0x20, {0x3, 0xffff}}, {0x6c8, 0x0, {0x2, 0x4}}, {0x1f, 0x7, {0x2, 0x80}}, {0x7fff, 0x5, {0x0, 0x80000001}}, {0x108, 0x9}, {0x9, 0x78, {0x0, 0x100}}, {0x4, 0xe740, {0x3, 0x1}}, {0x7fff, 0x1, {0x3, 0x401}}, {0x5, 0x3, {0x0, 0xb5f1}}, {0x9, 0x8, {0x0, 0x7}}, {0x1, 0x20, {0x2, 0x1}}, {0x57, 0x8, {0x3, 0x7}}, {0x6, 0x20, {0x2, 0x4}}, {0x5, 0x3f, {0x1, 0xfffffff7}}, {0x0, 0x80, {0x1, 0x9}}, {0x7b4, 0x7, {0x2, 0x1}}, {0x7ff, 0x9, {0x1, 0x1}}, {0x0, 0x100, {0x2, 0x6}}, {0xffff, 0xfff8, {0x3, 0x401}}, {0xb104, 0x1000, {0x2, 0x3}}, {0x2bca, 0x7fff, {0x3, 0x480}}, {0xd3bb, 0x11f, {0x2, 0x6}}, {0xffff, 0x8, {0x1, 0x5}}, {0x72b, 0x6, {0x0, 0x9fc8}}, {0x6, 0x1, {0x3, 0x7}}, {0x9, 0x7, {0x1, 0x8001}}, {0x6, 0x0, {0x1, 0x80000000}}, {0x7, 0x5, {0x2, 0x4}}, {0x1000, 0x101, {0x3, 0xffffffff}}, {0x20, 0x5c, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0x4, 0x80, 0xf000, 0x3a, 0x17, 'syz0\x00', "f5135cb55a1ae455a0ffc89318aa9af70a17033ddcd7764bb245168346c9e34d", "eab5a07451ad9b8ac3dfddefa9f70e32b406045487581d1cd88448aa61b38abb", [{0x81, 0x0, {0x1, 0x8}}, {0x1, 0x8, {0x0, 0x1}}, {0x800, 0x3f, {0x1, 0x7}}, {0x9, 0x8, {0x1, 0x9}}, {0x80, 0x81, {0x1, 0xe103}}, {0x4, 0x0, {0x0, 0x2}}, {0x91c7, 0xab7f, {0x0, 0x1000}}, {0x7, 0x1, {0x0, 0x3}}, {0x7a17, 0x7, {0x3, 0x3}}, {0xb754, 0xda, {0x2, 0xfff}}, {0x7fff, 0x8, {0x3, 0x1}}, {0x5, 0x102, {0x2, 0x9}}, {0x4, 0x0, {0x3, 0x5}}, {0x9, 0x0, {0x3, 0xe7fd}}, {0x40, 0x3ff, {0x0, 0x6f}}, {0x400, 0x8, {0x1, 0x152}}, {0x20, 0x5, {0x2, 0x3b}}, {0x11, 0x4a3, {0x2, 0x2}}, {0x8, 0x2, {0x1, 0x6}}, {0x16d2, 0x6, {0x0, 0x5}}, {0x40, 0xcc, {0x1, 0xb0}}, {0x1, 0x0, {0x3, 0x9}}, {0x1, 0x2, {0x0, 0x2}}, {0xf5, 0x80, {0x0, 0x7fff}}, {0x6, 0x7, {0x3, 0x87}}, {0xfffd, 0x5, {0x1, 0x1}}, {0x20, 0x14e, {0x2, 0xc8f4}}, {0x3, 0x1, {0x3, 0xfff}}, {0x6, 0xffff, {0x0, 0x4}}, {0xffff, 0x0, {0x3, 0x7fffffff}}, {0x0, 0x7, {0x2, 0x2}}, {0x7fff, 0x0, {0x1, 0x3ff}}, {0x1, 0x0, {0x1, 0xffffff80}}, {0x48, 0xfff9, {0x0, 0x4}}, {0x51e, 0x6, {0x0, 0x2}}, {0xd7cb, 0x6, {0x2, 0x7ff}}, {0x0, 0x187, {0x3, 0xfff}}, {0x4, 0x101, {0x3, 0x5}}, {0x5, 0x9, {0x2, 0x3}}, {0x20, 0x3ff, {0x0, 0x979}}]}}}, {{0x254, 0x1, {{0x0, 0xec1}, 0x8, 0x0, 0x7f, 0x3, 0x18, 'syz1\x00', "d6529c9ea0d093f047091c88ac222fb149d8c45589c512f0d147357005f4de05", "80b902991b159a2d61d22c4991e46cf4905f35c586381caec80b2f60b2414d95", [{0xfffe, 0x80, {0x3, 0x20}}, {0x7, 0x4e00, {0x3, 0x1}}, {0x9, 0x6, {0x1, 0x2}}, {0x4d20, 0x101, {0x2, 0xfff}}, {0x1, 0x2, {0x2, 0xc0000}}, {0x9a, 0x8, {0x3, 0xd9cb}}, {0x6, 0x7, {0x3, 0x7}}, {0x0, 0x1, {0x0, 0x7f}}, {0x0, 0x5, {0x1, 0x4}}, {0x8, 0x0, {0x2, 0x4ccf}}, {0xcc3, 0x4, {0x3, 0x4}}, {0x7eb0, 0x401, {0x0, 0x2}}, {0x5, 0x20, {0x1, 0x1}}, {0xfff8, 0x5, {0x3, 0x5}}, {0x0, 0x19ac}, {0x8001, 0x2, {0x1}}, {0x3ff, 0xff, {0x2, 0x185c}}, {0x1, 0x8, {0x1, 0x7ff}}, {0x9, 0x2, {0x2, 0x7fffffff}}, {0x4, 0x0, {0x2, 0x4}}, {0x0, 0x9, {0x1, 0x8}}, {0x8, 0xa000, {0x2, 0x7}}, {0x7ff, 0x3, {0x0, 0x8}}, {0x8, 0x6, {0x1, 0x7f}}, {0x3, 0x7fff, {0x1, 0xfffff415}}, {0x8000, 0x5, {0x2, 0xfff}}, {0x2, 0x101, {0x3, 0x3}}, {0x29, 0x2, {0x3, 0x8}}, {0x81, 0xfff8, {0x3, 0xb}}, {0xfff, 0x80, {0x2, 0x1}}, {0x100, 0x40f1, {0x2, 0x8001}}, {0xffff, 0x8, {0x0, 0x3ff}}, {0x81, 0x7fff, {0x1, 0x4}}, {0x5, 0x6, {0x2, 0x7}}, {0x5, 0x3, {0x2, 0x5}}, {0x1, 0x2, {0x3, 0x3ff}}, {0x8, 0x8, {0x2, 0x10000}}, {0x4, 0x3ff, {0x2, 0x8}}, {0x3, 0x596, {0x1, 0xffffff99}}, {0x9, 0x3, {0x1, 0xfae}}]}}}, {{0x254, 0x1, {{0x1, 0x10000}, 0x1, 0x4, 0x9f06, 0x7, 0x28, 'syz1\x00', "eab979eeb9d0f0e9a0d1fdeb2c14f8d8f60cee2ad51abb87a85ffa665bb09ed4", "b1e4306ed6813513cbd77d71ce4695ed0723a1d61bea4c1e26fe38dea216bcc2", [{0x1b3c, 0x4, {0x2, 0x4}}, {0x7, 0x0, {0x2, 0x400}}, {0x3ff, 0x0, {0x3, 0x5}}, {0x3, 0xf19, {0x0, 0x8}}, {0x6, 0x41, {0x0, 0xfffffffb}}, {0x4, 0x5, {0x1, 0x101}}, {0x7fff, 0x6, {0x3ba881300f4bb500, 0x1}}, {0x7, 0x7, {0x1}}, {0x4000, 0x4, {0x0, 0x281}}, {0x6, 0x3f, {0x2}}, {0x154d, 0x80, {0x0, 0x6}}, {0x5, 0x0, {0x0, 0xf118}}, {0x6, 0x100, {0x0, 0x3f}}, {0x4, 0x8, {0x3, 0x8}}, {0xffff, 0x7, {0x0, 0x2}}, {0xffff, 0x81, {0x1}}, {0x97c7, 0x78, {0x1, 0x7}}, {0x9, 0x4, {0x0, 0x8}}, {0x1, 0x7, {0x2, 0x101}}, {0x851a, 0xf4, {0x1, 0x7}}, {0x4, 0xef9d, {0x3, 0x200}}, {0x6, 0x4c6d, {0x2, 0x7}}, {0xda, 0x100, {0x2}}, {0x459c, 0x9, {0x1}}, {0x3, 0x7, {0x0, 0x1}}, {0x3, 0xee0, {0x2, 0x9}}, {0x3, 0x5, {0x3, 0x2}}, {0xf0c, 0x5, {0x3, 0x3}}, {0x0, 0x0, {0x0, 0x9}}, {0x2, 0x5, {0x0, 0x9}}, {0x0, 0xff80, {0x0, 0x3f}}, {0x9, 0xfff8, {0x1, 0x48}}, {0x3, 0x1, {0x1, 0x5f3}}, {0x1, 0x839, {0x0, 0xfffffff9}}, {0x8c, 0x5, {0x1, 0x2}}, {0xfffd, 0xfff8, {0x0, 0x8000}}, {0x1ff, 0x20, {0x0, 0x7}}, {0xffff, 0x3, {0x2, 0x7}}, {0x6, 0x7ff, {0x1, 0xf6}}, {0x7fff, 0x4, {0x3, 0xe39b}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000880) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x110, r1, 0x8) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:54 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xeffdffff, 0x0, 0x0) 23:37:54 executing program 3 (fault-call:4 fault-nth:6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) [ 479.732933][ T148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.741824][ T148] usb 3-1: config 0 descriptor?? [ 479.766126][ T148] usb 3-1: can't set config #0, error -71 [ 479.773124][ T148] usb 3-1: USB disconnect, device number 43 [ 479.775254][ T22] kauditd_printk_skb: 7 callbacks suppressed 23:37:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f00000002c0)="247b98349c338abfe4a4c2ec9ce86e3517ea57bc6494b880a654abcb9f9fd7e598f73bc5508522772500e6c215c2db80e3f23b8bb640a53ace403dc6b53808a1a28500e076daf0f23a97e2d4d647b5f4e2e85d7e37869cdd7a3ba058707e1d7ab22a31c596b1b579ff4ca398375ff87ce846e312e603baf15cd639406a6320788f9d220be141a489de0d3d963d13752521fce73ec568b8cd233e6c7f5d75d220de2c1b257e971457b92f9b6da924355a7dae6c91b37b13e157878609d2a2db6cd90c42a06daa0ece59debead0081997620b83b003c43b54f01d57ddad33ef979e593", 0xe2) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 479.775262][ T22] audit: type=1326 audit(1601077074.296:682): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15286 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 479.809502][ T22] audit: type=1326 audit(1601077074.306:683): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15290 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:37:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x2, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x3, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x4, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x300, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 479.838194][ T22] audit: type=1326 audit(1601077074.336:684): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15279 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 479.896889][ T22] audit: type=1326 audit(1601077074.426:685): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15304 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 480.146088][ T148] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 480.406076][ T148] usb 3-1: Using ep0 maxpacket: 16 [ 480.526121][ T148] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 480.536325][ T148] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 480.551250][ T148] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 480.560340][ T148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.569166][ T148] usb 3-1: config 0 descriptor?? [ 480.575455][ T22] audit: type=1326 audit(1601077075.096:686): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15286 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 480.598091][ T22] audit: type=1326 audit(1601077075.126:687): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15290 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 480.616574][ T148] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 480.648984][ T22] audit: type=1326 audit(1601077075.176:688): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15304 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:37:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000100)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @multicast}, 0xa, {0x2, 0x4e21, @local}, 'veth1_to_bridge\x00'}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:37:57 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xfffffdef, 0x0, 0x0) 23:37:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0xbec, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x200, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'bond0\x00', {0x2, 0x0, @multicast2}}) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x33, 0x2, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x6fd, 0x0, 0x20000000000000, 0xfffffffd}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) getsockopt$inet6_buf(r1, 0x29, 0x44, &(0x7f0000000300)=""/197, &(0x7f0000000080)=0xc5) 23:37:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x101, 0xcaf, 0xffffffffffffffff, 0x9, 0x1ff, 0x7e1}, &(0x7f0000000040)={0x7, 0x10001, 0xf11d, 0x2, 0x1, 0x1, 0x5, 0x8}, &(0x7f0000000080)={0x100, 0x1, 0x9ec, 0x5, 0x2, 0x1, 0x80000000, 0x20}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f0000000140)={[0x8]}, 0x8}) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:37:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8ec0, 0x0) r5 = dup2(r3, r2) write$FUSE_POLL(r5, &(0x7f0000000180)={0x18}, 0xffa0) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000000)=""/51) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 482.766265][ T148] usb 3-1: USB disconnect, device number 44 [ 482.791472][ T22] audit: type=1326 audit(1601077077.316:689): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15341 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:37:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0xec0b, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x30000, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x34000, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x400300, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x1000000, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 482.814856][ T22] audit: type=1326 audit(1601077077.336:690): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15340 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 482.837844][ T22] audit: type=1326 audit(1601077077.336:691): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15342 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 483.165882][ T148] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 483.405918][ T148] usb 3-1: Using ep0 maxpacket: 16 [ 483.525947][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.537031][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.547075][ T148] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 483.559901][ T148] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 483.568950][ T148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.577793][ T148] usb 3-1: config 0 descriptor?? [ 484.046829][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x4 [ 484.054279][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.063165][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.071223][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.079322][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.087410][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.094766][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.102690][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.110111][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.117582][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.124931][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.132527][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.139965][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.147382][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.154829][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.162281][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.169724][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.177213][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.184597][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.191995][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.199668][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.207071][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.214452][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.221859][ T148] hid-generic 0003:045E:03DA.0037: unknown main item tag 0x0 [ 484.229948][ T148] hid-generic 0003:045E:03DA.0037: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 484.247427][ T5139] usb 3-1: USB disconnect, device number 45 [ 485.025808][ T5139] usb 3-1: new high-speed USB device number 46 using dummy_hcd 23:37:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e84da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="e1626612830f7fc390c24529868bbf2a9b6a3b657ee91ecc"], 0x0}, 0x0) 23:37:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x2000000, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x20, 0x1, 0x3, 0x8, @remote, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, 0x8, 0x80, 0x9}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x180, 0x24, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xffe0, 0x8}, {0x4, 0xb}, {0x7, 0xd}}, [@TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x4, 0x4, 0x7, 0x1, 0x3, 0x40, 0x5}}, {0xe, 0x2, [0x401, 0x8, 0x7, 0x8, 0x7]}}, {{0x1c, 0x1, {0x5, 0xb0, 0x8, 0x9, 0x3, 0x4, 0x64b, 0x6}}, {0x10, 0x2, [0xffff, 0x9, 0x80, 0x8, 0xd5, 0x9]}}, {{0x1c, 0x1, {0x6, 0x1, 0x3ff, 0x7f, 0x2, 0x1000, 0xd57, 0x1}}, {0x6, 0x2, [0x69d]}}, {{0x1c, 0x1, {0x0, 0x7, 0x2, 0xfffffffc, 0x1, 0x101, 0x7ff, 0x4}}, {0xc, 0x2, [0x6, 0x2, 0x1bc5, 0xf73]}}, {{0x1c, 0x1, {0x0, 0x7b, 0x4, 0x0, 0x0, 0x4, 0x0, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x8, 0x4, 0x2, 0x9, 0x2, 0x7, 0x4, 0x6}}, {0x10, 0x2, [0x401, 0x3, 0x5, 0x7fff, 0xff, 0x9de5]}}, {{0x1c, 0x1, {0x35, 0x6, 0x765e, 0x3f, 0x3, 0x2b88, 0x10000, 0x8}}, {0x14, 0x2, [0x8, 0x1ff, 0x5, 0xfffd, 0xec9, 0xa790, 0x2, 0x4]}}, {{0x1c, 0x1, {0xfa, 0x5, 0x8, 0xcce, 0x0, 0x8, 0x1, 0x6}}, {0x10, 0x2, [0x1000, 0x200, 0x3, 0x1f, 0x3, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') restart_syscall() r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:59 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x10000000000, 0x0, 0x0) 23:37:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$CHAR_RAW_GETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/bnep\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:37:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/147) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x9}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:37:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x3000000, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x4000000, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 485.113452][ T22] kauditd_printk_skb: 3 callbacks suppressed [ 485.113460][ T22] audit: type=1326 audit(1601077079.636:695): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15395 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:37:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x40000000, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x9effffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0xec0b0000, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:37:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0xefffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 485.148733][ T22] audit: type=1326 audit(1601077079.676:696): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15401 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 485.172360][ T22] audit: type=1326 audit(1601077079.686:697): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15399 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 485.485757][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 485.605835][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.616779][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.627207][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 485.640519][ T5139] usb 3-1: New USB device found, idVendor=845e, idProduct=03da, bcdDevice= 0.00 [ 485.649967][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.658986][ T5139] usb 3-1: config 0 descriptor?? [ 485.912169][ T22] audit: type=1326 audit(1601077080.436:698): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15395 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 485.948004][ T22] audit: type=1326 audit(1601077080.476:699): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15401 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 485.971286][ T22] audit: type=1326 audit(1601077080.496:700): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15399 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 486.195783][ T5139] usbhid 3-1:0.0: can't add hid device: -71 [ 486.201873][ T5139] usbhid: probe of 3-1:0.0 failed with error -71 [ 486.209505][ T5139] usb 3-1: USB disconnect, device number 46 23:38:01 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x1000000000000, 0x0, 0x0) 23:38:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0xf0ffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x7ff}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/llc/socket\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x8, 0x979ca4f92bc65eb8, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc", @ANYRESOCT=r1], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4004045) r3 = getpid() sched_setattr(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) 23:38:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x44f, 0xb605, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xa0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0x609}}, {{{0x9, 0x5, 0x81, 0x3, 0xc94d93393c6637fb, 0x81, 0x3f, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x81, 0xef}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x1f, 0x7, 0x9, 0x20, 0xb5}, 0x24, &(0x7f00000000c0)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "9d875bb3b0575ea35c0fdb0f3c074176"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x50, 0xfe, 0x83, 0x7e4, 0x8}]}, 0x7, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x4001}}, {0xac, &(0x7f0000001000)=ANY=[@ANYBLOB="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"]}, {0x64, &(0x7f00000002c0)=@string={0x64, 0x3, "30f8cd6063ae0795b8a691a2af67cf45dc96e2aee6f2bb7b206a1275d180db49a866f6ca974ac5dafd61908fa15da41cdd295b94c9f25f1edce4601b21c3b369a2dd5565ab1480bea4100458090d4e90f7ea41f4f6eeb20f46ce73f050234810a1c1"}}, {0x2c, &(0x7f0000000180)=@string={0x2c, 0x3, "c4d013f579f673d0ac250086c9d21261a8ae1c7340aea1adf33c361ea7dd70c15a6ad725c4914af71cca"}}, {0xe3, &(0x7f0000000380)=@string={0xe3, 0x3, "9f4b89f3ccd43d696b6abf6910651d54ad5a1e8b11e5027c150ce8a26062b2f4530608245fe5595e71826d780b37abe5bfa1c274c0f9c0db2dd7a1b8a5e0ec60029c64ea525144e30eb2528922470a1215731bf24a7c5a441302b839f979e22ecbb22d921d89bce14e4847988a6eb26d895bb3de54bc0a139418fef33e802995b765d054af264553dac163e1cd9f5689ff40884c64f2f1a5b958e9a575ba54692b5205215bfe31457047750e6c66605f01872dcf8e78ae7d710f8ae3df3c79363898b6fff3c1c23738aad94ad7f7690bbf4590a96cfb4b03d39f6f441dffb000e1"}}, {0xa0, &(0x7f0000000480)=@string={0xa0, 0x3, "c592b31ed20e3d986ca1cf83c86fb5058c303307bb55cb25536d6acac8e4b58783918be3a1dcdc63621b8939b4499237b5ef910d34a9d3e13e0a3681c4493a3162de299d2ee7e6408dac5504cf4ac1463202b1147633f415e682401603f743c5c7561a18542298a119b901d89c0135f07639567b8a5ad897011cab4785f38c6e953220ca6b41bb1f7a07dd6fe8af9146153c1d0b566dd21df0111671ccf2"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x180c}}]}) syz_usb_control_io(r3, &(0x7f0000000a00)={0x2c, &(0x7f0000000600)={0x60, 0xf, 0xd6, {0xd6, 0x21, "3ffe28d4758971059fefb5d15b1db32d7db3aeafb4caef8497ddd5981e1457964f6e4c3ec36e42a208574443eb81cbf13f48a2a329917d1540bbf8bdea2587dfafa21f3d7b274d7c06650fb44976dbdfb196d6843b6aaf90482da3068acbbfac67298ad7c93f9ad6e411bb7639d32b0fdacc3dbf95d22282cde2d1d351142acf082839e25afe0032cf247ec58786ce0694b9c330a4328a4f9eb5b1b852ee550421438b70e8dff6ee4a94dad286a7ddaaee29bbd50fbe73e4c2fb3fe2d8b8058bcb68d57259e1a315e59bc0f5ecae76c9d397d98e"}}, &(0x7f0000000700)={0x0, 0x3, 0xdb, @string={0xdb, 0x3, "cca46d14ce0ee5934894eba486be8a8361a47d03b0b3d8e68cecce929fbf0d8547b2e5425d13b94d3c007faac3540765671cab5ad76684718a7b8219888b293f986997ff26cfe0c09a3c6b910312371c224c8706a7700a74a42b57515887419546d76ed8a2e69c45ef6fe8f60352e0f60d5b4e47e965102c149410e2348036217c20641e75c8e0000c9408caabb1249eb59404658c53ed7bf5a138553b4f25b9c44d35ac726ce20fce8efff7cd7cfbcda4da3bde1159ba79742385e62e9e6f76ed232fc669d5d44d779688c357515c5ddb4d1e5922711e73d7"}}, &(0x7f0000000800)={0x0, 0xf, 0x167, {0x5, 0xf, 0x167, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x9, 0x6b6}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x3, 0x1}, @generic={0x7d, 0x10, 0xb, "8ec7ee569a35be78778b0043c7b6cf2a52b324acb814301de8cc9e4335afbb822c76b9003edf613eff1dc7051fec77fdf911b53953f76bfab8e39fdd95b89051e152a7ae0e68a4ef3f3c981c193dfd815b9d3fbd2528138e2732e42d05d04c81b6248aabdf97b597561d41af69a40e54e80a9a543a2026d74d7b"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "d2ba304901734eb218bd22a35bc83365"}, @generic={0xb9, 0x10, 0x3, "b67864ab2ab272b79174e2bdb7c562c46066f0095d98b19fac34aaa5d586a26da5a148866a23fcd1f272e79a8a00e2d8ea19ced847feae13573cf2ccc2ff8cf3016b004d72cc6345118a1d6ff79372b1b52831fae20e41f98a621cbefb3d7e0484ce2ac3f4d53e6d6ef763e722a10c5f206f6ef421bbc676a6e444e5c9994afd33deeeb5e08b00627297917a0f7000c185a4cf011791f485575c16247a2133ebcb3ecff383508ce3bcf441c1c31067cdb2adc3290025"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x9, 0x40}]}}, &(0x7f0000000980)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1a, 0x60, 0x8c, 0xe0, "d01a4d4d", "6b4efa55"}}, &(0x7f00000009c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0xf7, 0xf8, 0x3, 0x3ff}}}, &(0x7f0000000f00)={0x84, &(0x7f0000000a40)={0x0, 0x31, 0xcd, "e36e814893fe2bc67ca49686501e0547643d0649cee937034ea661ab90103539666e4e0f1b01cc5a138e85eb14d1ce51c20fe3aa6e0693272828d193ac1f6c446e59a2773b8a5e02c4bf54c1c26fbf6681928ee1cc6ad267928e9689fb83c78aeea5847e5990cb67fd14ac53196e11fe23775ea35fb71d56704634d4ddf71f330ffa78e2014c8cf9f805613115d0438136858bf37f8eec2bdb749bf70b41d56d86b402c4291c9d749af513fbc7589312aec5a7a2d538c2ba6126bd1483feef0ab61494abd8289b8c3ae71dea74"}, &(0x7f0000000b40)={0x0, 0xa, 0x1}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000c00)={0x20, 0x0, 0x8, {0x800, 0x20, [0xff00]}}, &(0x7f0000000c40)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000c80)={0x40, 0x9, 0x1, 0xf8}, &(0x7f0000000cc0)={0x40, 0xb, 0x2, "d11d"}, &(0x7f0000000d00)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000d40)={0x40, 0x13, 0x6, @random="fddeaa984aeb"}, &(0x7f0000000d80)={0x40, 0x17, 0x6, @dev={[], 0x43}}, &(0x7f0000000dc0)={0x40, 0x19, 0x2, "7696"}, &(0x7f0000000e00)={0x40, 0x1a, 0x2, 0xfc00}, &(0x7f0000000e40)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000e80)={0x40, 0x1e, 0x1, 0x6b}, &(0x7f0000000ec0)={0x40, 0x21, 0x1, 0xfa}}) r4 = openat$cgroup_ro(r1, &(0x7f0000000fc0)='io.stat\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) r5 = syz_usb_connect(0x4, 0x5ea, &(0x7f0000001180)={{0x12, 0x1, 0x310, 0x70, 0x65, 0xe1, 0x10, 0x5e0, 0x2007, 0xaf88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d8, 0x2, 0x1f, 0x95, 0x80, 0xd3, [{{0x9, 0x4, 0x66, 0x80, 0xe, 0x9e, 0x9f, 0x50, 0x7f, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "f716417eba"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x7, 0x9}}], [{{0x9, 0x5, 0x80, 0x0, 0x400, 0x3, 0x8, 0x1, [@generic={0x31, 0x22, "680964885e045de3aebeb03d5d75ab47e1e099541d2270c32bfa59b517742ce22b9cac4ddd2b577108551e4686dedb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xbdd}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x7, 0xf8, 0x83, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe6, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x8001}]}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x9, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x2}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x8, 0x60, 0x7f}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0xc1, 0x84, 0x7}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x8, 0x0, 0x81, [@generic={0x57, 0x6, "bb5198bd64ea95c47bc62a5cea57c895731d385f3d5ba2b0cbd4718afd8a17f9101b6286081041aa3430cd0256bf1f664cd7b7bbdcd5add2f1909d04fccce248e9e0f2e967cc12fc429f5d6ff0d47e29161390d0b2"}]}}, {{0x9, 0x5, 0xe, 0x1f, 0x0, 0x7, 0x49, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xb959}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa3, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x6, 0x81, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x9, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x8, 0x3f, 0x0, [@generic={0xb5, 0xc, "58a681a4d75226f1e475ef527cc7271cf5a0eb48d73f2966065c3bc9784b0ebd8ed2603a6edd178a342d6624b68d6c45aec075c0f8dda29ef8671549f8afa98f7d88c762dcd3485c9a6eaca310472248b3cb4346ac53b0d8b494deac3e19bb6c5e87341c570a3a1074016ff6707f1f6bdef8ddd9fab742fcaaa399f85188bfe06f890d65f336c9cf5981e22867be0da19d9e34743bf0078498a7ac3874a564ac5a53edaf458ceadfafb145446b171511dab0b3"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x8, 0x3, 0x7f}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x2, 0x3f, 0x7f, [@generic={0x72, 0x0, "41c651b75e4c96507391fa23082da1bc265284d31fff72330ae40dfb1fd8838fdb3d29013e68d837d106f1a84f8e5014cf5d52c335c35660f48eb0f899932c40dd33a9a1f0bdf72c82488c1946b40b2cdb033fe9b42e3a5c5c52ab0e7475d3ec68df8ff750f181bcd8ca4e54db1c93d3"}]}}, {{0x9, 0x5, 0xf40391565d4df554, 0x10, 0x400, 0xbb, 0x1f, 0x20, [@generic={0x21, 0x9, "e51170abf494271c505f5e8b8e094a5a9f0bfa2097408bc518227023ac47e6"}, @generic={0x50, 0xa, "a86af159fc71c0e00402dd98260dce2175fc82a33480f0ad46e918f06edf4c22974174ecefb15017e7f7cd5405b0abf9e1958589c5e9b3d17c30d8498d33c0fe97ef92a0f9f4675727f77c9bd929"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x1f, 0x3, 0x3f}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x20, 0x6, 0x7f, [@generic={0xbf, 0x10, "b1a2fb042788c450eaf82557894235afef60fcc76002c7913104470bce7a6d0cb7e21e42d5f6ac2a46167cf81134bff92d9a6923756f9a861d6b6530d85bcff0b531992e161f33758caa35a6bd7de59bbd9cc482919dfb5b695a9e23a5a518c13b5fd766e4c94bae0b68ba883f915b681c765c209aa7085deb14eda38d309f0db106acd0550671d309a52d3aff6ed95c9decc3ec57ea831041f69e2c91214edadf257b1f7169d9f5bcc4bd4d9780caf9c5b6f0386924dd11be32986c59"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x8001}]}}]}}, {{0x9, 0x4, 0x74, 0x7, 0xc, 0x33, 0xc, 0xbc, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0xc0ee, 0x38, 0xff, 0xca}, {0x6, 0x24, 0x1a, 0x5, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x400}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x0, 0x40}, @mbim_extended={0x8, 0x24, 0x1c, 0x84f8, 0x6f}, @obex={0x5, 0x24, 0x15, 0x3}, @dmm={0x7, 0x24, 0x14, 0x7, 0xc442}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xe1}]}], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0xd4, 0xd9, 0x1, [@generic={0x35, 0xa, "5e5e76134377f28f55e89e9da6dc8d9c6ab5eaaadb33997e8184f9d2695a2e05d61ebb7cf17fda68e86fd6bf7c64fa8dfc4f82"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x9, 0xff, 0x4}}, {{0x9, 0x5, 0xf, 0x6, 0x40, 0x9, 0x1, 0xfa, [@generic={0x2c, 0x8, "92f6390234e4332d2294cc664ebd9872fb3934abaa2ffb308057cee8933d6d62b4e101157c11c99e4554"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x0, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x970}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x81, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3}, @generic={0x17, 0x21, "4ecfe7dab07fdf96811be9154f11fd5ae01ade6a95"}]}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x8d, 0x0, 0x22}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x3, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x5}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x0, 0x0, 0x7, [@generic={0x6c, 0xd, "1797accb65fbc9a83bac2a1cb6c10a716025cde5f88019cbb8b9bb94c59e740c3b4f9b04c4b897ab8af82e7dfb28e503952230e320fe84f3dc550abe142b33f87ee9be4f500c1f00b133de5e44df7b3f9817c3cd7fe5f13495e77b0d73897c8547a4152733d5ce47ce4b"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x7, 0x5, 0x0, [@generic={0x2a, 0x9, "11e50ce8b6fc630041e20387752fa158150ad1e53c6c468b98711133a42f57e795e17ffb76cbe84a"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x8000}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x0, 0xc8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0xff, 0x8, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0xfb, 0x3, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}]}}]}}]}}, &(0x7f0000001b00)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x8, 0x4, 0x8, 0x40, 0xff}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x8, [{0x1e, &(0x7f0000000280)=@string={0x1e, 0x3, "a9f2ecf4805db74fd0f9aab306ee13a279527e29d4fc83794960677f"}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x340a}}, {0x45, &(0x7f0000001800)=@string={0x45, 0x3, "88eb21c74415b1e740f90d55ae377d16fd6810c6dce5a453c66c622a48a981799066178d10cfc7bde47f2f8026f8314f4c6347b8bf4a1513e4e569eb62c0e1f907ca61"}}, {0xe6, &(0x7f0000001880)=@string={0xe6, 0x3, "f2f6fd87444a4139224b6ddd6b781b963f01e788b77ba5df86617550ee75a7e67f506fd9881f946ddaa802a1f06879a6b10ddab648db6eeb9727aee2ae15226a94b38cbb433e0afac099f22979af32463e22a470f08422b03b7660a083937f2b20ac4546f96f06d60812ac039b1a0ec3def46c2ff4172ed46b59ab42eba76b9dcb75bc94acca47124daecbfccfa12f062a43bddb08b671ac8d087200a877e0d0d5687664fb2ca232f0ad63f385717fda08dbe2be28dba718abb223d82170d0c22a04901caa5d103ea69e13549c125c7f33aeb37da9fa24f52a2a0f8873ae676a322cc984"}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x7804}}, {0xc7, &(0x7f00000019c0)=@string={0xc7, 0x3, "380260aab9012c199a5a150a4478cbb3df4437a78d8a4047589725556ed92bc13599165528df25aa8ed32f02d35e28d8c9f049c118ec890aadc7a556976fda80c35c2649a16c80994c14cda1d4e24e85915fd92dc333fcedf8b9b0516e68a0325a39023d0e6483ba70d9aa86265e942c2fac045f8a7f571720f03854c84460b0152e7fd0c7f79661ad945f5278b9c00decdc5999162c12b0622315ff3038ff1dc72e4009c3bd1e0dbd4606073d7f590cb4ab738acd512acfddaacb0362bb9d08138e4db459"}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0xc01}}]}) syz_usb_control_io$hid(r5, &(0x7f0000001b80)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r1], 0x0}, 0x0) 23:38:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$HIDIOCGPHYS(r2, 0x80404812, &(0x7f0000000040)) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r3, 0x4, 0xa38, 0x10000, 0x1db}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140)='mptcp_pm\x00') getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000005c0)={@initdev, 0x0}, &(0x7f0000000600)=0x14) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000003554fa5f9d95007da6f7d7f01e4ed553ce69e02e10a0ca58889d5a4abeebcc1d7bb10ff9a44afc9a5448130f874ccb0414102a92203e0ac8b8e3876c", @ANYRES16=r4, @ANYBLOB="020025bd700300000008000300010000000800031001000000080003000300000091fe0300080000000800030002001000080003000100000008000300050000001c000180060005004e240000080007000000000000", @ANYRES32=r5, @ANYBLOB="060001000a000000dce4b557139a2b15dfaae9f90f0d0de77f5012de8a669cea4345dea4352d3891330c13857a5d705195c7eab42bc38e69c4e4deda2597308360b64d4bb4e60141b0a78a0a2cc2eff466db1952ca39532b1c870b1276957d3a"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x8080) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r6, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0xffffff7f, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 486.638504][ T22] audit: type=1326 audit(1601077081.166:701): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15446 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 486.661367][ T22] audit: type=1326 audit(1601077081.166:702): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15449 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0xffffff9e, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0xffffffef, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0xfffffff0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0xf, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 486.688871][ T22] audit: type=1326 audit(1601077081.216:703): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15448 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:01 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x80000000000000, 0x0, 0x0) 23:38:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 487.075679][ T148] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 487.315649][ T148] usb 3-1: Using ep0 maxpacket: 16 [ 487.435556][ T22] audit: type=1326 audit(1601077081.956:704): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15446 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 487.457711][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.468667][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 23:38:02 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080)='freezer.state\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x22, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 487.479212][ T148] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 487.492198][ T148] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 487.504254][ T148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.516353][ T148] usb 3-1: config 0 descriptor?? [ 487.522242][T15500] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 487.532996][T15502] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 488.055649][ T148] usbhid 3-1:0.0: can't add hid device: -71 [ 488.061660][ T148] usbhid: probe of 3-1:0.0 failed with error -71 [ 488.069813][ T148] usb 3-1: USB disconnect, device number 47 [ 488.745590][ T148] usb 3-1: new high-speed USB device number 48 using dummy_hcd 23:38:03 executing program 2: fstat(0xffffffffffffffff, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup3(r1, r0, 0x80000) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000040)=""/128) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRES32=r1], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:38:03 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x100000000000000, 0x0, 0x0) 23:38:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301895264ff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sched_setattr(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x3, 0x0, 0x2, 0x210, 0x101, 0x26, 0x6, 0x0, 0x7}, 0x0) 23:38:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x25, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') write$binfmt_elf32(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x8, 0x9, 0x3, 0x3b, 0x2, 0x3, 0x0, 0x2ef, 0x38, 0x388, 0x7fff, 0xde, 0x20, 0x2, 0xffff, 0x7f, 0x8}, [{0x7, 0x2, 0x0, 0x4, 0x0, 0x7, 0x3, 0x896d}, {0x5, 0x0, 0xdf72, 0x80000001, 0x89, 0x775, 0x2, 0x40}], "f253e7085275a51641ae3527dce8f57dfd909b7e86839ce0aca2d09ffe2d437c67e35d98fdca4efd0d76acd2c3f6abede8869c780514c72dacf6b711b79d8fdef3037a754465b5aab23315d9c86612eba3561087cd552caa11af785e376a35471801a469b18c", [[], [], []]}, 0x3de) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) fcntl$setpipe(r2, 0x407, 0x8) 23:38:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0xc0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0xec0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x33fe0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x200001ec, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 488.845750][T15523] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 488.856153][T15529] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 23:38:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x7ffff000, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0xfffffdef, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 489.205570][ T148] usb 3-1: Using ep0 maxpacket: 16 [ 489.325608][ T148] usb 3-1: device descriptor read/all, error -61 [ 489.475535][ T148] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 489.755561][ T148] usb 3-1: device descriptor read/64, error 18 [ 490.145637][ T148] usb 3-1: device descriptor read/64, error 18 [ 490.265815][ T148] usb usb3-port1: attempt power cycle [ 490.975653][ T148] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 491.145736][ T148] usb 3-1: device descriptor read/8, error -61 [ 491.425733][ T148] usb 3-1: device descriptor read/8, error -61 [ 491.695768][ T148] usb 3-1: new high-speed USB device number 51 using dummy_hcd 23:38:06 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x300000000000000, 0x0, 0x0) 23:38:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x3, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="db59e0d2dedd82c8e563c2e07b9fbe353aac60", 0x13}, {&(0x7f00000002c0)="1360d43394e74f8782964ec8e4c6de996028581b4f3d402b7b915965f527ccc7972628cc0b672b60f7287060d7fc0bd3f672eaa375387377dbdd35b7be101383becb69e93dcc84c22838c88313c54a234a624afebabd61a57639910f67fc696231dd7675c24e5182b18621c4ed10e97d1227a3ebcefda45ec7f0d963fa952c411796a179ffd5072c880a004165ab265984f1c7823cecad54920622198350d9e4111a7b4ed959ed7bba57a958dc70bbbf8fe09d02d7ffac6b587eae6bf2937552b4ac9a05045b53bc134eba57a784a2903d4df5b9aaebd6d63858bf15d1ac4b663a528120b2cd995e4e6f3c9c35f3b553dde11400a580c1a6", 0xf8}, {&(0x7f0000000040)="fce5eac06be3e7b928fe10ec3c2ec5787f7c553de67182b759090c1fe76b2cadbb997f50c1571bde4c7c8d", 0x2b}, {&(0x7f00000003c0)="21a0ca45224531fd62552a2605f2544e4cf63fa9d04630dac907ab776a4c5b1a16692d01f3ab418aa91bd8da2b04e7825d1025a58516ef8a436549728246aa5b507410a995b1a1183ee0ff8cc1e2c09dc57ab8c6dec8315e02fe7dc06cb91eee86e1b3f225671a7048c68a9311f2edfd67dbd042b7c5355626590aeafb72ce52f9772f0169b6753558b4693b3aef27155385eba42d0a8c53bfe67d75d02b8bad610542ea7fd6ea1096ef", 0xaa}, {&(0x7f0000000480)="3238f8dea919f99a33e0797db8912f2870c7c23ff82d22f48964cda4dfa2dca53282696daad23cf3264d18840d0ff633009dffb41491446da4abe1123aa59ee3ae6a2421f7381cdcd84284e95f0ea77c31ceb8ab0b952447997fd616b2e41a068af1f0a42985e3a2c46a2036e9fdd6595e4a672aa6d71188aec8f8c02cc98bf20a0b9154", 0x84}, {&(0x7f0000000080)="80", 0x1}], 0x6, 0x8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d8e8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x88000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x24004044) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendfile(r3, r2, 0x0, 0x20000000000000d8) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000100)={{0x0, 0x3, 0x40, 0x1, 0xfffffffffffffffd, 0x3ff, 0x0, 0x4, 0x1, 0xeca, 0x1, 0x1, 0x3, 0x6, 0x1ff}, 0x8, [0x0]}) 23:38:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd70006909e00b8ea93f2e180003801400020065727370616f300000000000040010001400038006000400030000000800010001000000082005000700000008000400ff0100002d59c78fa02d39bf656d350ce6043705a43c11f39d808b9afc31d2b4d182086a77d78a187eafbd7d5aebf3127adc76e7c0ed1fbab63649cbfda0626df35a1d2f5a3378a4743b0f76f059"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000845) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x7, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 491.845732][ T148] usb 3-1: device descriptor read/8, error -71 [ 491.866088][ T22] kauditd_printk_skb: 10 callbacks suppressed [ 491.866096][ T22] audit: type=1326 audit(1601077086.396:715): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15567 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 491.899672][ T22] audit: type=1326 audit(1601077086.396:716): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15568 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x8, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x9, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 491.932470][ T22] audit: type=1326 audit(1601077086.456:717): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15569 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0xc, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r3 = signalfd4(r0, &(0x7f0000000040)={[0x2]}, 0x8, 0x80000) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x121000, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000001980)={0x118, r5, 0x200, 0x0, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x200080c4) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000001bc0)={0x170, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x170}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x94, r5, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x434b64e874a995f6}, 0x1) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:38:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0xd, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x21, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:06 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x700000000000000, 0x0, 0x0) 23:38:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x300, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 492.075780][ T148] usb 3-1: device descriptor read/8, error -71 [ 492.195807][ T148] usb usb3-port1: unable to enumerate USB device [ 492.545776][ T148] usb 3-1: new high-speed USB device number 52 using dummy_hcd 23:38:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 492.665786][ T22] audit: type=1326 audit(1601077087.186:718): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15567 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 492.689155][ T22] audit: type=1326 audit(1601077087.216:719): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15568 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) sched_getparam(r0, &(0x7f0000000040)) 23:38:07 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x1000000000000000, 0x0, 0x0) 23:38:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8ec0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8ec0, 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000180)={0x18}, 0xffa0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000000)={0xfffff800, 0x80000001, 0x0, 0x9}) write$binfmt_elf64(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/1957], 0x7a5) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x2, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000), 0x4) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) dup(r2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 492.711444][ T22] audit: type=1326 audit(1601077087.216:720): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15569 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x3, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 492.755446][ T22] audit: type=1326 audit(1601077087.276:721): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15618 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 492.777780][ T22] audit: type=1326 audit(1601077087.276:722): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15617 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 492.800604][ T22] audit: type=1326 audit(1601077087.276:723): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15619 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 492.825779][ T148] usb 3-1: Using ep0 maxpacket: 16 [ 492.945897][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.956863][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.967334][ T148] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 492.980463][ T148] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 492.989801][ T148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.998681][ T148] usb 3-1: config 0 descriptor?? [ 493.476920][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x4 [ 493.484338][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.495383][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.504695][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.512926][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.522138][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.530498][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.539777][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.548041][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.555517][ T22] audit: type=1326 audit(1601077088.076:724): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15619 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 493.577441][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.584891][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.592514][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.599996][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.607598][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.619784][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.627293][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.634843][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.642774][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.654991][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.664476][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.673038][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.683975][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.694227][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.702708][ T148] hid-generic 0003:045E:03DA.0038: unknown main item tag 0x0 [ 493.712234][ T148] hid-generic 0003:045E:03DA.0038: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 493.734424][ T148] usb 3-1: USB disconnect, device number 52 [ 494.455912][T13714] usb 3-1: new high-speed USB device number 53 using dummy_hcd 23:38:09 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x4000000000000000, 0x0, 0x0) 23:38:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x4, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000200)=0x4010020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) fchown(0xffffffffffffffff, 0x0, 0x0) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="d70ad71300"/22, @ANYRES64=0x0, @ANYBLOB="01000000ef82fa671200000000030000000000000001000000000000000700000000000000000000809c070000060000008709000000000000000000e0030000001f0000fd0100000000000006000000b8000000010400006bd0b6ab00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000007000000000000000100000000000000000000000000000002000000040000002e5b0000000000000000000000000000010000000000000007000000000000000500000000000000020000000008000005000000000000000400000000000000f05f00000000000007000000000000000010000000000000040000000000000004000000060000000000ffff0020000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="06000000810000000000000001000000000000008b0000000000000001000000070000004000000000000000030000000000000000000000000000000100000000000000080000000000000029fe0000050000000600000000000000ffff0000000000000100000000000000000000000000000000fcffffffffffffed01000000000000dfcd0000400000000800000000a0000005000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0500000000000000000000000600000000000000008000000000000008000000ff0300006e65742f7463700006000000000000000000000000000000ffff000000000000ff0100000000000003000000ffffffff06000000000000000600000000000000700000000000000000000000000000000900000000000000ff0f00000000000000ffffff010000000000010000a0000000000000", @ANYRES32, @ANYRES32=r6, @ANYBLOB="0100000006000000000000000300000000000000b80700000000000002000000ffffffff2738000000000000"], 0x290) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4001fc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008090) 23:38:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:38:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket(0x26, 0x80000, 0x1) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a0906060101050000000e000000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000003800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800a9a55256f71fe572fec2291bfca6c51c49b9dbe628c0212ec3241a", @ANYRES16=r2, @ANYBLOB="08002bbd7000fedb630204000000140003e8756172745f776966694dab9c1fe50462"], 0x28}, 0x1, 0x0, 0x0, 0x809}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x700, 0x90, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044001}, 0x4) r3 = getpid() sched_setattr(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x2, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20000000000000}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) 23:38:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x300, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0xbec, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x4000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0xec0b, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x30000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x34000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:09 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x8000000000000000, 0x0, 0x0) 23:38:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x400300, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 494.925968][T13714] usb 3-1: device descriptor read/64, error -71 [ 495.295984][T13714] usb 3-1: Using ep0 maxpacket: 16 23:38:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x1000000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 495.416067][T13714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.426936][T13714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.437329][T13714] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 495.450518][T13714] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 495.459906][T13714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.468886][T13714] usb 3-1: config 0 descriptor?? [ 495.936936][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x4 [ 495.944366][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 495.951970][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 495.959371][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 495.966777][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 495.974147][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 495.981786][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 495.989206][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 495.996603][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 496.004004][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 496.011480][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 496.018902][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 496.026285][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 496.033647][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 496.041071][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 496.048471][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 496.055864][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 496.064041][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 496.071442][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 496.079131][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 496.086527][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 496.093886][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 496.101283][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 496.108697][T13714] hid-generic 0003:045E:03DA.0039: unknown main item tag 0x0 [ 496.117062][T13714] hid-generic 0003:045E:03DA.0039: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 496.137626][T13714] usb 3-1: USB disconnect, device number 53 [ 496.906105][ T148] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 497.166119][ T148] usb 3-1: Using ep0 maxpacket: 16 [ 497.286167][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.297139][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.308201][ T148] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 497.321324][ T148] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 497.330650][ T148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.339512][ T148] usb 3-1: config 0 descriptor?? 23:38:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x6745a) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:38:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r3, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) r4 = perf_event_open(&(0x7f0000009ec0)={0x1, 0x70, 0x9, 0x40, 0x40, 0x0, 0x0, 0x9, 0x9004, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xd3, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0x9, 0xa21, 0x8, 0x100000000, 0x7, 0x7fff}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xb) sendmsg$unix(0xffffffffffffffff, &(0x7f000000a040)={&(0x7f0000007b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000009d80)=[{&(0x7f0000007b80)="50830443893ed374", 0x8}, {&(0x7f0000007bc0)="ef8103fe18e5dbe3ece7aeb3128ce3a87de61f7a6a3e48279c2efcd23aeb3f8fd97845f001dbe189af89354b9f2e67f0f2ef5d778a79ee4e010a3f31324394458aabef54055f3b4e979fa17d5bb4e10d430bf9008d231bc121919c11e9c5cc", 0x5f}, {&(0x7f0000007c40)="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", 0x1000}, {&(0x7f0000008c40)="c0ee18dc6bd77889220f3eeb01aa437d170a281361efd0d048e751228c22dd65d898f795782bcf8f54554ca1a25dfe27d1710d8a426b8b6855db9716c7ee1d34e1d094b065c3", 0x46}, {&(0x7f0000008cc0)="d55dc8a2e31f49acff8a0f451dbb2d51af91afdd73d26f7009c3a9d0533f95a7412ed458985cda58fc3541a4426419893d668e1b2abaf24219f0fd74bc6b23186a4176df4e4996c8b671288cee967f6f82786cc67ecb2cc38b82febc0cc024ddd67d1f2a4d66d689c841bfe72b4508853ec7396f0ec552e06f6dcc7ea820eed5ad96d2789a54a2f03e6a7ebcc690a6a0489a63a23f03bd3ac7987df0128feed7f5dcf9cb9eb0d51c230aa293", 0xac}, {&(0x7f0000008d80)="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", 0x1000}], 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000000001a00000000000000010000000500000092962c109d162080ce44eea8696a64ce7c09e11a5d50c26055473118b536d7e25cef07bd30d09ef54faba5155d7f387939125672b8aaa1029d80df8800478b457c41adec5988eabc8c12b96e98e826c7429d7f6e39d266223ce001ad3f391deb", @ANYRES32=r4, @ANYRES32=r0], 0xf0, 0x44000}, 0x4000010) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:12 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xeffdffff00000000, 0x0, 0x0) 23:38:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x2000000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@initdev, @remote}, &(0x7f0000000080)=0x8) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) write$P9_RLCREATE(r3, &(0x7f0000000100)={0x18, 0xf, 0x9, {{0x0, 0x4, 0x1}, 0x263358e8}}, 0x18) sendfile(r4, r3, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x3}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000000a00000000000000001a066df3001800"/32, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="08f216000b168c5355d817f22c8268214e20"], 0x30}}, 0x0) ioprio_get$uid(0x3, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000000)={0x4, 0x8001, 0x5, 0x4, 0x0, 0x4}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x8ec0, 0x0) r8 = dup2(r6, r5) write$FUSE_POLL(r8, &(0x7f0000000180)={0x18}, 0xffa0) write$P9_RCLUNK(r8, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) sendfile(r4, r3, 0x0, 0x20000000000000d8) 23:38:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x3000000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x4000000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 497.554696][ T22] kauditd_printk_skb: 8 callbacks suppressed [ 497.554704][ T22] audit: type=1326 audit(1601077092.076:733): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15732 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 497.583349][ T22] audit: type=1326 audit(1601077092.086:734): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15729 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x40000000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x9effffff, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0xec0b0000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0xefffffff, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 497.606456][ T22] audit: type=1326 audit(1601077092.096:735): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15733 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 497.666180][ T148] usbhid 3-1:0.0: can't add hid device: -71 [ 497.674116][ T148] usbhid: probe of 3-1:0.0 failed with error -71 [ 497.683527][ T148] usb 3-1: USB disconnect, device number 54 [ 498.046220][ T148] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 498.286157][ T148] usb 3-1: Using ep0 maxpacket: 16 [ 498.354445][ T22] audit: type=1326 audit(1601077092.876:736): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15732 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 498.377150][ T22] audit: type=1326 audit(1601077092.906:737): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15729 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 498.407435][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.418305][ T148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.428526][ T148] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 498.441646][ T148] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 498.450693][ T148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.459258][ T148] usb 3-1: config 0 descriptor?? [ 498.917184][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x4 [ 498.924585][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 498.931996][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 498.939443][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 498.947191][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 498.954556][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 498.961938][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 498.969342][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 498.976730][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 498.984095][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 498.991533][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 498.998947][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 499.006346][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 499.013720][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 499.021139][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 499.028554][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 499.035915][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 499.043323][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 499.051002][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 499.058540][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 499.065901][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 499.074082][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 499.081481][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 499.088887][ T148] hid-generic 0003:045E:03DA.003A: unknown main item tag 0x0 [ 499.096955][ T148] hid-generic 0003:045E:03DA.003A: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 499.117857][ T148] usb 3-1: USB disconnect, device number 55 [ 499.886305][T13714] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 500.126319][T13714] usb 3-1: Using ep0 maxpacket: 16 23:38:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0xf0ffffff, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept(r2, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000100)=0x80) splice(r3, 0x0, r2, 0x0, 0x8ec0, 0x0) r4 = dup2(r1, r0) write$FUSE_POLL(r4, &(0x7f0000000180)={0x18}, 0xffa0) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73796ae7000000020900020073c5d95d0fef5d0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = getpid() sched_setattr(r5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r6, 0x0, 0x20000000000000d8) 23:38:14 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xffffffff00000000, 0x0, 0x0) 23:38:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r1, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000000)) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000094231300b100000014"], 0x0}, 0x0) syz_usb_connect(0x3, 0xd21, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x16, 0xeb, 0x74, 0x40, 0x19d2, 0x1118, 0xf4f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0f, 0x4, 0x6, 0x9, 0x90, 0x9, [{{0x9, 0x4, 0x33, 0x92, 0xf, 0xff, 0xff, 0xff, 0x3, [@generic={0x8c, 0x10, "fb14df94820d486d42cdaa0d8286a9f8520e1a755e6554087e8d6b45a7efb3a1ee4b516eee3a79d130f7270a4195d519ffcc66ec40fa263b316e657610aa3a1e33095e7a19a5afdc3617ddf635477ef69817350714443aa11f315335fbe9305d0d773cce0e682bd640d9964a9497d1749beaa0604caab96b9df395120ea5ceed648854a55bb2f945f152"}, @uac_as], [{{0x9, 0x5, 0xe, 0x10, 0x200, 0x80, 0x7, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6}, @generic={0xd0, 0x4, "44f39f693e4e53f9d1e942df86c69521e0ee7b37d8cb74733c52131ec67731840231f527bd4b448f30d4d896f9a0d73b7f08f03028207392a8905457d43e4f7e89bd120919e7cbc9f361395eed48e916df39f8583c5d66e634f76764b76001364f093e0e99f32935c17892171dcaeb6e641fff4de42ef2c4bf4f06a552875469cd516c5e87cc5f95c637676a6523e0efdd9b7b0535094d7c195bca8f9927521c94bd8c48ac509daea017d92397b692fad114f2e7aa37ac360ebae9bdd980caf23a13d43a022990df8406cf5e3535"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x0, 0x8, 0x7, [@generic={0x6d, 0x1, "23c4ad8ab18eaa0a1330e75456dea27bbf8f7c36fcf1fa1300e188037ef0b8f6786d1f3d8d929bbb165243929b3a49b45bfb416e12ab48aca337a1498bbe773eba110cf13a593a2c9e4da20f95fad16fd45935b2ae704dd4bd4b7ae3eb0735a8a232f6dddf70ba65d3c681"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x80}]}}, {{0x9, 0x5, 0x8, 0x8, 0x0, 0x1, 0x7a, 0x20}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x9, 0x1, 0xa4}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x2, 0x7e, 0x7}}, {{0x9, 0x5, 0x80, 0x4, 0x0, 0x9d, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x7}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x0, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x3, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}]}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x3, 0x0, 0x3, [@generic={0x3c, 0x22, "4dd813ec96d15f1b2ec3b337bd08609e4f9f57d11a1bc8d4ac9519ca403739b6b042f4ebbd113ccb687bbcdb2a1da94d821ff9ba00697c48f508"}, @generic={0x5c, 0x31, "65931fc444ae21d55e4147781e77be6ef1617e3c3e5565d761e535971f0077e33f6696d574877799ec53ab17d2337075f35bab1f5a2a8e3ee507a677d3407a70bd67c10d75d1b8768e250fc5e6040b742d2601aa6b0e324ce450"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0xff, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x8, 0x7f, 0x6d, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x5}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x1, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x200}, @generic={0x19, 0x11, "f1f452efb318ec95c9c6651466633e540176978afca3b5"}]}}, {{0x9, 0x5, 0xf2e5486b403e258, 0xc, 0x3ff, 0x20, 0x1, 0xff}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x0, 0xc, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3f99}, @generic={0x7c, 0x11, "ac122c17f54a53ab207120463c7e980d66db3ef543f70bda2f6316fd4a47f557bef77af6e5184f8b792669114ce1a011f7c5eadacc4159334b5ad6452346932280c401ddb0e148e9dceb0949fbf737caf87b882012cdc0a1b16e03d3626c14c5e7f68febb1bc2c8f6c50e01771cf7c70a0d508cbe57b3048a63e"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x9, 0x8, 0x3f, [@generic={0x5c, 0x8, "d0ffab85b9e8e797a1c23b2f0a7b5c3906780f4cb11667ee0d69e918d2781cbd662e24fd52c80480b4adba4fcbf415bd05be3ada8271654b2c6cb6705a2771fe1a4f104d7b3aeb656fd62313e9f7cc1ab4811e0fec2d8b18f134"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x400}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x6, 0x4e, 0x7f}}]}}, {{0x9, 0x4, 0x3, 0x2, 0x8, 0x20, 0x38, 0xf2, 0x40, [@generic={0x9a, 0x28, "9515dcc545802db5cb6d7e495291f50327f3b88984f7325f1fa69cd7966761d99ccc37f0eb436c0624f34a3b001fc5643be4dfad1c313b1abe3f9e8bb6b4ca4f589dc689860d6f5922e2637b8ff91b7b77223c78478f12b789f0d7a33039a799c49edb4bb7733ceb3eb8842f78a6100906314b0afbeaf667e8fae0c9dccfbb522237b5d2bfe556c456923dda2e6c252c66298f813208716d"}], [{{0x9, 0x5, 0x8, 0x1, 0x200, 0x7, 0x6, 0x72}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x81, 0x40, 0xff, [@generic={0x1d, 0x21, "74e8bafa3e00e790853383bf9ef8ba0b54b73ed304ece15220bebd"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0x2, 0x0, 0x7}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x41, 0x81, 0x1, [@generic={0xa1, 0x2, "511e737fc3626a301145dcf5d772070c085c1772e9e68cf9ee96ecbf464e88eb1f3b6bcc3f6698431673afec35f3cfb0248549928811330d0a05d964c341465feda86b48f08059bd82d982a1ebe003b5dbe319428607af35c171fd543e9147780cae52632ada9ada9fb889c42b01f9020b12e710f9ae5a4314127c28dabc9c5404cf009052f88c06ebc4aa3f689674cbdbb18d8c06aa1588ad631730009af4"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x3f, 0xff, 0x8, [@generic={0x5b, 0xe, "cef54c845888860af13e4d4ad52adce801d79886809d0c1d03dbccc87e2a375959b656b529f17bca8caccedd15ae1fe84c37c67f7119182a42f7b5f33c646d8f8589dda86a9de059bb2e4e9f98f84438dcf4ff62676deb620b"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x40, 0x3f}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0xe5, 0xe6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x7, 0x101}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x3f, 0x4, 0x16}}]}}, {{0x9, 0x4, 0x6, 0x2, 0xd, 0xff, 0x4, 0xa, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0x4}, [@extension_unit={0x8, 0x24, 0x8, 0x1, 0x2, 0x3, "b1"}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x3, 0x6, "51632c77a7"}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x30, 0x4, "5448c0"}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0xff}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x5, 0x0, 0x1, 0xf9, 0xde}]}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x6, 0x4, 0x2}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x4, 0x9, "02d55b8fa2"}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x2, 0x6, [0x7, 0xa, 0x4, 0xc, 0x7, 0xa]}, @selector_unit={0xa, 0x24, 0x5, 0x3, 0x5b, "becd19175e"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x6, 0x3, 0x401, 0xbe, 0x40}]}], [{{0x9, 0x5, 0x5, 0x10, 0x40, 0x80, 0x18, 0x0, [@generic={0xe4, 0x23, "a3458c5055f694f8ed4cfec6d6bc829cf98faad64b8235b46f9563a30750ed6e31c1213933616f70c8c4c1b22481f78a1525ad95349f64a921c9e8c8de75189dd636f1b091fae0a85854754c5dbef28f36111aa735564d41522755fff38ad176397fbfbc0e94b561ff55daf7b02f3daa0815a7c4ee3867694de336fac26942d219ccc4c4082b244650a1edac96bbd9229125d217b43b20571c0a390357f7b7620f81e93637ab67b8b67331c822a54e54f61fb1f128bf7d17b15c7b834072125231179987122f14a37bd9faeb773810b5bc7a9c207973c3f4c7e0567733f1629af04a"}]}}, {{0x9, 0x5, 0xf8b87e21565e244d, 0x0, 0x8, 0x7f, 0x8a, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x5}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x2, 0x7, 0x8, [@generic={0x8b, 0xa, "f46a7d64153b78a9de9fc9c59bb93139cbd9066451ab94393689e8252d62f547a5e479dd5fa75ce4868a1d19d88cf8822c8e1a2781f7ce8ca8dd06c4bcc7b98a1e6c6e0e3feb2d163a400e2f4d879d73ee63acdcd7003d2a25bc8d69d3eb8a52b9a8e8c39ad9e2f41805b49ca6eddfc351ef2c6bca1f42fe22ffd85370b890344f44538eb72eaf2431"}, @generic={0xb3, 0x10, "d8ae01954e22874db8614240d5d60711abfe9786f2ac12a6910477d99bb601a6c86d9b1dca039fcfa46a9f5eff162c05a58dd6db50444638902264422c198642573d3a53f0be1a6ed9ab3e66f876a3f64bb08501ecdb48936aebe5e6dc5b038562ef2799baf39e3699b95b26e56e30329b5d0ef665c7b83e8629a8cdac1b4e7197c636e3a80ad970eaa1a6e6a25d2d3deb37a15ac5a51af6d77825a7dacd324185821c22ecf8b2da1a820b65d652cf3fae"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x200, 0x9, 0x1, 0x2}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x2, 0x7f, 0x0, [@generic={0xc6, 0x32, "3d1311bfb422af2676cf9971547d18644bb6b53ecbd75419c7474dbd80ebfec1f0e1b8daeffb87a998036d23bd089d58c4877cf19f48d8d773f43c2c91ab335a04e1e6d9ebf15d9be27bb615089de29c9b73ed78a70d66bfe1c8d33b9617aca136db6c12fa8e803b7d5da22295364d595a86a6d27c1a6f9155e82dda48342b856e58e9ef7148305ebc80917fabe1fca3fa1fb789a35f571a40429e5b05d4df8b4f6b57b90676eb3030e68692f74922eb1c0c0df655b6bed44cc25f2b5870f1db47090200"}, @generic={0x2d, 0x23, "fb493f6c95bdccfcb3b094122903594d41afa566567011fe0c128699e99e66cc9c6b00594b716f555b35fd"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0xae, 0x1}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x8, 0x1, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x2, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x7ff}]}}, {{0x9, 0x5, 0xd, 0x8, 0x8, 0x3, 0xd6, 0x9, [@generic={0xc2, 0x6, "9e9ea1bf36f5e05c9cabdc2a841783881b4389c7c39bb0af28d55f76dd2f30e3e97e43b222758945347543c8004a2c6e9a7eeda2f173629cd19f611922f0053f87b3d54a941ffd836aef9a33f6f18e539ae6217aeda2e857efed5285f1d29ca30511afb4a374d8576fdf5b45dfd05ed1915e084a2b8118775cecb8dd15f7b1222b2665804ee6d18f1d5ef42ae1cbcdfe5a9e9c06cfb09d0a281ed33c80e0c545dd4dc732c335fd51b24f1b915b871910a47dbb2ec768ff57997d360cddba4c68"}, @uac_iso={0x7, 0x25, 0x1, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x1f, 0x2, 0x7e, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x4c}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x3, 0x3f, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x38, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x90, 0x2}]}}, {{0x9, 0x5, 0x80, 0x11, 0x3ff, 0x7, 0x7, 0x3}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xff, 0x8, 0x6, [@generic={0xbf, 0xe, "d19ea9f7d2f180ccadb8a1657f93c6dbc668b5ce8f435dd637f9c7f14affe6ce5d9902b68606718c4cb5f9f81e4baf5ab8df4cd5143239e2ff8adb3dc4f7135c1564de79437e52d770456b0f18cdbede02e11dc15b6e6caefde44e71cd5a182cc89ee2e62cbd7b32ed891f9fe7152c77eb397916ddbe0a6be526904d6d727a21fc7c376d75efc39189331a6adcfd3bcd909da80a2b3bb57da28cffb338564bba93ac9ce5fb1c73e65b0161b6b9bee1d7ecafe1480069da797d0176224a"}]}}]}}, {{0x9, 0x4, 0x7f, 0x88, 0x2, 0xff, 0xff, 0xff, 0x5f, [@hid_hid={0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0xce6}}, @uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x18f, 0x1, 0x9, "d6fb883931"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x7, 0x1001}]}], [{{0x9, 0x5, 0x5, 0x8, 0x20, 0x3, 0x93, 0x86, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x7db}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x8, 0x0, 0x7, [@generic={0x31, 0x1, "4fd796b362339577f8f063e964108889378f2ec8d714cdb5230f7213185c420bb2c52681ab5a6ccd8472c5cf2bbc09"}, @generic={0x97, 0xd, "81df400218ce2c106b60dabc23be38d2d7dc403680ae6e48a6e877a0a7e865d6132d35172b9d321b8a2970fdb258d895f844c7c0530f3b292a51566d298d0bee793a39b0aabc49770a636062b2ea8fdf2e24674a5f77cac41278aa5c9a5327e810140c4a0ec4a7c004b062ea6c8d463de91bfebb9531b05aa99cf98ff845eb5814f7a91e017462a65c1514f4ed052dfe372ee523be"}]}}]}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3, 0x1, 0x5, 0xff, 0x9}, 0x48, &(0x7f0000000200)=ANY=[@ANYBLOB="050f48000307100200d3001020100a1ee5070000000006002800ff000000ff000fc0000000c000003fffff001c100a05240000000ff0a7e65f04a2e80080003f00003f0000000f00"], 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x42, &(0x7f0000000280)=@string={0x42, 0x3, "f0362e6caa8a08a1163ea38ebd4c014c0c4782614f725de6c5a78e5d3672ba70c2bbd19595a41a08c408cfbf2ce111e3fe6e4b5afddfbe6f6549725b4911729e"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x844}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x424}}]}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0}, 0x0) 23:38:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0xffffff7f, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003e00)={'netpci0\x00', 0x0}) [ 500.248125][ T22] audit: type=1326 audit(1601077094.776:738): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15786 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 sendmmsg$inet6(r2, &(0x7f0000003ec0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x40}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000040)="8c", 0x1}, {&(0x7f0000000100)="ce1aecc104b964d90630cb2bdb6585aa3fdd60b6a5e6b8aa642e9941da274dbbfdf8cd13956a0eb94b247579959da33aa64dbf8192c129b0fe33b4be4516cdf3e664bdde23fb3c4b966e7207b9839a242ff43a0e4b2bae37c6516717e5f4f25b689fc262322ec99b5b52775031", 0x6d}], 0x3, &(0x7f00000003c0)=[@hopopts={{0xa8, 0x29, 0x36, {0x84, 0x11, [], [@enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x48, {0x2, 0x10, 0x4, 0x9, [0x8000, 0x2445, 0x81e, 0x80000001, 0xfffffffffffffff9, 0x401, 0x3f9, 0xffff]}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x6, 0x3ff, [0x8, 0xfffffffffffffffa, 0x7f, 0x100000000]}}]}}}, @rthdrdstopts={{0xf8, 0x29, 0x37, {0x36, 0x1b, [], [@enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x48, {0x3, 0x10, 0x1, 0x8, [0x6, 0x2441, 0x10001, 0x9, 0x8000, 0xac, 0x0, 0x1]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xff01}, @calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0x5, [0x401]}}, @calipso={0x7, 0x48, {0x2, 0x10, 0x5, 0x8, [0x5, 0x8, 0x80000000, 0x7, 0x2, 0x6, 0x8, 0xffffffff]}}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x20, {0x2, 0x6, 0x6, 0x3, [0x0, 0x4, 0x6b4]}}]}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x2b, 0x6, [], [@jumbo={0xc2, 0x4, 0xfffc0000}, @padn={0x1, 0x1, [0x0]}, @pad1, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0xba5b}, @calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x101, [0x80, 0xf05]}}, @pad1, @enc_lim]}}}, @dstopts={{0x198, 0x29, 0x37, {0xff, 0x30, [], [@calipso={0x7, 0x50, {0x1, 0x12, 0x20, 0x6, [0x71, 0x2, 0xffffffff, 0x3, 0x1, 0x7, 0x100000001, 0x6, 0x10000]}}, @generic={0x9, 0x28, "7674871025cdfaf5e8a45f5e5f8e16ea157b504692d16ab7d61e84a30bac161480d650786f65ea46"}, @generic={0x8, 0xec, "eb4527fb58264fa1d9f381a23b172035285e32e9099ab75a7289f9e8d5aec2278641f687943c98da1f00aa0e9fcea888298c868455b526b880c673c5c3fc59b51cea508b56dba6685f3f85f3412342d3d3663c8ee4bf94f6412d6ed5ec60b82381adfe1c975af49217b26a21eaa923285128da978a4a7013a8b7ab932fdfb6311dc2c255589742893af4e7d6a8921d514e8e00d808981ac87ec456150d86ac529e07587725f23260844e11fa096788c7d2c150b59b8f8bd2bf5bb95c23e9b6ebb8f859a63da63663a7726c2eef32288b19b4a983afac61a5100b052357a374d791eb92453d664cf19a565597"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffffb}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x8}, @pad1]}}}], 0x388}}, {{&(0x7f0000000200)={0xa, 0x4e22, 0xbba8, @private1={0xfc, 0x1, [], 0x1}, 0x7ff}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000000240)="a86f4e59ed", 0x5}, {&(0x7f0000001880)="c6fdfc6cc20a03208d42848c3deaa0f2e23fae36e89fc92125a5152aefb975d0dbd4440687aa4f31f8f65f9911ac5e73bfc2b4be9e1aa9380b9cafb78c21c9b8875186c8764955656658df903c81bdbbaf27585e5265b5f38cb39932f94fd0c37d03d35678f8abed5556fae2d7aa59de9c1a3bdaa279b904525f13d6641a8888166f1a05cc077e51a5ca7141ed0958caf81378c2455b3543fcbbcf5d65d24a5c7b4c0739c2af0d53595f31d4b3ce0358ad21248c01643b1ef434702fe86f4665d2315c6202843450162eb65b3e86173aa14090ed8d45be0f64c29b099399ae1223", 0xe1}, {&(0x7f0000001980)="6ad48b43454b6bfaa6914ef2b7bc35104d66ae341466cd56ff6e72dc8ce0f547cb363f1e2d1ee4d56912f377d6afa15bca22991a0ba2bdd5d3d0bc0ba9b95e33d9f34cdf36a57b65a35e1f5f176b558df0da6d3c1d3d1d5bf238fcff4db34356f9b53adf616ace98c126d9232b114a6e9e250b7deca84e6624781997daafd266fe200d3e1c183a1d88ae7588444476981a7551600940a68638b351c13ddb9f2e1bc6bb8dd7b99ca1ba24af7eca43ddf0f22dbfa1d352c88ed947fdebe2aa7d9aacee7e5e94249567e8b0435d0432f89a69a1653f701c22862c4a108d92a209fb3594828d6d83344937818a0ee49687", 0xef}, {&(0x7f0000000780)="3186ef1e862d8030b878bfef518af7f5ce85e1251351a5222480d27e80e112538a76fb3da511384cc7b1992a286300808e394dc9105106accf18ed98e6189e6eaa16af19b12913d05fe5112d04395e5b0f344e65cde8efbfc89361b8ef7720d54364860f92bfb142c553bdb3a13e16a6c93b169aa609b33721a88c833a271539bbe24fb0c3bbbf3e08", 0x89}, {&(0x7f0000000300)="7d0d79a24598bf71348c51c56afcd789e5ba06c84232e3314329d7fd7f505d884afe436aa64a56", 0x27}], 0x5}}, {{&(0x7f0000001b00)={0xa, 0x4e23, 0x80000000, @local, 0x2}, 0x1c, &(0x7f0000003d80)=[{&(0x7f0000001b40)="479226fab2e3040f9603ac123a09d0ff62e10b112d568eb6b874c061d8897193148ebb966bfefa308629ada7cd7cab74ef98d4ec805a9964c009", 0x3a}, {&(0x7f0000001b80)="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", 0xff}, {&(0x7f0000001c80)="71307c6f8d892214bd133ed4e55bef8d813890ae2919ef39bb34c5dd5c09d25f85648bccefd5196b29664d83d2c57421e4f65f1701f8b33ea3f0c83718dcb8ecbd4ac80b07a30730794b5bf537d1bb6a72ce59aedfcb93f51f69a3cbf0772d12874da14c990a3b1483a61ea469dac8b9acd72215c55403428518b1cea73856c47033ff27a6b235f751473f0145709a6874086b0702b25d99fe2e98c80c53fbe1a43f460bb6096535c725a131cca4adde94f1b62e886a1e48294d4a1a4a5ef12de1a2ebbd5e2e7c780412d823f7feef5dceaf66f411f5b4df70573bc72fc528384dbfde83f003d66bcde8250667419fa7d03240842f677422dcbc7c9f404fd6b40e8d2ecb01d5f524ced493cb592384455d70f8a6f6fdb2e5989a4a0f24f1b029d5145f8a600d1dffcfbfe0d81766d9d2c1666f9cfa4664cf239d27ae5b5b36073672b1f58300f2e3c4cd9d6f0594882ddb551eb58b613c6bf083edd9f4d32633584ea5a9103f3fcace1a1a2f03a30e1340c018e2fe1c825f030246eb7d211d59da53bcf842d7ade37d2a8e848b5e611e000eb76de59fabf64463e8894b4059383b33cab06d76a10dc40a2fbd6a28e67afe0fb33df5256ae7d39910fa1873fefa89ad79662192a36f485eca590d0e4e96f2bc808ea150d4f49e18c061a4c2044db2269867289723829226368a8ab30e584a09101aff360a33799dfcda3c24004df978ab18e3c64efc1938523852578aaf64b551b63ec6a1e75465485793a2b878c902d1299e162f01813fa29229e49d2a6f99932ed37a159b28fe9c3dbdb86ecadf616493e74525a1fb65552c86ccff1decab0aad3374379f660c3426b6012dfa5e58c5ab3fad76fa7f2f57d234e461a76ce8fccfc20078fbfe94f77738d5029378cb8c08b81787acc5508518b1f14301503a6bbdf0f51651d44562a661444b1f68c81abe10eccf25429f59205b06aacc0794e2aa7c006cc17767d51f35983b6dc89f5c4d48313aed8df13d7ad5e02dabd2acc33fba24d52888f92c729263d2becaf1e32641d647263bde1a06d13f2a78561e2d9a1a853121b02aef43de8694b2989115c623656cd1581acfc87fea02953fb0a73383020e784963529c9644846c515072b0e5bb3fa6f92c8840568300862830f6e21e52f6a058bc07d258521ceaea4e1c8331aae5e2834d04047e5c603ffd1fe694fb5c68015e7804967b5c800eaa1a770c8228990674f9d88e4a3b478a6b56ffbca9f1920e94c93e7cc3e50d36bbcc735ddce0ff48badf6c0fdd12a7c3fae767874f1ce7ab49edffe174e8f97a74022feebde3d9db1e71b5673be9722775867ea6204d58bfa92f784ef4813a031aac3df2eabbcb3bdb9196d9c243ac7b2de1825a69cb903defd4ddba9bf23a07ff8ea4051768085353177db8d1f481d2cc825ec9c6eccc8b89246766462b7766ab21ce9b11bc93f52cdfe85a6bc40192c14ccf0bec8e4c3f6b6915e73c7ee48c42b916c8c6277256d614bd60abe4db7628d1df1301b9afdebfb98e2d025ad0b3acc0981e7a42d588c78f47928566aa67f4fa681cb93cdd5e807f2841297faa5ab7a838ca5a4a58823ab1b056ee060ce5c3fcd1b6d32410ed6cbc506c3103b4108d3c809ed3d9f2144e375c6860610f7dd04ffa47d7f17b2846571c29c84bdc87255e7b4fcd74bee3109f1985ae7405e5267eaf6263f5823fe753986b6869e3d17f3b32bd549647d7ef0101ad325629a7eb177c00f262b6c9cfd308cfaec5d62446baea3b72f177568e75ec8eacdff38a416a4c95fa2db9dc99b5bedffd1c13e99be6416fb695120e2be344c26df1f77efa8dcb4a9b7d7d0a5d01ff1df2a632ca321d99173c267bda31a8e3eac86929b73806f9d1ed9b50fb50028650c37da3a6680cf820e948dfebbcd9bf5f6d2dd327d1da5bb2a4ab6386b3b6d225181a1943f809c18c81250d36794f48a82b2b14ea0a5fdcbccd68c2a2e68d4d479b72735d3536adb77112cb091af5fda7ef3289dc40831f9ff0c9794bd0560ab4ba7d4bfacbecd22cf1bdd4fe754b5b9b86288ad9a70bf376ac35761d5b153695e22e82afff9d8b328bfdfbf638c0e2e3a6aff34e287ff7dbaee7a5dba02d7dc592408ce5735e7458e1f2ab71a93ce3e6e25688d00cae4139575a9dc0438d576176a55a678c71590978d408d84e4e1cf9c8704388701a8c61bc0e55bb3da3323943a7f4122b3880b50667b8599cf3dbc2609e2260acb47803e2cc646bae0e637fdd02712845dd0b1039f5efa312cdbb584444506f28c6d6be0db6d4690f2340068be4947f48a0756c6e37a18f659c103ee91aacdb8fc815ae1ace65799f8e37852610b857a32027a2e33fbf99b7a4edf82c76e99c2f144aae7021f18ac3a8220002c0e5369cd8a19ae1c65240da17e88f1b64e440f434098c68ce1c547e9e8d841b31824282dfd64dc105b8b1ce0b6c249cee1446acd1535e579beb68b3892c14e65ac0808ba81dcbb5a1fbf413fc95de26a1be5c346ea54c4a5d1af2c8c566ab31beddae2f87fe0fae163dae605d1305d57c8a80e63cd4bdfefb13f02be7ba8563ac41c3c3a2d7e1f803e544bc3e50658f6c4fe029a7397318bd30882ca5c3898737c3681a96efebf55923f3e09b9d0f5ed08cb2939172063ef3d28859d0acb874572eec566a358c541fc4004d53e6adf783638e0d14eb11e9eb42fe9165ba03e51be4def929e051d596a997218279ffee4fc7f15d9df2143e343b0f9c3df4b076cf1d51a9283534f7500cad6383088f2ed5e7b711f88b4646454c06f6ad3d00a934a7dd4ab6c18bb2760595a4c746b8b0301c8da15e9ca3b683a79f3e1c5307960f4c497c5988c57122a5055db1311b4670370004ab470d952eeccb4a1db14f5b729b8a49069a970a1f5b903d2361ecd3bc9884ba22feaa45253498c396f3f534582c8a1d716e60bafaf24cb10eca613556fb6a42bb7e86c89edf86713a04e2a51c51c33f9e001a65c32ed9c40f8ba5e01007cf175cd04746921a678137fd14b5b9381924ed9beada47cb21d675ca7528b8e09e06e3cbf19aa9db02a37f8d2955ec958ec78dcaf179a244dff26d281aa2077b9093722dc21e390158a68402560260780dce69ad2b0a2dd74ddd579538f5c73f45177fe742eaccba1cd1a38a9374c2542f578764f97de7d5b2a206ec261a561037a55f65db5a17efa424db4c6cc96987c0aec90180e2761d5e432b157f7e80ab7c5ec607f9e762ac68ad80b233db2ca7d4d9a64529d4e86ec7e332adccb43fb290be529202652673da2ecba87c1e56ff1b649070c0affdd602a42fba8fe3489ed85c71d0c6fca662a5d6dd22b1bbf5d786125f873327c392f28306182a8464788631e4eb4b7780b6f69f2abbbd64bebe3757156b7f5e83407bc4943dd2913f391f55f8aa99e5ee38f70891fb2d216a7ba441dec4c4f580ed9741f3e41c96a4ccbe360000e2afa92a7184b5f7af5265709627835e221c412ce2f4439460278f120c9e406feb1fddb5311d8a100a9024b395af4d0b3c62afcc0770b7518116d751614342994ee5c0e566175c0ad142ff35096085b13a7203ae10279ddb3bbc915ae55da0de3fb41d85b99c38dc8b4f9bd154a493fbfe49f40f10ecb50fe008c2e3b9cc64ec8b6e20ee6575203357015b1dfc477fde44786abb18a1758459ac3be3a17901332743579c141ef836519e2f921b31e43741e9a1abc05707f86922f3f6dc315a6d1c61148edd103456739c20eec28ccb7bf56ad310f41a00178e79fd43785956bfb0a4921c0311b889712abdca5791c4586594d73be906d3f230841cd4be60bf658c63d4065fd245d68a38e8670b5d371a66a6dd83ee810f5bd7c0593587f3f7cba4b537a9ae1af158491a60a837f9392a4a33ebfe8ca6e80039c370c3ba797b3fa6e53db26f87fde1a66eab6618ef0e3412f02a9fd7d44077acd8be90c97b8e48cf73745b559529f3de9b359e284e0bcce96d8c6b63103270d2528ee0e9d38cd6e5cb0410e1b4764884a35df23a41305e6a7243d2916c61474ead1193c25cad5b385c670fdff4eee14dc234fb926a7b81159d60b6df403377b4d149abf0e139de1ea3950a5840093ad495cac7cf8277834105d0dc720fbd000ab34fb1ad151fcde11bdeae3fbfc37d36e57918a708c9166fae7a95c133cc476dbac99526c9618b540bf77d11c62985ae255ca3e71ee7f28d50f6c78a65ea705aeeb16e98f0488292e75cd423193cccc0957f908c9c5f762a28f6b26e4258c4e989547ffe2fa4d310386be3071da21521a33e1504983e403527d3d5f3636c1a784a3b6a9d18f0f0e3bc1b9b248dcbefc9114954b74ddab06511a05650982a8a1b6dae413d69bef6ebc623bd89ed203d01f606249037dfc83895970c809805f85f5cf4be367ddb7e432a58aaeaee7632894de31bf4480de7cd3b0b78377dcf299ede1c19583248ba3633231a53181cbfc64fa39e5084dd382812b3a6f60e50ea4397798493346e03f262f335529343150266d04bf82df364464cd7f64fb4431c2a71c91a92a93bf15ac64a8eb4b9691ee69d4ce4c70b00a374f6b6b7d419bf92a8a11b38d5418b0454a1ded3d7bebc5e0d7bdd74fb646c3ded66f850ef2430cb46bdd8f8eae35c101bbd44fac426ccc9eea753ab11c2880968e77454e9db0fd29a3e78fd75c4fecba3092e32a73939f75260b246c7d4335797c1400a1d33e9a2b02346d048af197e669cba4f7141f173a47b16e53b77940829d6c5af6471ed590072bac09d0c7686ad754706937d7aab660bc30dad44b2ed6f6dca307e2a66220b47ddac978291dc5b4197600d6070aec5d47c456863fe3228c29f862a8688ef1255308c72dc5ac2032c22955b6d57d48ea08ab4c5c492d876353585a2b4da91c314f993a7a5882cc1ae5cb7ea3e9691df5e6c5b850d2a518ebb7d2acfe7301ef02f483dc600e91f470a000ff8de5493287269ebba4dc5cd09257e51e395bfc6115c2c8a891b324e59cc143710b2a266b1c0d68000b4f9cbbe9553062d906d3a83b83c7a75734ddc156064861a1260bef8f6e25f1b5cb68b1b9ad1b89892a994e604cf4b370f57c63ef49663235900a9382fb4d36da72643a65c4e2891c905dbfdf8fb1414df4aa44194bacdcd06870ffd3f87be59dc4dabad814b3a6a0097f2f6a17560259e3596aa8a09eebe491a2f33559c95fa7133f6eefc98e8f938eb8c1b7315baaf275aeaf94b8028744bc38ae51879c1c352a592589a38a22d6065b631835fc031a043d502cee01f7318e664dea62feddbb58d5668cd269334ba67346ffc78c58dcec86185b1d5d043eca7f76e93ce99c1a3381131fbb0f71e48c9972ba1f6fd202850b82ffd5ad1e426aac12ce1a825b77d80789a30c264eb53cfccd77ada68293ca55392092407bf97ae53d7d09c03857516c2d3cc18399fd9a5095f132eb7a1a7610b2dfa6da97654f0b70fc378cbafa34d452c364585885325476711279fb6cab74101eb56124e5e93f48251a40cd79de9b38bb5e8a3a9ddd8214e753cfd8257a7f1b5dcb3f274a4f7ea52a9e83d3559f5cd57ea952622a7eccb537a25e44413f09992a84b0a29ebac900731595031433084c1bffbe59962a5c4fc9fd917ce3ad853089fa1cc20a80cccc1f4900d05e48eb243cdff5e4ad93bf2acbc53c7706d91e898ff2d34f4a5692c08ec41e1298c00f0242438ff56cbdbb94d9f1f40761c653c3d54900c64751d5838b555bbc1b200c6ee6482fd85bfb76dd5267550ca40a94126f7e8ada282e4ae2a44d65f76", 0x1000}, {&(0x7f0000002c80)="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", 0x1000}, {&(0x7f0000003c80)="da8e7370dfd9c2d2f3872d1b44f00c2b0ab58539e496cd4e065a90fcd5bbf3221a8dc11f7e09c665337600ae3c45d13fbf90336addffe0a2875d2e393a613030930d002d28e42f3e21689143ef469b0cca68b797bfadfcf0226bfaf6c12f8794f0e47350efe4ae2e67ec53e6f9e87cf40b4d36323600bddbb7be48e592f655c7d54f7c79ebc60b21a8cd66d8599439d8fb3b1713d31cfdd1bd50c61fe326dd298634b563ae869a09e2bec7f2f4c9684ba3ffc03ed723aa25867db4a67245a2e138147524c784b4c618ec9a516931a5b40fceb72eedee0b075949167d0eeca14a7763", 0xe2}], 0x5, &(0x7f0000003e40)=[@hopopts={{0x20, 0x29, 0x36, {0x88, 0x0, [], [@jumbo={0xc2, 0x4, 0xcca4}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x16}}, @hoplimit={{0x14, 0x29, 0x34, 0x2000}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r3}}}], 0x78}}], 0x3, 0x40000) sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x4) sendfile(r5, r4, 0x0, 0x20000000000000d8) 23:38:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0xffffff9e, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0xffffffef, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0xfffffff0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x2, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x3, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 500.278795][ T22] audit: type=1326 audit(1601077094.796:739): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15787 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 500.301631][T13714] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 500.311550][T13714] usb 3-1: can't read configurations, error -71 [ 500.319517][ T22] audit: type=1326 audit(1601077094.846:740): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15799 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:14 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x3) [ 500.706312][T13714] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 500.976336][T13714] usb 3-1: device descriptor read/64, error 18 23:38:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x4, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:15 executing program 4: ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000180)=0x40) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x101000, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 501.047872][ T22] audit: type=1326 audit(1601077095.576:741): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15786 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 501.070382][ T22] audit: type=1326 audit(1601077095.596:742): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15787 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 501.376383][T13714] usb 3-1: device descriptor read/64, error 18 [ 501.496476][T13714] usb usb3-port1: attempt power cycle [ 502.206416][T13714] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 502.396482][T13714] usb 3-1: device descriptor read/8, error -61 [ 502.686503][T13714] usb 3-1: device descriptor read/8, error -61 [ 502.966512][T13714] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 503.136542][T13714] usb 3-1: device descriptor read/8, error -61 23:38:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x300, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:17 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x7) 23:38:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x14c435f74940297d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:38:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = dup2(r4, r3) write$FUSE_POLL(r6, &(0x7f0000000180)={0x18}, 0xffa0) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x8840) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000000)=r4) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6, 0x0, 0x3ff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x20000000000000d8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$9p(r8, &(0x7f00000002c0)="ca9cd8fe0d4232b2aaad690c01c35bb10b28459214204c12230d6f2c916007526f196947e98b612961d4a7d33a0881d6bcd0a4729503aada757b2a7660d8fbdc01843ed172e2fc2085f6d36801c30083ac91de3b6c8dc4c102753999c13288fa257754c1f7c502a765edd9fd0182b0f96c114857948362073fc9bf6ffb5bf0d3ec8b00e24a53be2c1ce92cc371f72ef64f9dc1f3ef26d8360823486a86eccff5954f03fa676aad32aebe8b8e17405e0aa700df12a02076f64a61e141f214fbce14afeb871aa966bb", 0xc8) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 23:38:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000380)={{r2}, "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"}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:38:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0xbec, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x4000, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0xec0b, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 503.294995][ T22] kauditd_printk_skb: 3 callbacks suppressed [ 503.295002][ T22] audit: type=1326 audit(1601077097.816:746): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15848 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x30000, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x34000, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x400300, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x1000000, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 503.323197][ T22] audit: type=1326 audit(1601077097.826:747): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15845 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 503.351928][ T22] audit: type=1326 audit(1601077097.826:748): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15847 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 503.379052][T13714] usb 3-1: device descriptor read/8, error -71 23:38:18 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x10) [ 503.496581][T13714] usb usb3-port1: unable to enumerate USB device [ 503.846518][T13714] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 504.086549][T13714] usb 3-1: Using ep0 maxpacket: 16 [ 504.093363][ T22] audit: type=1326 audit(1601077098.616:749): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15845 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:18 executing program 5: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x8, 0xde3b}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x1c}}, 0x4055) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x200, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240), &(0x7f0000000300)=0x4) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') setsockopt$inet6_buf(r3, 0x29, 0x2b, &(0x7f00000003c0)="2d9dd975d1", 0x5) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) 23:38:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0x3) 23:38:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x2000000, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 504.117966][ T22] audit: type=1326 audit(1601077098.616:750): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15848 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 504.140738][ T22] audit: type=1326 audit(1601077098.636:751): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15847 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 504.173649][ T22] audit: type=1326 audit(1601077098.696:752): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15893 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 504.195885][ T22] audit: type=1326 audit(1601077098.696:753): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15895 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 504.236736][T13714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.247771][T13714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.258398][T13714] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 504.271761][T13714] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 504.281698][T13714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.290628][T13714] usb 3-1: config 0 descriptor?? [ 504.757520][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x4 [ 504.764991][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.773802][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.782496][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.791694][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.799772][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.807901][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.815256][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.823968][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.832204][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.840466][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.848638][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.855997][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.864925][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.873103][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.881191][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.889697][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.897946][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.905314][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.914445][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.923613][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.931928][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.940040][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.948144][T13714] hid-generic 0003:045E:03DA.003B: unknown main item tag 0x0 [ 504.956251][T13714] hid-generic 0003:045E:03DA.003B: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 504.971414][T13714] usb 3-1: USB disconnect, device number 60 [ 504.977443][ T22] audit: type=1326 audit(1601077099.495:754): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15893 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 505.001472][ T22] audit: type=1326 audit(1601077099.525:755): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15895 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 505.736762][ T3256] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 505.976726][ T3256] usb 3-1: Using ep0 maxpacket: 16 [ 506.116800][ T3256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.128532][ T3256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.138702][ T3256] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 506.151990][ T3256] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 506.161245][ T3256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.170555][ T3256] usb 3-1: config 0 descriptor?? 23:38:20 executing program 1: seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000000)="b403f8b103e131687f19a995201c462eaa981a5dd9fd3fa810d05c39a47d62f805291361", 0x24) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:20 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x300) 23:38:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x3000000, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cgroups\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x216efa6c8ae849a3}, "4300ec1cb815bcba", "f70d35f983b66c0f73559880c1b64fb5", "37ec8a78", "94eb495a70d4717b"}, 0x28) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=0x3) r4 = getpid() sched_setattr(r4, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x7ff}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x20, 0x6, 0x1, 0x80, 0x0, 0x5, 0x100, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xa, @perf_bp={&(0x7f0000000200), 0x1}, 0x4000, 0x3f, 0x40, 0x5, 0x3, 0x100, 0x80}, r4, 0xa, r3, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000880)={0x640, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa56}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9fc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x255b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x194, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "e1f6563d5c78fb49eb470b0c088bab04e6626e528e38"}}, @TIPC_NLA_NODE_ID={0x6f, 0x3, "9d3e7cebd8b0cb7b658eeb5aef75c9325122a5629dae2e250327f0ec0d12076969f87d875575a36e4f5f02002f19ecf29d8df17cf2c15e91c8a8a0bfc7513f366470c5b8ecad93802b8b195b74df43132421775ba1f5da578d99d1536c7e38e4013500d7b09d0dd96fcc62"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x96, 0x3, "7a011615dfd0a34abee0483fa62854542c534f0a3f6dffe67516eb64f35907009bf53ca74ff868ba13e8f97dc8dc975f7234b8bc260b2a376a280596b443e3cefbec3052b7efb00fe880ebdaf223bf9801f20357e9c22e3f6a3f81bbbd8e293aec22d557948dd125e93531f095854467f8860d84c5513128cce06bd560c7a34e3936ba8b42849dec5ae41ed840940d1e9fb4"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "e23de60e5228fbe9dcdf7141619d2c451a28d46b485675"}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x83c1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x48}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x138, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x757}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96f2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2d0, @dev={0xfe, 0x80, [], 0x2c}, 0x7f}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, [], 0x1}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40374405}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3818}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x47b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5561}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfe4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x640}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x20000000000000d8) 23:38:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80401, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r3, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000380)={{r3}, "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"}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222280000042788167b34c50ba"], 0x0}, 0x0) 23:38:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv6_delrule={0x30, 0x21, 0x400, 0x80000, 0x0, {0xa, 0x10}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r1}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e27}}]}, 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r3}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e24}}]}, 0x30}}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x1f, 0x4, &(0x7f0000000200)=[{&(0x7f0000000880)="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", 0x1000, 0x2}, {&(0x7f0000000100)="d5152307a16f1cf9f468667edd0ac5253e6ba17f9593efd7c231867e1897d3d1c6ca5aff932cddcd99496eb1da1d3a5b6566386052171a2dcf42857bf5636f80b498284e9b90ec18961de1a3ae17b4d482f6d069f0907b1a134fe3d23dccb7e457b53b078d1817c0efbd5ca17f5b8dc83a6f", 0x72, 0x9}, {&(0x7f0000000300)="9a7c9b4fa96828ea0da2dcf6fd7ec716556413baef6173a5f1d68d45ab3a28cf53b49fbbff698aff584ff80666271cf9b3d0a57dd12fa2677a54543a0aa27d1de6fb1db960690ba010673c76df793ed1ba086ff9c7ea6cd750a58bcc4a6766af46fce61e54692c7d2695b3d156ca42d0d2ab1fb1fb0bfdfb29c4c236da7c27dbffaaa503532a204c7899164744e3fb235b4de11020640183de6750f6357290175358ec748706db3fe6d0fa2309bad2bb85a4656e4ee7bef6337ef1c4d17cea02c7151d092119bd9c0ebfbb3e785d57cd7c2bc0014609dd9f71233a156f55031a36ce3126575d992e5fe3177e3d6aaa6e4c", 0xf1, 0x5}, {&(0x7f0000001880)="cf559c7bc40fdcc95ca3e327ab31cd326aa846516a5033b55cb2d1baefc66856de1234d4c7f3cd134c57275f8842e216cafb4b717740acc343167cd4889f58946319d7a14e965fefbe8f7b35ce5647a6105555d16484ecd6d6d584c1d875d8ead36506c31fffd2cea4388e9657cccacd90b0ae8b0e534dcd341a0a6012a9bef9e461445086d30b35a6129bc34efb0be8707f964eb7033f2a3b8d67f3fce51c1e288094f7721517ff667acab1f4dfdddeecfa601f482a69e858dea9b0205f36d4c11f7a707cf9102944e97fee722a8049c0d2a95d463b1555c186b56adcb557aa14ea1db75dae88d35e7af77f52b8def3c379c5aa3268496b81b5ab3beb7d9b05d0de78aa6d152ddcf4cbb8b96ded82f182cfe8c95991a826370d7d01610697336bcafa5e6c981f763ad7a8352a6f7a017e2caec4c0e089ebf5f0063f135dc5d9e633ebdbec9153fba71654498b6cf60dcf6ba7f0b80e851d4c600fd7c29691b61731ca49fa2b76865371242e2a0060e58cb05c0441e7162832b8f27df8cb71bba41ef659c63622a181d4d60aca9da91649dc68ab77a3ccbf064b8f6cf3f162863cc5b9a0f0352125255947c85d07852d8565f67371b1e7d107d674929b61b62d8377c7ab87aedaafe43ffcfd1a4cdd5c6a75f1d03bbfc9e3d4649b7bf96f26aa0d830883d96d171500668a0894fd01cf442a31619a59d2e3213f8b18e3543bbd5b1370fa1dc37f9dc36e2a3342c7bc82d5ca0181643fd0b2805a3906a02ce3b56f7494ba4543946f3b55179f1b1fa2a5f3270873bbc3669ba1fad8ee3e080fec24b9421d19c3fbc0b926175d9cac8b24bcfdb1294597ff9f9ac9b07005b294c6626ce76cff95d7e2c03087ba0990c9fb5e5e8235992de1d239252c14f592563ff8c08423f70ffb637f5a177bc0dbe13cb6ef8f6d9972fa66b8fea85faa22320d30217eb641d7938b4e82805ec23a9772db92971d24dd0cf7fbaa1a1f3e35f158938c28167343808b09966ccb5e652e47de3203d5fed47b0fcaee9f0fa7d846c1beaec577a446f56ff56f27e97605589729a3d1c087199853a2685a86edb11b2a4fd922a476b159395eebf080f7c13228b8bc33b82486abd87b6d1e4a92789c7ea2503a7e7b7468159cff48ac312175a38818d1daf65b9855f5f1bff45472cab79010de66224397c41699792ba71dfbd266e9647586632f7c75646202da38b25c0335a81f3e7273f46b53821d5d88a316964b3540fea8bb0ef03e31e8c1a0c434c658bceeceb8a31ba9e15a56836f93d56ba685450481faf05486992ad885b5c870a2ca7cffed6ea27d0c4734cba02f0178d81136c4c7f4dfeb5e5a43f453f0afa3a6db91499a645f6820d845209e1b7d09ef9069fe8a6bb243fc146597d021d265d48cc90c2076fde3a1f96aac50ef8f9e265a3c1b7106fbba85db1bdbd98b945ce343c2f5a83ebdacea30b78d73dfa190464c93565d83610fd27d8ce1aeefb59f7f67ba66ff368f18776a39966fd506f39320753e44583d79387b421b57cc8227909cab480e7099bc80f954f156410ee2c27179bff427b803a1b25d7fe3da57e6d6e381380601f3ea9f98a4ca97bb882605b60c5f0f25f34fa45a2349413e138a2b067b839217f76407dd4d086346b75bcecc77b23454451682d0995e935cb88faec49f09ff41b3166be336d764aa71c621cb0f14fe8c096b2d7c4de76067926e5f4411cc9ba9b50f721863d4be4f4e0d26dc75be2a6c9e859534cdd877dd133e8e138878f9edeb0d5a77d440780cd7c1f541263b07872efb8c00a48cde5e20b01cdc9b14aefc557e3be39e55724b6626f400689f029f3968c7096eed7ecc722db85dc0d7d6e98cf77c9edcf110f6cde7a254658fe20e017eb8871212dd3093b5b80bc5bc33b44dada121f14774eef526f85124c4e06113011606e7050d8191e80466e72a192d85a3f421aa1fb10b92131a8e0807e3df7c6008ea2b1d67155dd861843281c824c1f397508b44bee4c62c5c05fcd61ce80de823fb32bfd21bd6c73a35eebb4af86ade90ad77b65a66c2a2f3234b02387bb618796ebe6f8ac0ada66e41098187f3f75ced4bdad68b76fddea3a042b988aa9af3415bd90498f215a7c915aa2e6245167fe0ebb83d6c4c49bac4d3170972e94171a7854f5af5417c798c724013aaa9043a43c0cc44bce0d6f9c252a063098de8b3d87fd8f14521ef0d02854a0304620859400d290c08fbd562be225b4a43892c880be135ac12e25ca1746c618605e0f1a278223463026ccfb90ff52636c32f6ed388bcfccad3084bd86aba47cd039e0efd31ce935ae4ae11d83598bc45ad7a3d57218002580e67ab127ad5f5073e73f7f4cb42819af36d08f0f9d7c276d9059ef96fda6ce210410b57c9074e0a47b5a48ee277ed8800e1fd9839b3f5e3e202fc0b90ee2d5a91b24d9885745c51032b6556b01e38552a12e6b25d7aa018a77b439cb610941b149e0128e41f23d5d17f0ea1d08e643d4a504ee47341c8de82a75c9950794a4b9a24dcf87f63dc164b2600ad55dd5cb30467079e449b863fa0b31432b790a82cac4e4e363ed31f3b0dbe9c5bcb3b539641942e15e978447470a2e79d8d0ee5a0ea1c3a6375479a55382f968700e022aeb8eaa452e39aa8680d34db7ea21caf12c1231ceb96ab09d43318adaab626126f163a2f3fd9d25a496c3c06d607a0bb112657dcc936f56f932e3a72b9f5fd71134fdc4f4e66df65d8153ff1b07bdd555ecb8723c0fbbe94f52a26b3401b6122e0d0066804a8edcc2f6c5bb7bb94ca7dfa0992c901ff20de0e1067a6f02d3a0ddf6524c567278e7c3f31808c6e41db3b9f6a87ea48368ffc683d686fdbed41555300dbcb5d2ee1f540bddf68329d024d36582117891961fc12d7ec86ec47c730a5b15cc6cf1bcb661591013e791b134de674b10e75df4e1d0e33980f017d926733a2aa2df2d6818da7e6a7b1deb7a53feb89563bf82b93a6a7ba8622c789464c51ed34d7fe368c510d3f7aa13d0c4f3a17ef356330c424ad5211126e1f3f6e616bf3981cde3e360e12611bcb85298e185791054732c523d55eab759647e331adc40dfcb99bec9240b31c5bc37d9b2ba984f5ab7ec3bac8656bb807e169d3af4057ca9a4032b522f5572499fa3bfd182bf5e91bdfd2bfefbacfcd7a59e889272562a91a6bff9abc668c894ebfc77030931c471036403d1d96bab3297557b0c2762f0d7278e41ff806d56edb62deb55a2366950c3294657dec3df5626d4baa8a8b4e1856ba503c0f44de14d3f817da7422c257fef54c44781d6941f758ef97546977f85b636cf08066c48a7634c51212ad7bd1a4d31111fa565f26f548826d1be38a3cd83aae39f372284f16207241d391e675c92c576213a39c333f27f71b68033e7ff7d3a8cc4b644d05254426b0e79a0db942ce5ab25d721cd0fe7797c17d2559ebc01b30aa0997450093122456c8d297e1485f2fe286e779e2b2e2c35dbdd9626e9afd625d6230739f9485838682c2027ae786d7debef6286fd144b0620f884230195ab8a51939270cd451618944394bb985e4a1f40a4f95c7fb07b5c5e243e2f9965e9d20a2f5acfaa4d9f035062042b6303274a3b3ee31fc211c7e3fd73bf46dfd10db8131ac5898ac1d0215288594e1e258b9711b1d5546bbc32651e75388e71d661ddbc0b84eeacd6599cad3f4d3fee3a39afcece8a32df95122076866ae569c0202f3073a143f8f28e684ba523cac5361541035054915d502673a717943433c984822c828359e72b9430b684f77ef8d6cb3f7e95997e51427c2b8171a3db8e735a5db3f0458c382dd2e3d0169afb026b846c450b152cc225b9c6aa219bfccb84696bc339426f384f0ee1397d5c997d2cbc2860bb442850eb3c4f2e7edb69a97c6c40dedd158443a576d3f7b661948774b1fdc7b78e59ca21b3492360947487320d03335bd6cf08a78a3e06f67398e775a1966850dadb3db0eada0765debddf763e896980a12caf65d19976bcd250f4ccfcfcb3c017ad3f295a6293a8a2faf4ce1f275d8a7a6a405833457e5049b991d5da33a717b6b775f25165c4103014677c8c29302c2577f8fd8077d2acefbba8931677fdf453076addad27010096a9266a49e6355141a1d0eecdddc5c34d1423989ddc03f326a2cf661519774df48d353f95d335eade30e1ada3ad56693ece18bf8469f329f2b4e0c044a49208ca587ead5f23a37790068ed959c6ffc898f89f80fa8a95fcfc8661b7b0c5716d654c06b7b970dea58b968ca3463ab8cf5a7f968f278218009a256bbd218ea65d552d963a8f52974c17878afc672fd65cdea8fa7a203571aaea01fd34dd660bad1d6d48bdab87b97f9ac41395f952f6378d8d363ce41a78cc07ae40ea7c0281faefd3e6a0575e904630d4e24531eeb638644b594edd6fcc56d6ea2acba48169bc8fd31f8bb7d45301e751051505b1c7c84b93279eb6b768133be789b0e18deb81e3cf8cb64b2992b38dddd94afeffbf6a4ea4dea1f16b981ab5bd5e0353ec52fe41beea956659d788d1c3892902c258b47de2c76eef5491c02dbdd5f3de1a23b14e989e38dec4ed947debb76f289059b5c38f9e93fe6283f808fd56b54cf0ee93fcccc22403171d2956d3a205e8674a68ec5e12d1e738167823ece8f8ded7bc6c9ad8e2e0dceb826d9cc2433e90f1a5414857992aa6d46dbc68e9bd44b311517249aa2d63d5f36ec41a2250fc2606e358369a89f4d60c330d97fbaf5fe517c1d1a126f9927dc2e78e404b53c7ce63b8f38f675898ae1f061ea00b06a59e655f4aaceb7d665200bba315ef91a4f9bb77dd456758c11220353ddd2511ffff1d17a6861b1956181048194feb4d6b5a584acdd2e88c89b30ef9ba60cd0723bd92a852554372edd95ee61284f6158148c23c9cb7d394c4c91d719e3057c5da9ec6d288d8e55f43981f80c73816ab566ba0c7136cf73ba4b0ccc9309bd8b954963990e06ef9e9d87a23c3c5a9d9ec249302c42ba820556ff0171a33cc2649c71f6fa54ef6119da8a52d12f4a9058a8ca62530eb2ab388775ac00585227d9297d3230a6f99b704f84e5a4bfdb2e7b3070bb2d9ea6ae92b27fe6be06b5a7bda01b1977448944d424375b4b1bea4149ee59a9de71c4137a6112495c381b3bc08755674b10e212591d7fb455b1da63b077dd564b23df3a755ad9bd3bba5b503247f1af558953a8e24f448cb9fdff1f0bb1b42e5449523cc47fd7080ec4fb790d5b96ddc432aa1c988d3d853553a8f5312391273cb0cadbe92504da5a5cd0cafc1ca02b27ecc7fc75f4ca92c1f58ff357ccb8c669f1e1bf074160af032ccaec1d79ce45732bad2f9bd86de5380571e6523a85445a3ef953dabdb44124e8982f7ed3000e60105da92b5cbb9d79febf7454f4c8968142331bd707d0d46ed30a28f0958a6c9e68f83b8fc673c38647360d9dcbb382ce8ddef285af35ac24254eb09acfff7fa46d6b73d0d3e4f0b95473efc71c2790c0050a6a71f297b8c2cd59b8d1d7dcd470a81f5341882fcb6f3505406fa9976fbb60965ba4048ac58f1b407537fca8f26d70bd8111b3b910a97c5c8060f4a85fe4d9f2fc482fb007bd927cb9140903304c6f5bc1d6ec5b0581f3c9b0b58942d16dfd281fa5236f2ee61f54595f8a09e61ce77e82b14e4510958cbbc9e54bb858a9fc423c888717cee59ec7e11256bd8a40d153925568c36431972a7fc2d21e52f2515935f737085c80df1141598e14afca80933181b853a3a24c38fa87936024d82b8e96f678ed", 0x1000, 0x7}], 0x80402, &(0x7f0000000400)={[{@size={'size', 0x3d, [0x38]}}, {@size={'size', 0x3d, [0x36, 0x65]}}, {@huge_always='huge=always'}, {@huge_advise='huge=advise'}, {@mode={'mode', 0x3d, 0x2}}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, 'net/tcp\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'net/tcp\x00'}}, {@euid_gt={'euid>', r1}}, {@uid_gt={'uid>', r3}}, {@smackfshat={'smackfshat', 0x3d, 'I#}\x13:*)'}}, {@obj_user={'obj_user', 0x3d, 'net/tcp\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x34, 0x63, 0x66, 0x63, 0x32, 0x61, 0x34], 0x2d, [0x63, 0x61, 0x61, 0x38], 0x2d, [0x31, 0x38, 0x62, 0x63], 0x2d, [0x5d, 0x38, 0x36, 0x37], 0x2d, [0x7f9c6561b83f6dd0, 0x36, 0x30, 0x30, 0x30, 0x6b, 0x66, 0x35]}}}]}) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x4000000, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x40000000, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x9effffff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0xec0b0000, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0xefffffff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0xf0ffffff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 506.416829][ T3256] usbhid 3-1:0.0: can't add hid device: -71 [ 506.427253][ T3256] usbhid: probe of 3-1:0.0 failed with error -71 [ 506.437811][ T3256] usb 3-1: USB disconnect, device number 61 [ 506.796782][ T3256] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 507.046785][ T3256] usb 3-1: Using ep0 maxpacket: 16 23:38:21 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x700) 23:38:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0xffffff7f, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) setsockopt(r1, 0x1000, 0xd58e, &(0x7f0000000300)="a0df8df86995bd9cabc1a04a35c3f47c62f19563a33cdccb5ccd7fcfad9eb64c38796ac94af2bb105d45c2727e5e949984338702d2a6a9ee2c8fc01e8f811175d5a2dbc3cffd02c434959bda7298d280900e0369cf77e59582c611571cc2d58c9fe5c148c8aab61a9cbf4ae870058cd361670934cd05831355c9c6abb8e93ac32977af46d04dd59b1e6f3d035cfdd2c5a3407bb35a9168cdde6838eac7acdcd4f6c3692a4252b0893b8e0cdfccb377014ef8d9ed3ef4ebfa45af8c1a97047dd6f529f9f10a6d2d823860a1096a07821035b710eb2014b36ded0937269ec0ea3c92cc", 0xe2) 23:38:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a3100000002090002007318b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbcc5fa8e5041ca8b844d755301892beeff010100006f8bad382a2900"/123], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfa22}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6dfe}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x88}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r4 = getpid() sched_setattr(r4, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r6 = openat(r5, &(0x7f0000000000)='./file0\x00', 0xa800, 0x10) r7 = creat(&(0x7f0000000040)='\x00', 0x81) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r6, r7, 0x0, r5}, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x0, 0xc23, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r8, r5, 0x0, 0x20000000000000d8) [ 507.186857][ T3256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.198639][ T3256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.208998][ T3256] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 507.222435][ T3256] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 507.232105][ T3256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.245119][ T3256] usb 3-1: config 0 descriptor?? [ 507.987198][ T3256] usbhid 3-1:0.0: can't add hid device: -71 [ 507.993470][ T3256] usbhid: probe of 3-1:0.0 failed with error -71 [ 508.001969][ T3256] usb 3-1: USB disconnect, device number 62 [ 508.686897][ T3256] usb 3-1: new high-speed USB device number 63 using dummy_hcd 23:38:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0xffffff9e, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r3, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) fsync(r3) mlockall(0x5) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}}, 0x8000) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x2}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x1}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x3f}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x40}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000404}, 0x20000004) 23:38:23 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x4000) 23:38:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) rt_sigreturn() syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x10000, 0x0) 23:38:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000900d860c107f10548f3b4af2d611a0906060101050000000900030c73797a31000000020900020073c5d95d72398453660fef3a0d5183451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad0000000000000000c050957134b2763b569d61b7aaa48e5b5396c8a33f4f3a0d7786ba949e4d734c80478e3f756a1ef7e55bca07d6f03a2c4e99ee6d8a9f5986351a93994e10a09150485a3de2194740e70a7172f68f9ba97c4b5d5e33b7bb7b790b9077ae1cd5f682798a827d303c61c5516c90d870b3f51b1b"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, r1, {{0x7, 0x1f, 0x2, r0}}}, 0x28) sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x20000000000000, 0x8000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) 23:38:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x121000, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000001980)={0x118, r4, 0x200, 0x0, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x200080c4) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000001bc0)={0x170, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x170}}, 0x0) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x108, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x108}, 0x1, 0x0, 0x0, 0x805}, 0xc0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0xffffffef, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0xfffffff0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 508.784052][ T22] kauditd_printk_skb: 10 callbacks suppressed [ 508.784060][ T22] audit: type=1326 audit(1601077103.305:766): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15996 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x5}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x6}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x7}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x8}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 508.813634][ T22] audit: type=1326 audit(1601077103.315:767): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15995 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 508.838493][ T22] audit: type=1326 audit(1601077103.335:768): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15999 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 509.146892][ T3256] usb 3-1: Using ep0 maxpacket: 16 [ 509.266993][ T3256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.278599][ T3256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.289630][ T3256] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 509.303810][ T3256] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 509.313549][ T3256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.323376][ T3256] usb 3-1: config 0 descriptor?? 23:38:24 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x800000) 23:38:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x9}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r0, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 509.583972][ T22] audit: type=1326 audit(1601077104.105:769): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15996 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 509.609704][ T22] audit: type=1326 audit(1601077104.105:770): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15995 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 509.644279][ T22] audit: type=1326 audit(1601077104.135:771): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15999 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0xc1, 0x4) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:38:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002207bf7337e849cca050ba57216a0700000061962aff94f11e301ec278699fbf87f7bc5409a568629e94a126220ab8b6166f0e183c86f75b4aa6c1017461f54c777a5ac26cc2fa45ccf012cc26713cabad173efc7215c2dd826988dfeb4426ad2e49f7343d090eeadfc72aac5dbcde179e9cfec534ed278832a8618816bc29862f2e"], 0x0}, 0x0) 23:38:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0xa}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 509.671705][ T22] audit: type=1326 audit(1601077104.165:772): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16051 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) ptrace$setregs(0xd, 0x0, 0x5, &(0x7f0000000300)="32474833e9514a9ef1b10a9468f42de722ce84948b32853fe899fce12848b9ca40f4834e8e077c98e26c44eee85e05ffc067fa92642ca97f36dc689820553ff5279dfb1f776b725dfc64c74f2a8cc30a28cd07adadf782fc9e5e18560bb74c77d4b4c75c88b843ca0cd43c710eca92081015bf8364b11d76a1ea63136afff5b679c5645b67afbeb687c00bdba7a25d169500117973a95282fba7f6d4ed9cbf8a1de73bf7b1e614502434c1abe4510bb3ef6f0ff71e4a1241a17e960dba98643abb59d3dd65f5c3453ccc07fa20e0") seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) write(r1, &(0x7f0000000340), 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') pkey_free(0xffffffffffffffff) pkey_free(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x100000000000000) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 509.717278][ T22] audit: type=1326 audit(1601077104.245:773): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16063 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 509.740040][ T3256] usbhid 3-1:0.0: can't add hid device: -71 [ 509.747665][ T3256] usbhid: probe of 3-1:0.0 failed with error -71 23:38:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0xc}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:24 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x1000000) 23:38:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0xe}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 509.750699][ T22] audit: type=1326 audit(1601077104.255:774): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16069 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 509.796011][ T3256] usb 3-1: USB disconnect, device number 63 23:38:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0xf}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x10}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x11}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 510.166947][ T3256] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 510.416947][ T3256] usb 3-1: Using ep0 maxpacket: 16 23:38:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) shutdown(r0, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 510.453276][ T22] audit: type=1326 audit(1601077104.975:775): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16051 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 510.537034][ T3256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.548919][ T3256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.559569][ T3256] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 510.573543][ T3256] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 23:38:25 executing program 5: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) write$cgroup_pid(r1, &(0x7f0000000080)=r0, 0x12) sendfile(r2, r1, 0x0, 0x41) [ 510.583028][ T3256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.594531][ T3256] usb 3-1: config 0 descriptor?? [ 511.317228][ T3256] usbhid 3-1:0.0: can't add hid device: -71 [ 511.324641][ T3256] usbhid: probe of 3-1:0.0 failed with error -71 [ 511.332539][ T3256] usb 3-1: USB disconnect, device number 64 [ 512.037072][ T3256] usb 3-1: new high-speed USB device number 65 using dummy_hcd 23:38:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4440, 0x20) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220040de41788190335839ba9e9c2f806da193d7c680bc7ace9692664f252272ca4012b40d4c259b6f62f73e6d4b98178f1268f38becec70fe2b9d0626062f063c8b5f9db0d77528fe10b19f0c2c29ee044aeb5cc924bab2f30a54a5919bbf0821b98bdbf740fe6b73a62b5b834eaa446980d3318f1b2d466832ab9d46dee1e5ea94ad91362adcf3568a2a47823902fcdd971d33a2a48385cd1d90d0af07323ad94bf397371bdfc3135995a706c97d903dba2cb60d756b9846c9b7988e9e867d92e13846935447ddcff4e36b04dc1c5eb2b7109e0616018cbe75f4600741402c35576e64"], 0x0}, 0x0) 23:38:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x12}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:26 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x3000000) 23:38:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x21, 0x0, 0x6, 0xd97, 0x0, 0x0, 0xfffffffe}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@sha1={0x1, "3d5f390b6168deef47a3d1652395ebf22fb9f31d"}, 0x15, 0x5) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e00000900210c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc00000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r1) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000f703000227bd000003a7dca4be247d00fcaddf25070000d545000700729a2a5b00002e2f"], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x44040) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) 23:38:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x13}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x15}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x16}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x17}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x18}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 512.507082][ T3256] usb 3-1: Using ep0 maxpacket: 16 [ 512.627149][ T3256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.639574][ T3256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.650778][ T3256] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 512.664541][ T3256] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 512.674506][ T3256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.684571][ T3256] usb 3-1: config 0 descriptor?? [ 513.427210][ T3256] usbhid 3-1:0.0: can't add hid device: -71 [ 513.433828][ T3256] usbhid: probe of 3-1:0.0 failed with error -71 [ 513.442627][ T3256] usb 3-1: USB disconnect, device number 65 [ 514.117187][ T3256] usb 3-1: new high-speed USB device number 66 using dummy_hcd 23:38:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x19}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:28 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x7000000) 23:38:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:38:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000000)={0x2, 0x100, 0x1}) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:28 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x1f, 0x20001) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r3, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100006fe9e7a5c0a0234100000000000109d7ccf303dab140500904000009030009210122220009058103000000", @ANYRESOCT=r2], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x101000, 0x0) write$char_usb(r5, &(0x7f0000000080)="9f64a47031f06a", 0x7) 23:38:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0xc0000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0xa, 0x0, "57ed4d929cb32ea57d42785ad6e0216f4cd798a38c3cce0dcc28d5ca7ed8aa6e8f9194929f96428f7946cdc16e080acc99d2b5bc8e015a36a4e33a40812d9491f7cdc64b3d99c6547200e9386fe43300"}, 0xd8) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) ptrace$poke(0x4, r1, &(0x7f0000000000), 0x4459) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r2, 0x0, 0x6) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000100)) [ 514.219350][ T22] kauditd_printk_skb: 12 callbacks suppressed [ 514.219358][ T22] audit: type=1326 audit(1601077108.745:788): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16240 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x1d}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x6b}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 514.250911][ T22] audit: type=1326 audit(1601077108.755:789): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16242 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 514.275823][ T22] audit: type=1326 audit(1601077108.755:790): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16236 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x7e}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:28 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x10000000) [ 514.390159][T16288] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 514.400210][T16288] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 514.421699][T16294] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:38:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x21, 0x2}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 514.432104][T16294] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 514.587198][ T3256] usb 3-1: Using ep0 maxpacket: 16 [ 514.747282][ T3256] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 514.755791][ T3256] usb 3-1: can't read configurations, error -61 [ 514.917294][ T3256] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 515.013558][ T22] audit: type=1326 audit(1601077109.535:791): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16236 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') fcntl$setpipe(r1, 0x407, 0x401) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:38:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x21, 0x3}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 515.045074][ T22] audit: type=1326 audit(1601077109.565:792): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16240 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 515.068655][ T22] audit: type=1326 audit(1601077109.565:793): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16242 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 515.108199][ T22] audit: type=1326 audit(1601077109.635:794): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16321 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 515.227319][ T3256] usb 3-1: device descriptor read/64, error 18 [ 515.617235][ T3256] usb 3-1: device descriptor read/64, error 18 [ 515.737291][ T3256] usb usb3-port1: attempt power cycle [ 515.909985][ T22] audit: type=1326 audit(1601077110.435:795): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16321 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 516.447294][ T3256] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 516.537345][ T3256] usb 3-1: Invalid ep0 maxpacket: 165 [ 516.687274][ T3256] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 516.777343][ T3256] usb 3-1: Invalid ep0 maxpacket: 165 [ 516.782812][ T3256] usb usb3-port1: unable to enumerate USB device 23:38:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x99c) write(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @adiantum, 0x2, "d51e2413a77ef925"}) splice(r3, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = dup2(r4, r3) write$FUSE_POLL(r6, &(0x7f0000000180)={0x18}, 0x18) syz_io_uring_complete(0x0) write$ppp(r6, &(0x7f0000000040)="310aa57488a824680dcc5218902d4d15627a827b9eea5f510d2e425eb14824d96c06e7e7ab6d", 0x26) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r8, r7, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000200)=0x1) 23:38:31 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x40000000) 23:38:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000880)=""/4096) 23:38:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x21, 0x4}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f0000000200)=@buf="9255a13a38a463051b9287fbc8d438e80b0a966ac829ed03d48d80e658dc52dfda406f0f7c188e0f2a43c59038e97d377e4d9a2f79d7451f9f481203b76240b50243232bff5257ca6a0182f9ea3600"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r3, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x41, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32], 0x0}, 0x0) 23:38:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000004c0)={0xffff, 0x6, 0x9, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r1, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) copy_file_range(r1, &(0x7f0000000240)=0x2, 0xffffffffffffffff, &(0x7f0000000300)=0x9, 0x0, 0x0) sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x2, 0x202) getsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000200)=0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x242800, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4000000020801020000000000000000050000093c00048008000240000000060800014000f8ffff080002400000078b08000140000100010800024000000005080002400000000408000140000000090900010073797a3000000000040004800900010073797a310000000024000480080001400000000508000440000000020800044000000004080007400000148d060002406002000014000480080001400000000008000140000000070500030006000000050003002f0000000600024000040000"], 0xc4}, 0x1, 0x0, 0x0, 0x200108d0}, 0x4) ioctl$KDMKTONE(r3, 0x4b30, 0x929) sendfile(r2, r2, 0x0, 0x20000000000000dc) 23:38:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x21, 0x0, 0x2}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 517.231050][ T22] audit: type=1326 audit(1601077111.755:796): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16334 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 517.254931][ T22] audit: type=1326 audit(1601077111.765:797): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16333 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x21, 0x0, 0x3}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x21, 0x0, 0x4}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) 23:38:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x21, 0x0, 0x300}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x21, 0x0, 0xbec}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:31 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xeffdffff) [ 517.687338][ T5139] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 517.927332][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 518.057425][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.068400][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.078450][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 518.094258][ T5139] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 23:38:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = syz_io_uring_complete(0x0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000000)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000100)={'syz1', "4eeee507805841469b2c9e2e0be2e9c18cc5f647e72a9bda72bedefe20c9e3ad90b3bf9cae2978bbf13242d8e4399756ddc74d24bf4bc8fc009ac69a4d5d2520606ec4091673236150acd0aa837b6fdce2f81ed9f3d8933ab8c5a7399ecdddee7c3943a553f7e2b8c98eee1246d5c7de9ab0864fb10eae3295e28633909878215f81e690a2266cb652e96f3847b84902b7b2620aeb46"}, 0x9a) sendfile(r3, r1, 0x0, 0x20000000000000d8) r5 = getpid() sched_setattr(r5, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x7ff}, 0x0) ioprio_get$pid(0x3, r5) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x21, 0x0, 0x4000}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 518.104140][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.117849][ T5139] usb 3-1: config 0 descriptor?? [ 518.667469][ T5139] usbhid 3-1:0.0: can't add hid device: -71 [ 518.673578][ T5139] usbhid: probe of 3-1:0.0 failed with error -71 [ 518.681683][ T5139] usb 3-1: USB disconnect, device number 70 [ 519.347415][ T12] usb 3-1: new high-speed USB device number 71 using dummy_hcd 23:38:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a310000000209000200c9fbd4b25f785dafe5513d33c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041d18b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c800) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x10000010, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') readv(r1, &(0x7f0000000200)=[{&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f0000000100)=""/65, 0x41}], 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:38:33 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xfffffdef) 23:38:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x21, 0x0, 0xec0b}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x3, 0x0, 0x4000, 0x6}, 0x0) r1 = dup2(r0, r0) ioctl$KDSKBLED(r1, 0x4b65, 0xe7d) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{r6, r7+10000000}, {r8, r9+60000000}}, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x40, 0x9, 0x8, @local, @private2={0xfc, 0x2, [], 0x1}, 0x80, 0x8000, 0x0, 0x100}}) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000000)) 23:38:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) sendmsg$sock(r1, &(0x7f0000000180)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @empty}, 0x4, 0x3, 0x3, 0x2}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)="bfb8b3ec33c5be3eb534a184cca1d13d22f010d27b967900dc41cfaee3a7ab58bf8f2883780f30ab", 0x28}, {&(0x7f0000000200)="48683aaf4351f05d95504fde4e1c1919df6e326ba16716374c1cd3a66a75551f70d73f4d784813c4e6f9af737d60a41ed3d206c7f897b46912b1256155ca3922015a27680da34d080bd1e2e8c70eeab3bfd65bee5c7e2659e1896ed22de493170554509794970de7b8", 0x69}, {&(0x7f0000000380)="d4ae1a26932becb120cbc4ff5aa1ac51945ee8baacf3511cabae8ee0e8a208625e9cc9a4756aa0acf65146b8b6c18ce077d015b9522fdd2f20c8ed8817a9fa04dd5f59f5a3509fd2331cd68c3d9ed87598f8c0aa10087f509c20d0b269ad375ab66168ca8bdd5f2ff8cd6ca97f5c13e721104c88d183f3b25b4261b235b379b4898973e71155df6a12becfd4a69f49de0a5ad8d01ba72cda6b487e7df3bdc646ea53e50c87634127a150c0daa9d67647f6f3bf6afb7ed6ef82ed2eaeda7517cbc92a39c0859139fa1ac1000aaff9018b4d8f94fc2ba769b79f253717a6dd2650d9afc0891c28d0e6ff8a1b914753", 0xee}], 0x3, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}, 0x400c0) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:38:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) [ 519.447555][ T22] kauditd_printk_skb: 7 callbacks suppressed [ 519.447563][ T22] audit: type=1326 audit(1601077113.975:805): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16446 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x4, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x5, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 519.476415][ T22] audit: type=1326 audit(1601077113.975:806): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16443 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 519.506164][ T22] audit: type=1326 audit(1601077113.975:807): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16447 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 519.525752][T16463] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 519.538203][T16468] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:38:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x6, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 519.561077][T16473] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 519.570771][T16477] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 519.595863][T16481] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:38:34 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x10000000000) 23:38:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x9, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 519.605495][T16484] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:38:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0xa, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 519.633630][T16490] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 519.643084][T16493] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 519.667796][T16498] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 519.677151][T16501] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 519.917415][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 520.037485][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.048696][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.059181][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 520.072328][ T12] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 520.081634][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.092151][ T12] usb 3-1: config 0 descriptor?? [ 520.248157][ T22] audit: type=1326 audit(1601077114.775:808): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16446 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 520.270374][ T22] audit: type=1326 audit(1601077114.775:809): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16443 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0xb, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:34 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x1000000000000) 23:38:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ppp\x00', 0x8080, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) fcntl$setflags(r0, 0x2, 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8ec0, 0x0) r7 = dup2(r5, r4) write$FUSE_POLL(r7, &(0x7f0000000180)={0x18}, 0xffa0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="94020000", @ANYRES16=r8, @ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x40090}, 0x80) [ 520.292343][ T22] audit: type=1326 audit(1601077114.795:810): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16447 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x7ff}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='fd/3\x00') getpeername$tipc(r2, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000000c0)={0x8, 0xff, 0x0, 0xed9}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) [ 520.330607][ T22] audit: type=1326 audit(1601077114.855:811): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16518 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 520.356239][ T22] audit: type=1326 audit(1601077114.875:812): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16520 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 520.598410][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x4 [ 520.606650][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.615720][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.624312][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.632538][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.640704][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.648813][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.656400][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.665381][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.673533][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.681765][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.689917][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.697295][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.706163][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.714499][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.722902][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.731166][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.739392][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.746748][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.755478][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.763862][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.771955][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.780222][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.788321][ T12] hid-generic 0003:045E:03DA.003C: unknown main item tag 0x0 [ 520.796490][ T12] hid-generic 0003:045E:03DA.003C: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 521.131857][ T22] audit: type=1326 audit(1601077115.655:813): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16518 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 521.156981][ T22] audit: type=1326 audit(1601077115.675:814): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16520 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xff) unshare(0x40000000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564703a73797a310000000044000400200001000a000000000000002e2d0000000000000000ffffac1e004000000000200002000a"], 0x6c}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:38:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x10, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000003800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800a9a55256f71fe572fec2291bfca6c51c49b9dbe628c0212ec3241a", @ANYRES32=r5, @ANYRESHEX=r5], 0x28}, 0x1, 0x0, 0x0, 0x809}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x700, 0x90, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x40000) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:36 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x80000000000000) 23:38:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) getrlimit(0x3, &(0x7f0000000000)) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000faffff020900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:38:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x11, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 522.442088][ T12] usb 3-1: USB disconnect, device number 71 23:38:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x12, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x13, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:37 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x100000000000000) [ 522.493102][T16551] tipc: Started in network mode [ 522.499074][T16551] tipc: Own node identity 2e2d0000000000000000ffffac1e004, cluster identity 4711 [ 522.514420][T16551] tipc: Enabling of bearer rejected, failed to enable media 23:38:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x14, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x18, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 522.927585][ T12] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 523.167604][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 523.287655][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.298596][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.309939][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 523.324423][ T12] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 523.334647][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.359655][ T12] usb 3-1: config 0 descriptor?? [ 523.828669][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x4 [ 523.836516][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.843943][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.851349][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.858751][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.866119][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.873518][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.880922][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.888316][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.896658][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.904065][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.911462][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.918848][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.926211][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.933942][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.941338][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.948746][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.956100][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.963489][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.970893][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.978283][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.986025][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 523.993408][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 524.000816][ T12] hid-generic 0003:045E:03DA.003D: unknown main item tag 0x0 [ 524.009363][ T12] hid-generic 0003:045E:03DA.003D: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 524.029842][ T12] usb 3-1: USB disconnect, device number 72 [ 524.531856][T16617] tipc: Enabling of bearer rejected, already enabled [ 524.807654][ T12] usb 3-1: new high-speed USB device number 73 using dummy_hcd 23:38:39 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x300000000000000) 23:38:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x21, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) write$ppp(r0, &(0x7f0000000000)="a4671747727a95d1ee644f437439b084b90db4cbb012070c9893de313c5fcef76b8bdee78f9f6e19cb780ed1e07d25f9443b74d9a0067670b06108b085c1c5365aa22ae18bbc00040000f0a9c0ecc9b0f5aa97ff0c00fc2b1909d6b883ed4b6775883fd31f8b9ae89b6eb0ac89d437afff8113134eb979f9de1d2f22917947022dba4f036d28afbb8071", 0x8a) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/connector\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0xd8240, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000080)={0xfaf}) r1 = epoll_create(0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r1, r2, 0x0, 0x6) 23:38:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:38:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x7c, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xed}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000811) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0xe4, r2, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9153}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x81}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 524.907871][ T22] kauditd_printk_skb: 6 callbacks suppressed [ 524.907880][ T22] audit: type=1326 audit(1601077119.434:821): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16625 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 524.928069][T16626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:38:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x2, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x5, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 524.936769][ T22] audit: type=1326 audit(1601077119.434:822): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16623 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 524.950496][T16634] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 524.982407][ T22] audit: type=1326 audit(1601077119.504:823): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16622 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x6, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 525.027831][ T371] tipc: Left network mode 23:38:39 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x700000000000000) 23:38:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x8, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 525.059448][T16661] validate_nla: 22 callbacks suppressed [ 525.059451][T16661] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 525.079200][T16665] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 23:38:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x9, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xa, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 525.104404][T16670] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 525.113808][T16673] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 525.357691][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 525.487868][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.498857][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.508961][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 525.521818][ T12] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 525.530890][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.539697][ T12] usb 3-1: config 0 descriptor?? 23:38:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000040)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000555000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r6, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 525.706361][ T22] audit: type=1326 audit(1601077120.224:824): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16625 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 525.729710][ T22] audit: type=1326 audit(1601077120.254:825): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16622 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:38:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000880)="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", 0x1000, 0xfffffffffffffffd) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88100) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/99, &(0x7f0000000080)=0x63) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000001880)={0x2e9, 0xfffffffffffffff8, [[], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], []]}) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 525.753378][ T22] audit: type=1326 audit(1601077120.254:826): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16623 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 525.776246][ T22] audit: type=1326 audit(1601077120.264:827): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16707 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 525.799065][ T22] audit: type=1326 audit(1601077120.314:828): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16712 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 525.821926][ T22] audit: type=1326 audit(1601077120.344:829): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16715 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 526.038927][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x4 [ 526.046359][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.055444][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.063494][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.071602][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.079941][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.087507][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.096189][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.104400][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.112927][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.121058][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.129153][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.136506][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.145318][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.153810][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.162193][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.171478][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.179614][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.187207][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.195995][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.204459][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.212548][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.220775][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.229394][ T12] hid-generic 0003:045E:03DA.003E: unknown main item tag 0x0 [ 526.237485][ T12] hid-generic 0003:045E:03DA.003E: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 526.546495][ T22] audit: type=1326 audit(1601077121.064:830): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16707 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\"\x00'/14], 0x0}, 0x0) getsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:38:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x10, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:42 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x1000000000000000) 23:38:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x802, 0x0) ioctl$CHAR_RAW_REPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000003c0)={0x80000000, 0x6, 0x0, [{0x742, 0x4, 0x6, 0x9, 0x0, 0x9, 0x2}, {0x8, 0x0, 0x4, 0xe4, 0x7, 0x1f, 0x8}, {0xe9, 0x81, 0x2, 0x78, 0x41, 0xcb, 0x80}, {0x8, 0x0, 0x94, 0x44, 0x4, 0x3f, 0x1f}, {0x1ff, 0xfffffffffffffff8, 0x52, 0x3a, 0x0, 0x6, 0x6}, {0x4de, 0x1, 0x1, 0x5, 0x1f, 0x23, 0x81}]}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000000000000d8) 23:38:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$mptcp(0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd2d, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000325bd7000fedbdf25050000000800020002000000080003000500bb33c269acccca990000"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4004000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x6, 0x5943622b) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x42) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 527.903499][ T12] usb 3-1: USB disconnect, device number 73 [ 527.938907][T16739] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:38:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x11, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x12, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 527.948327][T16746] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:38:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x13, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x14, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 527.994345][T16761] netlink: 'syz-executor.3': attribute type 18 has an invalid length. [ 528.004139][T16764] netlink: 'syz-executor.3': attribute type 18 has an invalid length. 23:38:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x116, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:42 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x4000000000000000) [ 528.337830][ T12] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 528.587816][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 528.707935][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.718876][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.730344][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 528.744472][ T12] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 528.756176][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.765426][ T12] usb 3-1: config 0 descriptor?? [ 529.248848][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.256558][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.264024][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.271433][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.278841][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.286224][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.293655][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.301069][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.308476][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.315866][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.323272][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.330678][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.338062][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.345433][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.352838][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.360431][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.367791][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.375182][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.382610][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.390007][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.397369][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.404833][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.412271][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.419668][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.427022][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.434397][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.441790][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.449236][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.456790][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.464507][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.471928][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.479325][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.486685][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.494096][ T12] hid-generic 0003:045E:03DA.003F: unknown main item tag 0x0 [ 529.502159][ T12] hid-generic 0003:045E:03DA.003F: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 529.515197][ T12] usb 3-1: USB disconnect, device number 74 [ 530.227921][ T12] usb 3-1: new high-speed USB device number 75 using dummy_hcd 23:38:44 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x8000000000000000) 23:38:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x11a, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000040)={0x8, 0x9}) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x8, 0x1}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0xffffffff) 23:38:44 executing program 4: prlimit64(0x0, 0x7, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0xfffff800, 0x81, 0x0, 0x0, 0xfffffffc, 0xfffffffe}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x800, @mcast2, 0xf7}, 0x1c) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 23:38:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) [ 530.323783][ T22] kauditd_printk_skb: 8 callbacks suppressed [ 530.323792][ T22] audit: type=1326 audit(1601077124.844:839): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16813 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x2801, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 530.353675][ T22] audit: type=1326 audit(1601077124.854:840): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16814 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 530.377664][ T22] audit: type=1326 audit(1601077124.894:841): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16810 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 530.414256][T16840] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 23:38:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0xa, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 530.427673][T16844] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 23:38:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x21, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:45 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xeffdffff00000000) [ 530.470359][T16855] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 530.479793][T16858] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 530.506653][T16862] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 23:38:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x116, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x11a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 530.517214][T16867] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 530.687908][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 530.818050][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.829132][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.839606][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 530.852734][ T12] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 530.862063][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.870968][ T12] usb 3-1: config 0 descriptor?? [ 531.116406][ T22] audit: type=1326 audit(1601077125.634:842): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16810 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 531.139496][ T22] audit: type=1326 audit(1601077125.634:843): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16814 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0xfffff800, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r1, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) sendfile(r0, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 531.165165][ T22] audit: type=1326 audit(1601077125.664:844): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16813 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 531.188672][ T22] audit: type=1326 audit(1601077125.704:845): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16890 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 531.417976][ T12] usbhid 3-1:0.0: can't add hid device: -71 [ 531.423966][ T12] usbhid: probe of 3-1:0.0 failed with error -71 [ 531.431309][ T12] usb 3-1: USB disconnect, device number 75 [ 531.976535][ T22] audit: type=1326 audit(1601077126.494:846): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16890 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 532.107990][ T5139] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 532.347988][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 532.468105][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.479016][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.489369][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 532.502511][ T5139] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 532.511834][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.520730][ T5139] usb 3-1: config 0 descriptor?? 23:38:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = dup2(r4, r3) write$FUSE_POLL(r6, &(0x7f0000000180)={0x18}, 0xffa0) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x28) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:38:47 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xffffffff00000000) 23:38:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x3, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) r3 = signalfd4(r2, &(0x7f0000000000)={[0x20]}, 0x8, 0x0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400c850}, 0x0) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r1, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x2010, r1, 0x7dae4000) sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={0xffffffffffffffff, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000003c0)="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", 0xfb}], 0x1, 0x3, 0xfffffffb) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001880)={{{@in=@multicast1, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) 23:38:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 532.779998][ T22] audit: type=1326 audit(1601077127.304:847): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16913 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4, 0x3}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4, 0x21}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 532.808878][ T22] audit: type=1326 audit(1601077127.324:848): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16911 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0xc}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 532.858135][ T5139] usbhid 3-1:0.0: can't add hid device: -71 [ 532.865066][ T5139] usbhid: probe of 3-1:0.0 failed with error -71 [ 532.875440][ T5139] usb 3-1: USB disconnect, device number 76 23:38:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4, 0x3}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 533.238026][ T5139] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 533.478075][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 533.598131][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.609258][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.619214][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 533.633346][ T5139] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 533.642625][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.653952][ T5139] usb 3-1: config 0 descriptor?? [ 534.169032][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x4 [ 534.176647][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.186275][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.194545][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.202600][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.210694][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.218926][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.227280][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.235924][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.243343][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.250897][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.258295][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.265660][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.273065][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.280646][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.288068][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.295443][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.302822][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.310221][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.317591][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.324983][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.332373][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.339768][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.347221][ T5139] hid-generic 0003:045E:03DA.0040: unknown main item tag 0x0 [ 534.355920][ T5139] hid-generic 0003:045E:03DA.0040: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 534.372573][ T5139] usb 3-1: USB disconnect, device number 77 [ 535.138144][ T5139] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 535.378100][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 535.498182][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.509209][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.519873][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 535.534025][ T5139] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 535.543344][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.552355][ T5139] usb 3-1: config 0 descriptor?? 23:38:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x80, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x4000, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x4c, 0x1, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffff8, 0x4}}, @NFQA_PAYLOAD={0x17, 0xa, "221f11c355dfc7c8e747b3b3e984f52f80b143"}, @NFQA_EXP={0x14, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200c0810) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022220052ca4089b4e3d02d000100008066ba57a9"], 0x0}, 0x0) 23:38:50 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x0, 0xe}, [@NDA_LLADDR={0xa, 0x2, @random="b7a9e1e56caa"}]}, 0x28}}, 0x0) bind(r1, &(0x7f00000001c0)=@xdp={0x2c, 0x1, r9, 0xa}, 0x80) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x8ec0, 0x0) ioctl$TIOCGWINSZ(r11, 0x5413, &(0x7f00000000c0)) 23:38:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4, 0x21}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:38:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', '\x00'}, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8ec0, 0x0) r5 = dup2(r3, r2) write$FUSE_POLL(r5, &(0x7f0000000180)={0x18}, 0xffa0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24020055}, 0x48000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x0, 0xe}, [@NDA_LLADDR={0xa, 0x2, @random="b7a9e1e56caa"}]}, 0x28}}, 0x48001) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0xff, 0x5, 0x0, @private0, @private0={0xfc, 0x0, [], 0x1}, 0x7, 0x40, 0x5, 0x3}}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x0, 0xe}, [@NDA_LLADDR={0xa, 0x2, @random="b7a9e1e56caa"}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)={0x7c4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xffff0001}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x62dc}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3e00}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x44, 0x4, [{0x2, 0x59, 0xc9, 0x2}, {0xcd67, 0x3, 0x8, 0xff}, {0x16, 0x2, 0x3, 0x2}, {0x9, 0x0, 0x0, 0x1000}, {0x5, 0x7f, 0x8, 0x8}, {0x8001, 0x1, 0x3, 0x7}, {0x6, 0x2, 0x62, 0x100}, {0x7, 0x1f, 0x7, 0x2}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x3, 0xf8, 0x7f, 0x81}, {0x200, 0x53, 0x80, 0x91b}]}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r9}}}]}}]}, 0x7c4}, 0x1, 0x0, 0x0, 0x10}, 0x200000c0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r10, r1, 0x0, 0x20000000000000d8) [ 535.799126][ T22] kauditd_printk_skb: 4 callbacks suppressed [ 535.799135][ T22] audit: type=1326 audit(1601077130.324:853): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16998 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x8}]}]}, 0x2c}}, 0x0) 23:38:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0xc}]}]}, 0x2c}}, 0x0) [ 535.828563][ T22] audit: type=1326 audit(1601077130.324:854): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17002 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 535.852151][ T22] audit: type=1326 audit(1601077130.324:855): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17000 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 535.888195][ T5139] usbhid 3-1:0.0: can't add hid device: -71 23:38:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4, 0x3}]}]}, 0x2c}}, 0x0) 23:38:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4, 0x7}]}]}, 0x2c}}, 0x0) 23:38:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4, 0x8}]}]}, 0x2c}}, 0x0) [ 535.894349][ T5139] usbhid: probe of 3-1:0.0 failed with error -71 [ 535.907557][ T5139] usb 3-1: USB disconnect, device number 78 23:38:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4, 0x9}]}]}, 0x2c}}, 0x0) [ 536.258167][ T5139] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 536.498155][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 536.593105][ T22] audit: type=1326 audit(1601077131.114:856): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16998 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 536.615995][ T22] audit: type=1326 audit(1601077131.134:857): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17002 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 536.638351][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.639456][ T22] audit: type=1326 audit(1601077131.134:858): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17000 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 536.649585][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.682817][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 536.696349][ T5139] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 536.708980][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.717643][ T5139] usb 3-1: config 0 descriptor?? [ 537.438234][ T5139] usbhid 3-1:0.0: can't add hid device: -71 [ 537.444198][ T5139] usbhid: probe of 3-1:0.0 failed with error -71 [ 537.452265][ T5139] usb 3-1: USB disconnect, device number 79 [ 538.158311][ T5] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 538.398224][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 538.528295][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.539838][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.549601][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 538.562410][ T5] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 538.571554][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.580441][ T5] usb 3-1: config 0 descriptor?? 23:38:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xa4, r3, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ca5eff4d95"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "30d08d7778"}, @NL80211_ATTR_KEY={0x50, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "509b86aa5a130a6c35fd2f6405"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "553135f0f0"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad4c5b0008"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "35ea5e325dd96e49fd89c47336"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040c5}, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4, 0xc}]}]}, 0x2c}}, 0x0) 23:38:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0x7, 0xce, 0x1}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) 23:38:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRES16=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) setfsuid(0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r3, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) fcntl$setown(r3, 0x8, 0xffffffffffffffff) 23:38:53 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x2473, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 23:38:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4, 0xd}]}]}, 0x2c}}, 0x0) 23:38:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4, 0x21}]}]}, 0x2c}}, 0x0) [ 538.821935][ T22] audit: type=1326 audit(1601077133.344:859): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17084 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 538.848339][ T22] audit: type=1326 audit(1601077133.344:860): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17087 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4, 0x300}]}]}, 0x2c}}, 0x0) 23:38:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0xf}}, 0x0) [ 538.877006][ T22] audit: type=1326 audit(1601077133.364:861): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17086 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x10}}, 0x0) 23:38:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x14}}, 0x0) [ 538.919951][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 538.926009][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 538.935858][ T5] usb 3-1: USB disconnect, device number 80 [ 539.288295][ T5] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 539.558290][ T5] usb 3-1: device descriptor read/64, error 18 [ 539.618949][ T22] audit: type=1326 audit(1601077134.144:862): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17084 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x22}}, 0x0) 23:38:54 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 23:38:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000e000a000200b7a9e1e56caa001c"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x0, 0xe}, [@NDA_LLADDR={0xa, 0x2, @random="b7a9e1e56caa"}]}, 0x28}}, 0x0) getpeername$packet(r0, &(0x7f0000000900)={0x11, 0x0, 0x0}, &(0x7f0000000940)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001780)={&(0x7f0000000980)=ANY=[@ANYBLOB="e00d0000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="c400028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000800030505000000fdff01050100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="f8000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="2c0102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ed00000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400a9000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c02028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000feffff40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c656400000000000000000000000000000000000000000000001d615d989fb76d380d8901b98e0000050003", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400e1dd00000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="2402028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400030000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f7ffffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="b80102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000400000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r5, @ANYBLOB="3001028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004005f0000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400995dffff080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="1402028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="bc00028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040008000000"], 0xde0}, 0x1, 0x0, 0x0, 0x30000844}, 0x20040004) 23:38:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x11bb0f0e) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r3, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYBLOB="0800000000000000ff00000000000000ff00000000000000ffffffff0000000000000000000000008100000000000000fcffffff0602000002000000ee000000d000000000000000010000000000000006000000000000000000000080ffffff4800000000000000000000000000000000000000000000000000007bdbe4912c2883b800000000000000000000000000000000000000000000000000000000ffe800000000000000000000000000000000000000000000007b99792975abc529c901bce01d0767e68c2a436564e2454f99f5dcc48ad376eef4f52094e478d9b035f78db86cf26abf99283d9a4fc0c611748e95e1d055c935fe61f6edba84edf583036a2f7950fe90abfe7284789e739f2c959066927e3c7a3f0c5dc121dfcd020c7babcec305378a167659a51288ef5733d7d194f7c3559a1c1b64c82e5a8a2e8a187777b61405a562a9cf8317673c1155488a79282ed17b10e2d284af260cd25b2264b30348a05a24afc9fc88d11df5344935a65243a80dc12dfdee67fe1a947d183d900e77011b06a5f1a143c399f8bc06698d05913d82e8e78f02d44b1685019f975458649cfdb32e0b001fe1d8f092f5e5410c33e857cd01896e5ccf3d6164949af352ccccf7706d89657c6a8b922e56900634b336544b0b2e396b2b8cdf4a335f2835291b0ce59ebec735f325275276c3fb36b0a0a76bf857df0bc25c"]) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x2}, 0x0) syz_io_uring_complete(0x0) [ 539.948277][ T5] usb 3-1: device descriptor read/64, error 18 [ 540.218285][ T5] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 540.488287][ T5] usb 3-1: device descriptor read/64, error 18 [ 540.888312][ T5] usb 3-1: device descriptor read/64, error 18 [ 541.008405][ T5] usb usb3-port1: attempt power cycle [ 541.728383][ T5] usb 3-1: new high-speed USB device number 83 using dummy_hcd 23:38:56 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r1, 0x7, &(0x7f0000000280)={0x30000000000000a, 0xfffffffffffffffd}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000bf60c10748f3b4af2d611a090606010105000000000e0000050000030900030c73797a02007347d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d75fb14688f1453017d892be62bf0e157606cad98aa51eeff0057c63d6f"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x20, 0x200500) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000000880)={{r3}, "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"}) read$FUSE(r3, &(0x7f00000038c0)={0x2020, 0x0, 0x0}, 0x2020) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, r9, 0xee00, 0x0]) fchown(r7, 0x0, r9) write$FUSE_CREATE_OPEN(r3, &(0x7f00000003c0)={0xa0, 0x0, r6, {{0x6, 0x3, 0x4, 0x8, 0x4, 0x28, {0x0, 0x8, 0x8, 0x9, 0x2, 0x3, 0x1, 0x8, 0xfffffff7, 0x8000, 0x4, r0, r9, 0xffffffff, 0x3}}, {0x0, 0x3}}}, 0xa0) 23:38:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x25}}, 0x0) 23:38:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x24c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x38d8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80e}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe00}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6a08}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab65}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc857}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x448}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x24000881}, 0x20008854) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:56 executing program 0: setrlimit(0xf, &(0x7f00000000c0)={0x8, 0x3}) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000001c0)={0x0, 0xffffffffffffffe0, 0x1, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000005c0)={0x1c, 0x0, {0x8001, @usage=0x8, r2, 0x800000, 0x401, 0x9, 0x2b32, 0xec0, 0x21, @struct={0x3, 0x30}, 0x9, 0x7fff, [0x7, 0x3, 0x0, 0xccd, 0x100000000, 0x7f]}, {0xff, @usage=0x8, 0x0, 0x3ff, 0x7, 0x3, 0x1, 0x8, 0xeb, @usage, 0x6, 0x1, [0x101, 0xa6, 0x7fff, 0x6, 0x10001, 0x8]}, {0x80000001, @usage=0x8, 0x0, 0x1ffe000, 0x82c3, 0xe16, 0x8, 0x3ff, 0x24, @usage=0x7, 0x1, 0x4, [0x5, 0x1, 0x2, 0x5, 0x6, 0x3]}, {0xffffffffffffffe0, 0x0, 0x51}}) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x801) 23:38:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_usb_connect(0x3, 0xb1a, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x5f, 0x1c, 0x5a, 0x20, 0x19d2, 0x284, 0xf8ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb08, 0x4, 0x9, 0x9, 0x10, 0x8, [{{0x9, 0x4, 0xcf, 0xd1, 0x7, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x5, 0x1, 0x8, 0x40, 0x4, 0x1}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0xff, 0x80, 0x1f, [@generic={0xd5, 0xb, "1c998917b86974b3858d27c753baafa02123f311a249e85aa90357e61e46a4e480a945c3ec91db0ee977e5bf1a39246496f66e5d03beeaeeb18457021e05fffbdbeebc7f8c79fc0b155e33b0df1b8b82a4a8db944d7517a9cd4dd24d1d40239fd2777316e532ac79a64178d925655acee73f1a9ba13adcd545def524b7a44f5704cc6216c6ab7aecba37a860aa364da2345f11fa4b44d21ab8b97a7f0a0bb804d0c4a26339565e6d753b4f4d483998f2724b99fef9b1157fb712b5ea0e903877d6de1f6e689dde4f9bc92bed2d4b7c2bf77bff"}, @generic={0x6d, 0x23, "a1eda9d4fa3550996f5b247594897d86e885cd7952654abc98af8576fd207879c7735885fcf759535912e4e69c6a8905d2579ae94ede8f8019618cdf9486bad1dcf2ff9d514841b7fb0263fee0542272ecf2ddeef2e02cf0a67f7116fa441ed3b8f79cafeee7ea81044f5b"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0xf9, 0x80, 0x0, [@generic={0xe6, 0x24, "54675a39b6df1b4b64446e006fc10f0c2a8a8dfb61dcb897f2df4a190c7485d32472d5490201979be0016af9a0a7fcf2c36d8eecb4cca83d6b413412cfe400db3caa4635c695bef2f0f033387c7d99b68ddadc75d738ef71fecbcdaf587ad52afb2e3a6f17a6b0c33f0fc23cb982aea4948f2a80158a4d0011af7349fe7ba5974d8b9ad267a8127d19f4b634651a26e85c0b8d16197f812b014f88011ac938d517ff135482e3b2dce64ac555aa6b99b5dc432fc7580081fe7862d48ad27ca195a055987c32fd900342c887e571531ca7810b9f6b35cc7b9c2a024f30f41892f092b5ff7d"}, @generic={0xc0, 0xa, "b3c0e1894e85026faaf5b7b18ccc36d0d9f4695ee28421aa803999c398e1faa85fb94726e2f84bdbe2fba207dd3f535878558129454fee24f2d039bb56ddcdfc9e6477a3d9246eb037be802314dc0d8057d458db0d4eef33948f61f5b383eb015fa2321e1b5f4a19ad3aaba4249d6ada79f457be1be8a9c4b5f1d391abdaa1128d4d9f8dce4b853e3b7abd766eb9fb7d7461e258dae1315fdf26859945e3ca2c0278fab0a206906b96090c4bd478612b6fb5676f21f4fe0062b37e7bdd17"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x3f, 0xbb, 0x8}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x7, 0x6, 0x5, [@generic={0x54, 0x1, "22a0ff6fa96ee0064917b1f7d7e2978d8e89904715b893392437d4e0ff2b0e183e6b61bd8baad15b5d80d66aeb37359c2797c24ecbd1a53a03d0eb2b07d2a12178f33a97764c0e78c6f53dd60e73d58917c3"}, @generic={0x4e, 0x22, "35d95030e1d9a66028da2262fb2d5d96ab36bbb6de5a94b1de4c62673e8686769800f8c98610e9929eda9c89018249a9e30ba06d89c671f5f3ad871220c3ffa494883fd2159d78d8b29c2471"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x7, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xab, 0x3}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x98, 0x3, 0xff}}]}}, {{0x9, 0x4, 0x5, 0x6, 0xf, 0x56, 0x66, 0x36, 0x8e, [], [{{0x9, 0x5, 0x5, 0x4, 0x20, 0xa9, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x401}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x3f, 0x0, 0x40}}, {{0x9, 0x5, 0x0, 0x3, 0x127, 0xff, 0x6, 0x80}}, {{0x9, 0x5, 0x6, 0x2, 0x208, 0x2, 0x0, 0x7a, [@generic={0x65, 0x6, "defa094e5ad34a26ba76b4c62553cf888bb9aa36299e022a20fb6b19a42771ab44ddc0822a1eff410a5c7993f9018dac02722a02b3fa7e49e9b4eaed28a9477d479fd62ba4394372b5fd100c7770c9eb7a4285ee31aa376eb6452056bc7fe501c4c8d5"}, @generic={0x84, 0x7, "dd8aed21a2a7f3135eaf916c2337cd9d900f86b8dfbc4aaeab16ad010d3b65546663e8c122b79b0ade1f20da079abcab9fe71d5e88e92b63a5f0a00efedd250fabe391f16bfe594d9dbc49568ad461623d96793c0f0ddc49b06241a38c523bcb4dc78a271c47a5fd29999c8ba2617b6c6caaaaf8a0ec561854e712c85312ddbd7acb"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x3f, 0x7, 0x8, [@generic={0x74, 0x3, "831ecd1febd3acfdc2dfe7096cecbc9d6eb7410e280417f8c532ffbf50ff10ad014432bc7f6526b01fb364e48943fff8823bc44f7efaa54470a39de49d9e49060cd8833cbcce7645c599ca8afacd9ca26f2bd3de0d919e3060d539a4c1d7582cb93aa7205b45411c85eb6a0c7637f032192c"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x5, 0xff, 0x3f, [@generic={0xc9, 0x31, "e9eb1199145a9151a79e1c554f8b327f0d88d328342e8cf6ddbc69e0107bb9846b9fdec43faedb22656729e035f32726658ed71560c3fc16acdf974079bca32f062d4b5c2938cb5cab92cb23a1229118864b9b4a7a38a8a196837b0c209d4faf9c661b5548fd97d93cb7317894b7dca8421d8f04e2c15ccadec34a645a0507335c346b61a25700e345be259cc9934e01762130e6a4139793f02cdc190c08daf3b42c6b6636c1184949a81fd5e26198e4fd12ad989927011527dd1007f430bb7a5ff0dec956285c"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0x5, 0x7, 0x7}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x2, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6f, 0x8}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x0, 0x66, 0xa6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x5}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x40, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x8}, @generic={0x24, 0x4, "8dc8383d9c283324a69b1dfde41f78a5ff791a871a281d46cf3412b1bc05b710a383"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0xff, 0x3f, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x40, 0x5, 0x15, [@generic={0xcc, 0x11, "cf423be1d6b395e07ecd69bf4f01ec7dc3235412cb87825343699dfbd56bd3cf6626e5084cd21ab58ae441b8f7389d900abcb893ccf6f86c160b365f6d3f63a9b25987b07c3c5a66344384e7623be0875f0477650bcd1ff1826554ff5529979311bb426f6fb3a933dd4d51786a51cbf61e0640783f48b37f2ec82c0c5836ce1f07791e40133a8bb8d991aaeb87a1eb63089bccec5aab0450721081f4f758178c4450bdeca4cd26b92f2ca03c23f3e38e859ac00d605dcc95919cfb21e71c091f6adc85e824927e770bc2"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0xd0, 0xff}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x1, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf7, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xa9, 0xffff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x6, 0x0, 0x5, [@generic={0x7a, 0x10, "3727de8b19ce6c0992d1b35ceca08c5eeedce3c4fb017f372595a88de578629a1affca46bc5dde6d9e20a89922ad66571fd92635df3afe00ec0afaba75ec95481bfffbeef6dede73f15822b96135a442bde2b32bf79af850242c522955d33bf3db74a197ff56a199788fa218f1c3bf409442dfdc9df2547e"}]}}]}}, {{0x9, 0x4, 0x93, 0x3f, 0x1, 0x40, 0x5, 0x75, 0x3f, [@generic={0x9f, 0x10, "fec1c37e78a2a7d0f57362ec47eb9710f3bb4c951097a133d82042e0fad3bd2e41a7e93ed7f48cf25d11267b765c2674d73c7eced5c5ac1e2f23c1ee0aaaff854269040cd32be9808ec18082df86d51a8935bde402d0e70d78077411469746c33bc8cbd58bba17f61e927450534146b14a330fcdaa9ac4d9dda9e2fe8769fb774af2660e6c11d6a68da71f30bb07b243f629b5dfb18b6479dd8de12b76"}, @uac_control={{0xa, 0x24, 0x1, 0x7, 0xd}, [@extension_unit={0xc, 0x24, 0x8, 0x4, 0x4, 0x40, "99bf800bc8"}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x4b, "2b7845a29c"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x10, 0xe, 0x9, 0x40}}]}}, {{0x9, 0x4, 0xa1, 0xea, 0x5, 0xff, 0x39, 0x6, 0x26, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x6bcf, 0x6, 0x5}}, @uac_control={{0xa, 0x24, 0x1, 0x1f, 0x3}, [@feature_unit={0xf, 0x24, 0x6, 0x6, 0x2, 0x4, [0xa, 0xa, 0x2, 0x2], 0x1}, @processing_unit={0xd, 0x24, 0x7, 0x3, 0x0, 0x1f, "7866ee035cc6"}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0x8, "7247d7bd0f"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x6, 0x0, 0x81, 0x6, 0x20}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x0, 0x47, "e5"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x4, 0x2, 0x1f}]}], [{{0x9, 0x5, 0x0, 0x10, 0x10, 0xf2, 0x4, 0x20}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x7f, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x8}, @generic={0x7c, 0xc, "40faf222f3032dbc33aafb1a673c9f68d505f00ffe4fc4090d498566a13f85514f58983961924aba08e78f437c2f13bb89cd48a61696590709f1dc28182075026385d4c761a5c5f8e8b96597c049a39336781120855ddc041e6606e0d17ae15a1d0c0c924a256358d6c82f7ac38ac01edd89eab42a13568525e8"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x20, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x9a}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x7f, 0x2, 0x81, [@generic={0xd4, 0x8, "18571bd6e60d47bb67e99b7cc3a9dc8b5d58083e5ba4de5af9bef7d86c07de825206a7e5381afd445813b9c6a2292a68923e2bba2cc3a3fdaee400d2f5238a9fab1853c1cd449fd0493c5c59f8a25c5cc63ede125d55d000ea3ce4f26456a5e61421b875df7647113bc94bcaf28950f4a8aac2aae042e1eb9cc02fc1fb3aa5479c666420dab2a69c3b01ca5aa8b081962f7fd5f199e3c4960db853537df222099d4f4f8e6ef495aa206462877bf2a5e27246937c7d73c854ebfc9a7a148a2dbef38c84aafbcfffd65b55c535622041852d93"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x1ff}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x85, 0x5, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xcb, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x3ff}]}}]}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xc4, 0x8, 0x6, 0x20, 0x20}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x102, &(0x7f0000000200)=@string={0x102, 0x3, "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"}}]}) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) [ 541.830390][ T22] kauditd_printk_skb: 6 callbacks suppressed [ 541.830398][ T22] audit: type=1326 audit(1601077136.354:869): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17180 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0xc0}}, 0x0) 23:38:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0xec0}}, 0x0) 23:38:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x33fe0}}, 0x0) [ 541.860643][ T22] audit: type=1326 audit(1601077136.354:870): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17177 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 541.884949][ T22] audit: type=1326 audit(1601077136.384:871): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17183 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 541.888433][ T5] usb 3-1: device descriptor read/8, error -71 23:38:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x200001ec}}, 0x0) 23:38:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x7ffff000}}, 0x0) 23:38:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0xfffffdef}}, 0x0) [ 542.128374][ T5] usb 3-1: device descriptor read/8, error -71 23:38:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x1, 0x7, 0x3044, 0xfff, 0xfffffffffffffffd, 0x20000000000000, 0x0, 0x1000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:38:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x3}, 0x0) 23:38:57 executing program 1: gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) r0 = gettid() prlimit64(r0, 0xe, &(0x7f0000000180)={0x4000009, 0x10000}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000240)=0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8ec0, 0x0) getsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 542.618396][ T5] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 542.622292][ T22] audit: type=1326 audit(1601077137.144:872): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17177 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 542.648568][ T22] audit: type=1326 audit(1601077137.164:873): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17183 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 542.676469][ T22] audit: type=1326 audit(1601077137.174:874): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17180 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:38:57 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x9, &(0x7f00000000c0)) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x8ec0, 0x0) r9 = dup2(r7, r6) write$FUSE_POLL(r9, &(0x7f0000000180)={0x18}, 0xffa0) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2005001}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) 23:38:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000000)={0x6, 'caif0\x00', {0xca9}, 0x1}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000020000db) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 542.702024][ T22] audit: type=1326 audit(1601077137.194:875): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17247 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 542.708824][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 542.738687][ T22] audit: type=1326 audit(1601077137.194:876): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17249 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 542.760852][ T22] audit: type=1326 audit(1601077137.264:877): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17262 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 542.858439][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.869402][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.880649][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 542.893992][ T5] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 542.903447][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.912352][ T5] usb 3-1: config 0 descriptor?? [ 543.369541][T17190] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 543.448439][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 543.454420][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 543.475830][ T5] usb 3-1: USB disconnect, device number 84 [ 543.481831][ T22] audit: type=1326 audit(1601077137.994:878): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17249 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 544.148451][ T5139] usb 3-1: new high-speed USB device number 85 using dummy_hcd 23:38:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x34, 0x0, 0x7, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x953}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x10) r0 = getpid() r1 = getpid() sched_setattr(r1, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x7ff}, 0x0) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x0, 0x1000007b, 0x20, 0x0, 0x0, 0x7, 0xffff, 0x2, 0x451f}, 0x0) sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@loopback, @loopback}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x7) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e24, @empty}, {0x2, 0x4e21, @local}, 0x3a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001, 0x6}) 23:38:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x7}, 0x0) 23:38:58 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x20800, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r9, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x4008044) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r10, 0x0, 0x8ec0, 0x0) r11 = dup2(r8, r7) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_PKTINFO(r12, 0x10e, 0x3, &(0x7f0000000340)=0x4, 0x4) write$FUSE_POLL(r11, &(0x7f0000000180)={0x18}, 0xffa0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r11, r6, 0x15}, 0x10) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 23:38:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='pagemap\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = dup2(r4, r3) write$FUSE_POLL(r6, &(0x7f0000000180)={0x18}, 0xffa0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, 0xf}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x41}, 0xff, 0xff, 0xb, 0xe, {@empty, {[0x0, 0x1fe, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff]}}, 0x9, 0x1, 0x5, 0x48f, 0x8, 0xfff, 'bridge_slave_1\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0xf0c524cf11eb79dd}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @remote, 0x4, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000042785b1750ba57a967e3ea4a8eeb3cd507aed01208bc87eabfa0c2250d0fb6a8fe080e35b300a5ee05ec982729ebaf71dadc7e7c93969ebd10784fe1b207ad8baa6352b41725d8c897577ea1a5e157"], 0x0}, 0x0) 23:38:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={0xffffffffffffffff, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000080)={0xffffffff00000000, {0x8, 0x4, 0x6, 0x0, 0x7}}) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) prctl$PR_GET_CHILD_SUBREAPER(0x25) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r3, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, [], [{0xff, 0x0, 0x2744762, 0x7f, 0x3, 0x4}, {0x0, 0x8, 0x3f, 0x6, 0x0, 0xe6fd}], [[], [], [], [], [], []]}) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:38:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x8}, 0x0) 23:38:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x9}, 0x0) 23:38:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0xc}, 0x0) 23:38:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0xd}, 0x0) 23:38:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x21}, 0x0) 23:38:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x300}, 0x0) [ 544.608455][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 544.728574][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.739548][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.749574][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 544.762564][ T5139] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 544.771848][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.780646][ T5139] usb 3-1: config 0 descriptor?? 23:38:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) ptrace$cont(0xe, r0, 0xf3a, 0x101) r1 = getpid() sched_setattr(r1, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x7ff}, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) 23:38:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x2}, 0x0) 23:38:59 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_mount_image$vfat(&(0x7f0000000780)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000740)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}) mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(r3, &(0x7f0000000040)='./file1\x00', 0x0) r4 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r5 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) ioctl$USBDEVFS_DROP_PRIVILEGES(r8, 0x4004551e, &(0x7f00000001c0)=0xffff) r9 = socket$packet(0x11, 0x2, 0x300) dup(r9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r5, 0x3f, 0x0, 0x5, 0x0, 0x0) 23:38:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000e000a000200b7a9e1e56caa001c"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x0, 0xe}, [@NDA_LLADDR={0xa, 0x2, @random="b7a9e1e56caa"}]}, 0x28}}, 0x0) getpeername$packet(r0, &(0x7f0000000900)={0x11, 0x0, 0x0}, &(0x7f0000000940)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001780)={&(0x7f0000000980)=ANY=[@ANYBLOB="e00d0000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="c400028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000800030505000000fdff01050100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="f8000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="2c0102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ed00000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400a9000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c02028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000feffff40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c656400000000000000000000000000000000000000000000001d615d989fb76d380d8901b98e0000050003", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400e1dd00000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="2402028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400030000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f7ffffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="b80102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000400000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r5, @ANYBLOB="3001028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004005f0000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400995dffff080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="1402028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="bc00028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040008000000"], 0xde0}, 0x1, 0x0, 0x0, 0x30000844}, 0x20040004) [ 545.298740][ T5139] hid (null): report_id 3265314794 is invalid [ 545.307159][ T5139] hid-generic 0003:045E:03DA.0041: unknown main item tag 0x4 [ 545.317564][ T5139] hid-generic 0003:045E:03DA.0041: unknown main item tag 0xd [ 545.326954][ T5139] hid-generic 0003:045E:03DA.0041: unknown main item tag 0x1 [ 545.335546][ T5139] hid-generic 0003:045E:03DA.0041: report_id 3265314794 is invalid [ 545.344423][ T5139] hid-generic 0003:045E:03DA.0041: item 0 4 1 8 parsing failed [ 545.352945][ T5139] hid-generic: probe of 0003:045E:03DA.0041 failed with error -22 [ 545.500069][ T5139] usb 3-1: USB disconnect, device number 85 23:39:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xabe3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:39:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r1, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) write(0xffffffffffffffff, &(0x7f0000000300)="ec16ce2eeb842de19f685a1e7a0330783678b0ac049249074861d836def0de2d188ba73eb7544bcb13824c9f4eb208a1a533b36d7d367ea0a22e6a5f1ecab1162d8dc553e801981c66bed0cf064823a43417a92e51ee84b2085c810eb322bef0674af539ada78802aba2eac24105bb6f78ff9a5f80cc83f153080e01c6cafeaa8320754a196f1b601528970e227aa792bfe33fb1cab210143d582d6b6ab0082489ef3dab7647bdf063bf0e13e225be107023060c163c67be79ff447455d3fae390760232f5b37b42af703e41ed", 0xffffffdd) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:39:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x3}, 0x0) 23:39:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d8ff0307f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r3, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000000)={{0x3, 0x0, @identifier="2e673dad64ed2edd70ca87e225f538b0"}}) 23:39:00 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x6200, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x21f, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) dup(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1000, 0x10}, 0xc) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x600}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 23:39:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) 23:39:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x4}, 0x0) 23:39:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x300}, 0x0) 23:39:00 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 23:39:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0xbec}, 0x0) 23:39:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x4000}, 0x0) 23:39:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0xec0b}, 0x0) [ 546.468511][ T5139] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 546.708598][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 546.828865][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.841309][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.851785][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 546.864943][ T5139] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 546.875193][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.892381][ T5139] usb 3-1: config 0 descriptor?? [ 547.379526][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x4 [ 547.387120][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.396904][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.404335][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.411734][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.419122][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.426498][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.433899][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.441317][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.448711][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.456073][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.463583][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.471155][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.478565][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.486120][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.493536][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.500943][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.508295][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.517590][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.524996][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.532429][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.539844][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.547228][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.554752][ T5139] hid-generic 0003:045E:03DA.0042: unknown main item tag 0x0 [ 547.562914][ T5139] hid-generic 0003:045E:03DA.0042: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 547.582727][ T5139] usb 3-1: USB disconnect, device number 86 [ 548.348593][ T5139] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 548.588594][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 548.708664][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.720704][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.730458][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 548.743263][ T5139] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 548.752292][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.761361][ T5139] usb 3-1: config 0 descriptor?? 23:39:03 executing program 0: r0 = epoll_create1(0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = syz_io_uring_setup(0x876d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$packet(0x11, 0x2, 0x300) dup(r6) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) 23:39:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x30000}, 0x0) 23:39:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) 23:39:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000300)={0x0, 0x2, 0x100000000, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=@tcp6, 0x6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={0xffffffffffffffff, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x100, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0xc03, 0x9, 0x3}) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000080)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:39:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000001) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x800) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x4c, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '$])$s\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) r2 = getpid() sched_setattr(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x20000000000000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) 23:39:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="c21e820b6bea23077bfecf513bd7870b7124bf99af4a356866932d", 0x1b, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="ee8a0f42b6fec4b8d218d227d67d69599a0c1e098838f4214f1609b403c623c8751e3a6cb54690103a6d96e822272becc3c9989cfe7deb78bee874028c6550bcb6ff30aefde49c8b8782ac7415d66e8fb49cdddcdee7bcf1492e2709f3c073c64b0989dbaf5f1dc98aa53ba4d879c03017ff320581cb1499838b91cc6bc743e1b80e7dd822c7cbf61c748a6db0c346afe4f216a677fc2589131dfb5ff92c3651d7eafd80b2fa82d6216cacd9c6c7a52f32f7baa937", 0xb5}], 0x1, r1) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000094231300b100000014"], 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0xfffffffffffffd88, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:39:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x34000}, 0x0) [ 549.038107][ T22] kauditd_printk_skb: 14 callbacks suppressed [ 549.038115][ T22] audit: type=1326 audit(1601077143.553:893): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17464 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:39:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x400300}, 0x0) 23:39:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x1000000}, 0x0) [ 549.069995][ T22] audit: type=1326 audit(1601077143.573:894): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17466 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 549.093288][ T22] audit: type=1326 audit(1601077143.583:895): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17467 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:39:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x2000000}, 0x0) [ 549.139521][ T5139] usbhid 3-1:0.0: can't add hid device: -71 [ 549.147836][ T5139] usbhid: probe of 3-1:0.0 failed with error -71 [ 549.158356][ T5139] usb 3-1: USB disconnect, device number 87 23:39:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x3000000}, 0x0) 23:39:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x4000000}, 0x0) 23:39:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x40000000}, 0x0) 23:39:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x9effffff}, 0x0) [ 549.518600][ T5139] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 549.758608][ T5139] usb 3-1: Using ep0 maxpacket: 16 23:39:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) [ 549.846116][ T22] audit: type=1326 audit(1601077144.363:896): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17541 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 549.870752][ T22] audit: type=1326 audit(1601077144.393:897): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17466 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 549.888695][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.893605][ T22] audit: type=1326 audit(1601077144.403:898): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17467 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 549.910563][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 23:39:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0xec0b0000}, 0x0) 23:39:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c000100000000000000000002000100", @ANYRES32=0x0, @ANYBLOB="000000000800010000000000"], 0x24}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) vmsplice(r2, &(0x7f0000001700)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="43ab59c4776f7d8a7fe8eef2986981e44ec7f982747694596a3c71dc7a48320d412feb2a1da8cf81b4763dcf8a9a85d23673fe3a8e855071cc036cc869306f02d178f5986fa2d1f712f4183166f7a8b87f93ed3a498ee97f360e47f769679eaebec8c7945a9bfbb7a802c1566e1407fd233f2226808bc2155ba0b4721fe6051130ea7b6d23f1ff5146198c7fd908669a50baf0bc303aca6a0b8bd78a5f3f43487e9289437dc1e41567b11c9d1f54cf19e13865", 0xb3}, {&(0x7f0000001440)="9482cb45fd38098a70c6f340b93f2a6f5510faa70bc7ffcae888e75b23eea0b5c2b729eeaa8f1905b3691e33f1153b8ba5eacbb3af5d2108c06cd5d50ac3ec1e465d80534a854e691a9c7b20d0f00f88a86944cb5b81e319d2047441bcc9b25f9a64e5e2eaaeeccf5d13906159dd419939bd37244147548df2da35949dd7f31a5e740f923d149fb229b5ad00104500ee0ba27f752d082d8d89059fa7f6926e6d59741715a495df41a3b3f5", 0xab}, {&(0x7f0000001500)="3aa14477e1ba663803d8065b4cf787774ddf4bcc7854013789bb293212da", 0x1e}, {&(0x7f0000001540)="b8f6e6490a0205f21e05dbac8a596273466d500f5783241180cc5a3767de158925eaafe555d396c97513202e23e55804a0c2cf4302235c1ddbbcda77feae049a32b46f543942069c4e320c8e1ddb021dadc801a9c3e90a4b61113c7ccf4fc0ec061e7d6d810c8f01f3c1a8e5c7125eddfbc52db7d0e3fce6eb0d489f2f2af536a871f27ffba10637d6c54d5e845c27f1416cc165dd53ca95f9b3eb59a1c8546062ec7d54cc53e69570648b6bdcbf52ed36f44420b449f048e9b675a2e15e26aa581e4fc6793264a93f2e607e1adea542c9", 0xd1}, {&(0x7f0000001640)="54d0e1604e41cdb0f86c6e01ecf8d95d06083dff6026f17aef24c395cefaaeb45297e08135e6488a3822a41f1d610042b5248cd20f8e5fa51115eeb92129c2eab5d26c366220d753a123c905443e7f452888e91bba384ced25a227a373a421bd2c4d3cfd6823d1e8f5b840f4ff586bd10559927125d8e01a99242f905d47101008ab62eda16062f70a8afff31cfe0e1a3543c313b2fc61f66c8b7ffbb7702908440c6bcf453b3f3b", 0xa8}], 0x6, 0x0) syz_io_uring_setup(0x76cd, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000300)='-@!,^*-\x00', &(0x7f0000000340)='./file0\x00', r4) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000240)=0x68) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020127a45409050839c16757a0beb152bd71d4ac1f7a7ebb2dfa"], 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x4040) dup(r7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_ADD, 0xfffffffe) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) io_uring_enter(r1, 0x203f, 0x0, 0x3, 0x0, 0x0) [ 549.942765][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 549.955687][ T5139] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 549.970152][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.983059][ T5139] usb 3-1: config 0 descriptor?? [ 550.438952][T17474] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 550.518661][ T5139] usbhid 3-1:0.0: can't add hid device: -71 [ 550.524760][ T5139] usbhid: probe of 3-1:0.0 failed with error -71 [ 550.532363][ T5139] usb 3-1: USB disconnect, device number 88 23:39:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0xa, 0x0, 0x8}, 0x3}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'sit0\x00', r3, 0x4, 0x81, 0x4, 0x7, 0x0, @ipv4={[], [], @loopback}, @local, 0x80, 0x8000, 0x6, 0xeb6e}}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:39:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x3, 0x70, 0x9, 0xa2, 0x7f, 0x7, 0x0, 0x2, 0xe049, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000040)}, 0x789b, 0x3, 0x7, 0x1, 0xfffffffffffffff8, 0x1000, 0x6}) 23:39:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0xefffffff}, 0x0) 23:39:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'vxcan1\x00', @remote}) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) 23:39:05 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000000c0)=@generic={0x2, 0x4, 0x81}) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, &(0x7f00000001c0)=0x2) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 23:39:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x8}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) [ 550.949469][T17571] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 550.978112][ T22] audit: type=1326 audit(1601077145.493:899): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17583 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 551.001232][ T22] audit: type=1326 audit(1601077145.493:900): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17577 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:39:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0xf0ffffff}, 0x0) 23:39:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0xffffff7f}, 0x0) 23:39:05 executing program 0: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x13, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x48044}, 0x10000011) 23:39:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0xffffff9e}, 0x0) 23:39:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x8}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:39:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0xffffffef}, 0x0) [ 551.438666][ T5139] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 551.688658][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 551.776692][ T22] audit: type=1326 audit(1601077146.293:901): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17583 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 551.800519][ T22] audit: type=1326 audit(1601077146.323:902): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17577 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:39:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008810}, 0x24008810) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x80000001, 0x80100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000300)="a7d61bc7f5e42bb6124a2b2ffb2ecc9161a8744a538f563c15fd6e2c1a2bf404128f0b687fb8e5c7b16b633798497789d79ae1ff58dd1261694d3d8b773e707b1bb9bd507b9100a2da67fc3a0028a013e7c74e4cafa6c9a3adb330ed26ee2fdb5f8857b626308bed209c880c8e1bf0b76c312cfcd879820bdde3b1e94395f778f139fc00572f1cbfd6344d79f464d8372299401c53a7d76389effd9112b0ab84774aebc383855ab8b93a541ba9998f159e204e7251ab9bc180e4a97bef86d799e1d9f8d0bdaf") getrlimit(0xe, &(0x7f0000000000)) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) [ 551.822517][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.833622][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.847977][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 551.861698][ T5139] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 551.871957][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.881322][ T5139] usb 3-1: config 0 descriptor?? [ 552.339750][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x4 [ 552.347922][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.356947][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.365201][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.373326][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.381511][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.389782][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.397153][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.406179][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.414389][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.422562][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.430757][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.438115][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.446932][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.455164][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.463361][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.471451][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.479660][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.487052][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.495977][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.504284][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.512399][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.520548][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.527924][ T5139] hid-generic 0003:045E:03DA.0043: unknown main item tag 0x0 [ 552.537469][ T5139] hid-generic 0003:045E:03DA.0043: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 552.551468][ T5139] usb 3-1: USB disconnect, device number 89 [ 553.328718][ T3256] usb 3-1: new high-speed USB device number 90 using dummy_hcd 23:39:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0xfffffff0}, 0x0) 23:39:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0xc, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}}, 0x0) 23:39:07 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x10001, 0x8001, 0x4, 0x7, 0x7}) dup(r5) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000001c0)={{r5}, 0x80000001, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 23:39:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000800) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x2, 0x2, 0x6, 0x0, 0x4, 0x0, 0x80000, 0x8001}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:39:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r1 = getpid() sched_setattr(r1, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x7ff}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={[], 0x2, 0x3, 0x49, 0x8, 0x5, r1}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:39:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x2001, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001540)='measure', &(0x7f0000001580)='\xd8)\xe8#)\x00', 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r3, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000240)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r0, @ANYBLOB="36ef7d74a775eb462c876c44d7e634b385276f2c4dfbe1025a3e09dfab8906ff8e97fda380f9e340e7ee08d2bca518002de63ee3e78b3b0a2ad2ba4ef45c1094cbfd4ddf89d88535a06b5f7f879a9f88210624dc346031f380733adb6605575bc6c79a05a8b94c1358c56654b61eaf2c19d4d6c30c869686afc6b31c4188a6bbe719a5947fdb9ec355c819417d3e349a748890261d4795ab384f1428a9ca9304e1d073f8aa8cecc25a26", @ANYRESDEC, @ANYRES16=r2, @ANYRESDEC=r3], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x4, &(0x7f00000014c0)=[{&(0x7f00000000c0)="09313dfb51f9d228af7244dc8a5c0c6ca435274108d9bdbf2f217edb994dc8a40ef4257d8a4b0af044f0648c092a474ac5ec77b35cda487ce18e101ac1c2b1db702588ebb4c351dbac2fc2e14557c6a61084cda8530b48ff6d1314f671ae9721ea19f6ccfd019ae9b8a0dfccc944d54a3f5a48263c1dd63ba0", 0x79, 0x1000}, {&(0x7f0000000340)="76368cfbea60dcb7e353a6c0f9cd0e4313045d9bf26420bc60fe58f1f121412f6457fd4d880a98392194b42544420cc0ac4a63ba73943cf19a3ea817d6c9b49beeeed98597f252711aeb37a33e7155282d6782eb120a70cf8edf85a257fb79dd7d1f2015c7178b091fedd35328478d639600b6e62db39a427b97e3cda444e326fdeaedc7c8c7d0eac555bd0c4966b2254b552f0e7e102c92bb0fe62cbc0fbbf7d5d985cc71f07fe4a10800becdeaf21b9aa6d0a7b96d4f5d189ccbe54a4f746c447fe9085d2c295c1d3315133e66291627565cf2005b46708165e0d3f6a330e625bb10f510fcf1139ae883e997e364247868a2dc71bbdfca7ea52fbfd45964e88f8bcea77e7877e889f2930b49ea70feea72b8cc97acd98b7a7068cf99ac04eef1f349ab9342a59083ed1d49a68492979753ed4b38c9fcb373c11bcf4edaa3acfbc714e579e796d90e8e3815a12826c266eb3aa6822602352800095a7fc1ffb7e2ab7f7df559d7652e8e1b2207a1d6b1e0d144a31f7094e1639ea778c6244ada99242b2fccfe462eb1e20de02b7e3412828d568bc3cfebad09766d5138187a53bdd5d14898b793b33a32f46e3983058bb10bab64b333d30a1e829bad94bd696e3302c0478f6ba2272c3f89542402d2f32de7cfc7954bbe447afc6f128c4798661179502f1aafcd8a4d0bc1ed3f9bd858272e94ceb43f1e6fee33354c8da5d88aa103b4acccb6ab435788d0760a9945db9beb661623600788034bb544e7b910f8e99f3609a744dc9b6cc0c72f75a930d19644fe92ab0056ba87f59cb46a909d896394548735f06adc7f3d06f0198e35ecd237e4ea201a36b88a0630251a97569cf9f2e725065fdde688cfc103288d0412bb3f4772e21615376387800c4349d13b08de1fcdadb8a9b57518c4ebbbd3e5f625fcdf9fc408f0e16d59fae4aadf1923005b13ee7d164005984019acc28e41a7bb3fc1e45208872292c0d54c6ab36182aad121727c3f3cf2f7f2d6c3f42220006fe9e8eefb2aad1ebf100c2e990728cfdd1aae988f6535849a3708b9783e6ce4bb4187ce404742899a33377efdfb92ae32adfa06be3323bf77eff2033680c1723071ab6d1a1b14c4e0236d1ac57f068a5b85f3c3434cbc24bb185ef3ab10cf384f46913665eeb45d014d93bed2a68f558da73a0e8e9c13f0a20bde3398cfb416f20670c64314bbe882affcda4a7d76c478a0df63629802c0aa1e127a0f8b95410fb1bf7ed2dfea5857f19f5aaf2c7bf60505ebdab487a6992581d02690d5e0688ef5295897aa6b1d7691e713c55f7fe0be39e258875be2fe70a66f9b0cd0a2800f3a019614804b6905a19a986dc24523533abdb63d2a6db6b1aee2dded40644154ef7440e31021a0919f6a9ce83efdba259b19b4ed42585f00ccf137acce1aaa5d33a571677a123efa088841d1f3922aba8d8a1f86d4fa7dbc8ea27101028643b9de11ae39913e4142139c86c0a0eff474f1b93ad9bc4240036a77921c987233712b4c890e029136212b2aea3a4477e1b19f76ace633790168c23ad359abfeb7832175ee4ead0c0224d7576cd970595619a6b33d7cef581270522607748f5811afdeb703c36a20060b5f63fa3320847fe145bb67c2ae7b57181f201404dffe123b049796da0b412e8ec1353bb72e5f44fde27d5e480186eb5a7c8200a1fa4b5217a2230373bd136c05a1cb8a32636c9b73f66008f5f166d338c6a4c22572d401639aad9fcd5361d13d32ba2526be7b6d2074bd22f88cc596b9568a2570ce3522b6043adebddd24c6b8fab09b17c6f21a0671212287a77fab7e13b44bcf129a4d697b71dc270ef68d3d92da0c2562853115da508eee7684353418d690a9e1a15ede5ce0b56587da01501098119a45674f4e20c3dbee43862c6d2ae5a329a7293322386eb7f329bc1335a04038ceec5931647e283422726c83f117db8eed9ae28ac8c514cd5890b43835de6dec867a1ab497a3a1fa507f8edc1f69520e0b0358d3c6727c2056770b7ca5abddf3bb94348bba75122632eefce3396df5cd0a6c45514b6da8c17303ea089a5757cc7e17bfc4f3f706859b767dbe8b171bdb15c8a47b4d327432e7e049bec5d72153efa169da064e75622774ec86520e594bfb0727096249cc54cc63aa3c27a0695084f0aef35b995dc2399fdb956c2896bd6bb9470155080735a3d310854c19ac220d1436ee882732af0694c4a83b1f6fc84c89a4d921891a349e0f1615d49eb4bfcfa79bc6f9f711cdf8bee6dbce414845dfb4efc583f3912a5501828035f66bb696bcd1e3c0ac57f58beda679a2d711423a552f130f762d61c660b4af968d9e9c2fdc8e567c8200ee8a9bd0b7a2ad708a84f8ad8cdfe32cb0fce1b5b0074a548d5382e409723d1f6353cf79743fe07f379fb94bb8ad2f6461d33ef120bb91dacf3e63c35ff8ffab24b0cb165b5bc15fcb5cd7296ea3aafac9f0bb7c881eee114ffb994786c0089a37e0633861dde5ec2633edb4a4de9de5506d68a27a488849107a5b4c24ece0a81556524e04b9aaa10a4bd042c6967e9cd07f4d0ce13637b2c920d755baf8b511fd2709a7494cf1dcd295e2169a8835c7ff02686602daf6459687c8f7c44edeab12c064a6cf6b5fc3258d05c952cb34d5ceaa1c849fd67edd5f0cd2cff636a51619d2d5ac0194e9413bc931093b5e32897f03827be30b7de336a5c08645ed60041bd74a95e8c76d1e477dd03a6db35c376576659d21c83bbe0acfec48fbaca3bf1bf3820e23daecee7e357cb50742e1f4128c10e3ae1480184d24f9eaaf37d56386d340c2e2389620c76a20ee8b240dcd04b565044b39c8ade546768bc01145a54a487e989cf271fd1c52536d0df83d29f0aeebe0dd0dbbd9a7ba68796e1af1c3183e694cdce83e56537dbfac979295a11b18405be95c10761f210a9435bd9c043846fd0b98f85212c791c553a2ec6ce8f8de70c86c216d45cb74febc1ce9fd97ee73efefb8113341419daed25a0e1b3378766aa0ce70d4af48153cf825eb28f60f6e86b1f0c76c3b481853d324ff3ddbb9ede35af91a400c4e50001f916390e29014c82ab6037b4530c0499aa8ce0894a22bee606a867c2deeee19973464c42930235c406b6310819ebfbfb1cbef3ece141c7603431945a3843a075f76b49ad67f00328a858626c253a2540cfa2665372ae687ef5970d6334fa4f8776a0d24fb589f851ca7f9aa5331def3036ba33ef5a22cfe2f9fe647fe509e375de04b18a07dbf275f1fbd8cf378610621279e7e5297572f8a076dc20d94b7401ea5973db952e72f9bb6aabbdcd3f74b7938e0b765f4f3c286298609a20e61d84b14ab86a4c85c16d2a5520d9379b928a29ab9ce4d0557166a37415a44bc9ce9d2be3ab7308acac46f597812dffb1858038ea488f8765c7b67e8277a355c206d0dcbda103b02c3942ca6ebf713a130669aa8c62a90e5f97aca04ac4912ccf9b70ee8877a1b5406d1beccc94aa1bbf3b86b62693a93d34ca7fc17ea406f8d708eb5e7710658a0eac977972d5b816db64342bea83e19da017b1696026a5c67132999fa5a2a800f747c6fb7c68f1db020de662ac6458972bd3ca7e5e2b8b5221d26efaf0e6259e9253a22098cd4c534cd543e9fc13f2a2c8da2d6749fd5da17714cb658fd010525d71912c29e8d8a77b5a5cc43b265416fb7eb7ad57f57a1224a820b8b7d8602ae738c5e789a8326f562cee64451d47652b43cf4e0602bb54ee13397bd8b7de68c6ea3f2527697aec17b49816454dcd348ca26aecc6aee320105ad8dc12ba9c03e7367135f3b3a42c7227310fa38c20919738b004d1431c387a0ed8283a65e1803d4e833dc38ee8aaf7bcb111d03baf392bfa69f2fa07992b7f7ecdd578b5f49015afe97c484258888e044b3b4254cc0458345c391d839aad16ed6d4a64f8bce2da22c321912489a1db1add26803eeccacfdd4e7f533f47e0cc9b813caeff075accefea70af5645674e1cff2dfeddc77765f287d3b4f3059ff3b2dcaf33997bf2b5f18275c9a62297d6b7e46dcbd342becacc7738298d1dd2e702c10da67aebde0f4d493747fd2897f164dedafc972282eada32b45bf99d4c52cbfae315cf2513679135bb16d53a31754025a353bdd143dbcf8ab6015832c66029aee19a10e2eba7766dc588846c1294c7fe56e79909eb401f9919969de49a3a06d87bb81dc8b65304631535ba8aa7db043873c52f4636f1a3e2074367caa27994d8a4cd53344bd572e0017418074ab0ffb7b82df83d5a67dc1e7bf3eba82a9f6ee0f8ec5614e84d9b0ecaf89ecdbdb37087f9bd0df70c7a86d30df63241594d5c09659e31f42d37dbca0b040d5af71c4351b7c0582c4c253cb16924b65f1c70397b763e6457d6140d6c0ab97d09d10437eeb73315372c0a775ae2ac6f7ca3ca70478a0063e44a0681c7e3a12b682fd0dd657d61ff1207a1d9bb9762c35f4a7a605fcfc12235c4d68cfacb81985cda1196b5f7071871fdfd85088fb87476b15630a5b57374103eb57cebb49ed9ffbe10ccedea17ee27de6a6f23b5caf29680bab570a63f47b3f114060722c1d8fd3ab7286b2d98ff82f3fa22426917e10f68bb0470013b93880d2130c91960ce53e26701bb1de28a87c0fe305fb6a0674817a589dbca62ba0c2490d902123fa8081a41c06e94850ce7ac20fdafe00e04c737bc8ba8c25fae9e245b0db4969cdedd39060e7de9a14d6b1027a1deb412ad28ca75ea28ca6dc4f841ec1eb8f9ab7d4edd20bb74cdcafa68a01a6036898e441a20be618243afeff8014edd98fc07261147cea796d7b8fd3ea42755012b12e90c34cb620a147c6959def79c5a6afda83aad67698e5ead88a99bb76e60bfbe8738409cee45e990830b37ef700ac225db0c5d693aae6188c622dafb3ca51531bcbce6c0e1ca8454f3bc371ba3967bb2e39a87f599907d3d61da9ecb46ca532c5f155006b21b80fcbe12fa953fed693e522274a8e0b7c3cf1ce763ccbbe6da61a384b41c05e3453ec5762f475c05d83b0c89dcdf93e0b3537c954c4439f2a8a0143242112a3c16b24dc33aa08402d59a88bc924be50f6de195e58fd83d05080e678146dddea33b3ce599408317a342dc19e7d9ba2d9246c29b2f502e0a8abcd543a7de4c11b45113efe2a64b192b3f185c01cd91466b3f5196fc729821db9f2e487f5e93d80d2509ad1a668fe16005286dd028781d19da6c98a58f1ba8f57f114cb4aad6d2dfbcb3055ecda923691a2cc8583c888ba578fec7af15af4a52a731928ed6cdb0b4bed57d00396cc3105630a9dc8dc4265f2c83670b6e10d74af93f023e04e85569519f7326a12bb6124bfb793936e6bca912a97eac007f9dbf95ddb50378b55e963b37df4bace0b86075a461619570f9effb236693d09e7b01c0dac19d4492504a200b076db9424b5cb481ad4ef97a8c57c5164531bd6cf2ed2ac6a9f167a6bbf64b0179a306c0a14675c65249e85888fc95c5b4a68770d2ce53ba14318d6385e7f500cecfb039301cba54ed6df99eaaa6396dfb8c03a3eaf93933ef83ce493a08baedefcb47804cc8786e0b81856d11b1ae7264cd42185ea572a241385602a0e7779f64ea919dd49290fc5029d5565ba0aab72bb5692defacf76e36e916ae0adf5568f6c8fde3483669dd42da4d7e54887dac0421278e6dee233f3cde97efce4acb95ed45f2fa6b4238a169afa57e76a406ea490ede1f9c65d0c323c9d6253c963995a4a69b808a5fd570ea026cb363b02ef16aaa46d995cda222614822773b8e44f", 0x1000, 0x5}, {&(0x7f0000001340)="4b4655982de32cd8781d5a629001cae7913a6fd45ab861d4483393fc6ed4a5c2b7cf92e9a585e7fb557e8dd7fb2a77bb8294b1655fe3bce2b6b3be3fdd386baf96033f1012154493b61961b03ea2bd8ccde973f7f13dac1688721363c87b6c093c1e071cfb358a7fa50c37", 0x6b, 0x5}, {&(0x7f00000013c0)="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", 0xff, 0x3}], 0x80089, &(0x7f0000000180)={[{@nobarrier='nobarrier'}], [{@dont_measure='dont_measure'}, {@obj_user={'obj_user', 0x3d, '+.[+$\x8eT*{'}}, {@measure='measure'}]}) 23:39:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(0xffffffffffffffff) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x3) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da03000000000001090224000100000000090400000903000000092100000001221f1a01011404c572220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200400000000000000057a9"], 0x0}, 0x0) 23:39:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x3000000000000}, 0x0) 23:39:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0) 23:39:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x100000000000000}, 0x0) 23:39:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x200000000000000}, 0x0) 23:39:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x300000000000000}, 0x0) 23:39:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x400000000000000}, 0x0) 23:39:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x4000000000000000}, 0x0) 23:39:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x8000000000000000}, 0x0) [ 553.718734][ T5139] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 553.888723][ T3256] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 553.958722][ T5139] usb 2-1: Using ep0 maxpacket: 16 [ 554.078798][ T5139] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 554.089065][ T5139] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 554.103614][ T5139] usb 2-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 554.112938][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.121846][ T5139] usb 2-1: config 0 descriptor?? [ 554.158801][ T3256] usb 3-1: device descriptor read/64, error 18 [ 554.159437][ T5139] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 23:39:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:39:08 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20000001) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000280)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x28}}, @dev={0xfe, 0x80, [], 0x25}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x5, 0x80, 0x500, 0x100000000, 0x40000108, r11}) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000700000000000000ffe000000007000000", @ANYRES32=r11, @ANYBLOB="00000e060a000200b7a9e1e56caa0000"], 0x28}, 0x1, 0x0, 0x0, 0x22000098}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0xb00, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4105c}, 0x48890) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 554.226025][ T22] kauditd_printk_skb: 4 callbacks suppressed [ 554.226031][ T22] audit: type=1326 audit(1601077148.743:907): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17659 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 554.254186][ T22] audit: type=1326 audit(1601077148.743:908): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17660 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 554.288164][ T22] audit: type=1326 audit(1601077148.803:909): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17750 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 554.350568][T17754] ================================================================== [ 554.358635][T17754] BUG: KASAN: use-after-free in __list_del_entry_valid+0x2b/0x100 [ 554.367384][T17754] Read of size 8 at addr ffff8881cd116400 by task syz-executor.0/17754 [ 554.375591][T17754] [ 554.377897][T17754] CPU: 1 PID: 17754 Comm: syz-executor.0 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 554.388006][T17754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.398029][T17754] Call Trace: [ 554.401293][T17754] dump_stack+0x1b0/0x21e [ 554.405596][T17754] ? up_read+0x10/0x10 [ 554.409654][T17754] ? show_regs_print_info+0x12/0x12 [ 554.414842][T17754] ? printk+0xc0/0x104 [ 554.418896][T17754] print_address_description+0x96/0x5d0 [ 554.424428][T17754] ? devkmsg_release+0x11c/0x11c [ 554.429357][T17754] ? mmap_region+0xe38/0x1bb0 [ 554.434094][T17754] ? __percpu_ref_switch_mode+0x340/0x5d0 [ 554.439781][T17754] __kasan_report+0x14b/0x1c0 [ 554.444443][T17754] ? _raw_spin_lock_irq+0x80/0x180 [ 554.449604][T17754] ? __list_del_entry_valid+0x2b/0x100 [ 554.455044][T17754] ? mutex_trylock+0xb0/0xb0 [ 554.459601][T17754] kasan_report+0x27/0x50 [ 554.463904][T17754] ? mutex_trylock+0xb0/0xb0 [ 554.468464][T17754] __list_del_entry_valid+0x2b/0x100 [ 554.473725][T17754] io_cancel_async_work+0x9b/0x280 [ 554.478914][T17754] io_ring_ctx_wait_and_kill+0xaf/0x1380 [ 554.484574][T17754] ? __get_user_pages+0x1420/0x1420 [ 554.489744][T17754] ? io_cancel_async_work+0x280/0x280 [ 554.495698][T17754] ? vm_mmap_pgoff+0x1db/0x230 [ 554.500433][T17754] io_uring_release+0x59/0x70 [ 554.505078][T17754] ? io_uring_flush+0x130/0x130 [ 554.509984][T17754] __fput+0x27d/0x6c0 [ 554.513954][T17754] task_work_run+0x176/0x1a0 [ 554.518530][T17754] prepare_exit_to_usermode+0x286/0x2e0 [ 554.524072][T17754] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 554.529947][T17754] RIP: 0033:0x45e1ca [ 554.533813][T17754] Code: 89 f5 41 54 49 89 fc 55 53 74 35 49 63 e8 48 63 da 4d 89 f9 49 89 e8 4d 63 d6 48 89 da 4c 89 ee 4c 89 e7 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4e 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 [ 554.553406][T17754] RSP: 002b:00007f688422abc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 554.558741][ T3256] usb 3-1: device descriptor read/64, error 18 [ 554.561816][T17754] RAX: 0000000020fff000 RBX: 0000000000000003 RCX: 000000000045e1ca [ 554.561823][T17754] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020fff000 [ 554.561829][T17754] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000010000000 [ 554.561834][T17754] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020fff000 [ 554.561847][T17754] R13: 0000000000200000 R14: 0000000000008011 R15: 0000000010000000 [ 554.607882][T17754] [ 554.610185][T17754] Allocated by task 17751: [ 554.614627][T17754] __kasan_kmalloc+0x117/0x1b0 [ 554.619367][T17754] kmem_cache_alloc_bulk+0x1cf/0x250 [ 554.624619][T17754] io_get_req+0x27f/0x850 [ 554.628916][T17754] io_submit_sqe+0x83/0xe90 [ 554.633396][T17754] __se_sys_io_uring_enter+0x8ce/0x1f80 [ 554.638909][T17754] do_syscall_64+0xcb/0x150 [ 554.643384][T17754] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 554.649244][T17754] [ 554.651553][T17754] Freed by task 371: [ 554.655435][T17754] __kasan_slab_free+0x168/0x220 [ 554.660342][T17754] slab_free_freelist_hook+0xd0/0x150 [ 554.665686][T17754] kmem_cache_free+0xac/0x5c0 [ 554.670338][T17754] io_poll_complete_work+0x725/0x930 [ 554.675595][T17754] process_one_work+0x777/0xf90 [ 554.678831][ T3256] usb usb3-port1: attempt power cycle [ 554.680417][T17754] worker_thread+0xa8f/0x1430 [ 554.680425][T17754] kthread+0x317/0x340 [ 554.680433][T17754] ret_from_fork+0x1f/0x30 [ 554.680441][T17754] [ 554.701179][T17754] The buggy address belongs to the object at ffff8881cd116300 [ 554.701179][T17754] which belongs to the cache io_kiocb of size 264 [ 554.714943][T17754] The buggy address is located 256 bytes inside of [ 554.714943][T17754] 264-byte region [ffff8881cd116300, ffff8881cd116408) [ 554.728180][T17754] The buggy address belongs to the page: [ 554.733812][T17754] page:ffffea0007344580 refcount:1 mapcount:0 mapping:ffff8881d9309180 index:0x0 compound_mapcount: 0 [ 554.744723][T17754] flags: 0x8000000000010200(slab|head) [ 554.750179][T17754] raw: 8000000000010200 ffffea0007150900 0000000400000004 ffff8881d9309180 [ 554.758737][T17754] raw: 0000000000000000 0000000080150015 00000001ffffffff 0000000000000000 [ 554.767316][T17754] page dumped because: kasan: bad access detected [ 554.773699][T17754] [ 554.776013][T17754] Memory state around the buggy address: [ 554.781681][T17754] ffff8881cd116300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 554.789723][T17754] ffff8881cd116380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 554.797753][T17754] >ffff8881cd116400: fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 554.805779][T17754] ^ [ 554.809822][T17754] ffff8881cd116480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 554.817875][T17754] ffff8881cd116500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 554.826338][T17754] ================================================================== [ 554.834385][T17754] Disabling lock debugging due to kernel taint [ 555.089303][ T22] audit: type=1326 audit(1601077149.613:910): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17750 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 555.408803][ T3256] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 555.578855][ T3256] usb 3-1: device descriptor read/8, error -61 [ 555.848842][ T3256] usb 3-1: device descriptor read/8, error -61 [ 556.118825][ T3256] usb 3-1: new low-speed USB device number 93 using dummy_hcd [ 556.298813][ T3256] usb 3-1: device descriptor read/8, error -61 23:39:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x7ff}, 0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={0xffffffffffffffff, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)=0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:39:10 executing program 1: r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) write$eventfd(r0, &(0x7f0000000080)=0x20000100000094, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f00000001c0)={'icmp\x00'}, &(0x7f0000000200)=0x1e) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80000, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000180)=0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x255, &(0x7f0000000000)=[{0x6100}]}, 0x10) 23:39:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x9effffff00000000}, 0x0) 23:39:10 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x200002, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = socket$packet(0x11, 0x2, 0x300) dup(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) 23:39:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'vlan0\x00', @multicast}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) 23:39:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e501db98b17f1e002844d755301892beeff0057dd3d6f8bad07e7371c2716f55012ba9a050ca5756a3816c4b85bc0bee3db6793030f769e5cf0c1556323f42eea27993ef196be093605e54024c2cddfa53188aa40dcb9ad73edef055b4a527c10c1ff24cd64febe4b05025c9094d2e277514ad112ebde646e5152450c66432b2473ca4445ed1609c7c53c08604004e869c5c5ca12293c8c3e09baff37832dfaf1e4bb8bb4620fc577975ad83551a48df1cb28f78e89e6523c600513730b2e9665ae21d468d32a1096e7ef83c27c7086d47f3e04c0d1581992599aec874c021344a0c3d2decb3f99434eb62b2b7ae5173a5b41bfc14350a008e4f2a4a3ae15e411659f", @ANYRES16=0x0], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x6, 0x1000, 0x4a7, 0xfff, 0x0, 0x20000000000003, 0x10000, 0x4}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) [ 556.430470][ T22] audit: type=1326 audit(1601077150.953:911): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17759 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 556.453642][ T5139] usb 2-1: USB disconnect, device number 24 23:39:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0xec0b000000000000}, 0x0) [ 556.482463][ T22] audit: type=1326 audit(1601077151.003:912): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17766 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 556.518904][ T3256] usb 3-1: device descriptor read/8, error -71 23:39:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0xefffffff00000000}, 0x0) 23:39:11 executing program 0: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x4777, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="d7ccd19b1b3f409ab5b18dc641d84da3a7967e89fdf22d0bcd00784c6ea60f6d67f94f788d081a09c001b2126d492c874d06c83596efe68609428eeead368a75937aeef678467c63790db7337551d6af63b9607232fbcaf95c7be51b7b84a19cb59d2210a5efcf4b23b0ebc0a4356a856c581a353d94477072ee16b97c34425f03570609c85c91f2c0ba1bbaf3bc8b9bbddc03467b215bf24dca570421db3db14ead1e2ceec62c55d7fb5887ed59030e0f936b4244edbc6f8c22426cb520a8396b0a6f0406d4fe5dac7c8961a8aa4516708fb050c32404e5bfac6897d12e3d5b32", 0xe1, 0x100}], 0x1300000, &(0x7f0000000340)={[{@dots='dots'}, {@fat=@dos1xfloppy='dos1xfloppy'}, {@fat=@debug='debug'}, {@nodots='nodots'}], [{@measure='measure'}, {@measure='measure'}]}) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000380)='/dev/usb/hiddev#\x00', 0x100000001, 0x121000) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f00000003c0)) 23:39:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0xf0ffffff00000000}, 0x0) 23:39:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0xffffff7f00000000}, 0x0) 23:39:11 executing program 1: r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) write$eventfd(r0, &(0x7f0000000080)=0x20000100000094, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f00000001c0)={'icmp\x00'}, &(0x7f0000000200)=0x1e) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80000, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000180)=0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x255, &(0x7f0000000000)=[{0x6100}]}, 0x10) [ 556.638923][ T3256] usb usb3-port1: unable to enumerate USB device [ 556.998791][ T3256] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 557.231110][ T22] audit: type=1326 audit(1601077151.753:913): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17759 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 557.238818][ T3256] usb 3-1: Using ep0 maxpacket: 16 23:39:11 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) dup(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 23:39:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x13, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003f40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x7, @private2, 0x200}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000100)="11eb5bb9c17f235502b195d96491411f72512cbb92ec0ee8715501475a6a22b1c6d5b0a99ce083a8df37d100943c74fce06a1959b9714a307a6a275747c8158bd930894da05f5541744485eb161d4e88289bcf4cf912f26f03a4b21027e684ca0e3ae116ffa0c8f34968033bc7a521a45bed40e985d6667e5ed93fa55da7fb7cec5578c9aa4e1f7c8b0673e3c819787fe7c119d76135099cfa2f36b1c165455154", 0xa1}, {&(0x7f0000000300)="9bfd2bf6a2ef54b1301d40a5b8b219e24208101eafa886155c47c022d992645aefde8d231608db96831e905ae910665416ecfea0083f2de885a7aa3b721cfe5701ca0ac9a6f9a4c145477360addcd3d843a24e349c1b6c237dda41aac8892cb455ec0b6e48c99f8bbc3a7b33f2e341d819da163ed3c02099af551a7ce34985508fd660bb71b814f9c999618f2c04486d9e720f9d13b5e8fef4df78600ad305e1b80e42aa002404159068a951a4bca0feb391f03b6c822057284c7558fd004ab87790da023feb2cf90dec5ee93517d72127b3ad709edf12b1519ee564bedb9fd5f3770e0052dd59c107f7", 0xea}, {&(0x7f0000000200)="a111b0f985f050e0e542e1f43c44ae9d3bf5645896bf3db323a18d0d328781c00a316f004390f3f91f5f09185bea82c18a1e8228dab0dc5fa9e190ae88b738d24967c4b74b0bccf8b4a6e0b5c875cf1a6b50f4cb7271c1e9573b3092459fc03e", 0x60}, {&(0x7f0000000400)="314f159d316485c87059966cbd2e00792498623c2ce14f96f51847deae6c3dbecb23e82cb349d9d08a4fc5c4c0caa768253101a21f7618e9609169315d560e79411b4ab6f88c4e5a1910fd41c929c72ae58f14972cdd2672a99ed5800399992b928e223135738786542c09ba3d0075627ed6e7f3ec025b84e86a6be8aa2abbdca586794b5840338664309e25bee5c07401ab5c8ca86fe0a6edc69ac6cf", 0x9d}], 0x4, &(0x7f00000004c0)=[@hoplimit={{0x14}}, @hopopts={{0x120, 0x29, 0x36, {0x0, 0x21, [], [@generic={0x5, 0xc7, "649465d059ff43c46c496d87ee764a05c3e16633c97391fc96bca1203110c837d95cfc5a26af3a0045700173a4598f580fb69f4f3f37aa05a48e4b121213d7c797d36c976ffa2e485d913443b129d40f6cf12009fc96d896f317092dcb9b5c45b78c8615b5e5b0fe4f1ed711428235b711e5b3f7acdeb53b207012c62c9c5946ff358fdf5cee1aa9aed4271ebe5524d109e24d5e9d900bcddc4e5bad10444ce5f0b09d4e93a18c70aa1d9d010bcc33c3b1b29901a34dea499e0a304eee189dfc6bfad5fe43c1d0"}, @generic={0x1, 0x3d, "9515bbb30d9c0ada02e64e322f7a4bb30641eb046c3afc20c6bfca2907525fe710497042916ed4866627a499d4b9ec6789e9a8ae6f8fc509336e276451"}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x2b, 0x1, [], [@jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x1000}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x2c, 0x8, [], [@calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0x5, [0x7ff, 0x0, 0x8, 0xfffffffffffffffd, 0x2]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x8b, 0xfe01, [0xff]}}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x21, 0x6, 0x2, 0x5, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @private2={0xfc, 0x2, [], 0x1}, @empty]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80}}], 0x248}}, {{&(0x7f0000000740)={0xa, 0x4e24, 0x919, @dev={0xfe, 0x80, [], 0x35}, 0x1}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000880)="930230f6bc94c8f70a47ee191200c9b0b5d3a58893869421c545e6fec13e373531ccf6fd9c443443a540a8bb66fdbc3a7852c7530c1d0789f4f03237eefca8754d680417735ce62a3e32ff4b7b8aba1e1b35f6e3f212eeab27dab366792bf475364239a463115d45eb2870ca84f99ca585e294c47254f73a176e08c4f3414ae1459a159b725f5b6e9756671da6c3f1f92522b1ea73b9afdb4e35510c595e68bc0d4d6f4dcf6faa26531f750fe74dacf329c35c21a82bb416f81e7b88f64605ad3b31123f681115a3c14de1b3c97543c8b60a057c503a3a7c597ceaea553f3ef9ac4b4b69c36dc17bf85dd644be4032d7", 0xf0}, {&(0x7f0000000980)="14c97a24e3154d48943ba511769d69ea4a6feb871705eb60995b5a3f55a38aae0eacf8b5390ad1738a735900ff3f942f94a33c356948e4043c2392481982906987086a21829e5251ec074ced6cd7c6e668df7dc82426f5fcfe6bb2ad5a0f4e0c5101bcfaf15b8d2117e978f5b4f31a79b7b4520e8c2a006af0fb8fe6a883d24c13a74a609075667323d1c6e4a112bfdfb58b311f20416acdefd43cb18c72b46f9c019a04f4425043cfa68f6ca069b5e8bb1de1e0142c37d8950de3924f70c94715c26b3116ba791ef56034925c01890412f3235d62aabb6760452f1cbf1ce9ddd7d407d037b299b5fd1c582030d816603c827aa0811c548881ed7de6ba0ffad8f6a7a054590390fa1e2ed003c26b89814a3223d1222c8e7b57c08ce4e7632d98fb1aa2ac61555f257dcc6d71fa1ce831e3a59a061f11e150eb329999b4daae2a55f98e01508e63ce3502094ea93700814db7d37640009731b046f16341a13c85d3a0d9aba2423d1b9f2cdca2415d4045c9e6cab4053849a73418b328aa8899a30c3e4873d4d211ff2b2f33c418747acfe858dc8e06d11d21da208d005cf3d913ebd292bb131173a2bceb7cb2fff576cbe3f8e8c44327429cbe5961ad88d55f99dacd0c8d08efe09d51c00159c891aa6eab271fb11d3f2b44a3eefdd9183e964e7666ea5d75d0b27f5aa28f106259328450372f75678d1ab65bc10e5246538900d4f53255efb66e60e2e05639f4087f47a76652c7a77978a0e16bdac42d86c7ab2975e639ca41a816729dc6391f19756d000c30456eae3713eef30f3527042164811de0165f9cfccca62a709245002618edc2ba09f9ae64a88c7635e12a1452144bc7dbb68c8e482c6d56576800ab8c87f5bf28f0b08da3d777fa6c3146cc0b4ff2c19b04bed7acd41a8d19b2683fb82e464974b2bbb8d64d22be784c46a8de01d753795e2d59220a29260dfad723da42f3689bb7e1080d720e6e99d7c24e01c8cda0f2d920d0495a86364f16a1a24f174d2ddc99b70859d199e0a7a9dc9bddbe16f588b02683b24f1569d39eecd81d4bd9a8850a9fe09ea25497541c8216c9ce86ea3b24b7b8d0e95dea2eaebbfb3c441eb6d54782268e036dc573a5aabd4f95091397698221986e0015fe36c5b68ada9e4cd348e485a8095ca1ba855508f64d4107dc67f80763352f4614400e3e655de6fcbd6132b3247dba23112ba23fd81cc08e17130c8aa882d65d7af84cb4959c466e98fee31a0aa0edf93a3fcb2e4387a1986b89460fb221a3e46c674d2efdeef48cc7bb16a0279806b326cd8d166a0d27d44ac4401f870c502b0c2184472a2bb9abc9ba5ec48bd3501b894f9b14a9aee3cc133dfa1f24ad9fea11da350294cbae9854f8126a777e72395ff99e3a455c5696a0b06bc9088400cca5bf1d566ac616f2838e8144a58c6fa26a3092c6eb091d6c63981b13825a8ed1495411f9e2acc76eaf7e4cfa548f42bf98b6841b9416122b43dd3662c3e0c46f1e3b36552cfabc29c4b4a8ad653c5dfdef16755c04014088a94919970502abecb11cdf888d4684717d43f512bdbff73d985a94983f39531951ac17a014065e105d0533228680821255be8d852a89eeb121a77e145fbe122da8623f8b317c3eb3335958419b4493d2ded9387e23a015b31a946c6f937e0cd4a32657126ccdc377466ccdb32f57d0e1de4472a4c71482850c3736d75b76f295625648a7f1f829a8848afa279b9e6d0bbdc4cb9ef69ba70b1c58a64051868c499c12cfbe3e910b8cebc73957698ca5cb485b6941162a427818ec68fc5842199050b0e7a44ecfb27d9c41546c08de72b92445a1288591c927a90ba313c1af4cba48cf4f9654dbc691d53959d332e143efc4fbe68f335cc16c18fbd7131342f045d9ea385afc7aa6309bdbef92a7deaac6924829b739599900083433a8561331c09634fcc6fb1ba925eb5456d0dd5def2860d3d2a5a482ccd1b507c383b790931a7bd8df25f42b9eede8e75d09eefd0be6768de8e7958d1df83889624f8fdd4c7039d6e09bb352e729f328d3d1cd7a7ac935d6da7b9026f1d5a2e8aba6cff0e6e7f5ebcf1a279e71fc7d59eccc73a2e58b9345705247def263e850b83eaf3c36d99403d47dc09a8014736a87a32f45135404b3b3f6574545325978dea4649061f08f887af04d66554f9a9d33932711eee34aaf7573779feb3ccd3855fd1aebab86f61e65c6d6247bdb01de0d37de7048a1b25a39c614c614268b73749e308978e49f2fc4ee143428662c365241da2a3574d45b2edde76c1d10612da1db9cc54a0e5fae5cac12c82be3541a2e15551d82e03fe32e51563ddb42dc6f6febe7f08933069636968669f1ea0deb5cef7d74b957ce2486456151288d045d43620b2e86b42f9024edea407acf141811ef96144fc9b42fe89e5aab90808488c1120b2093cc764d77ef82ef374edbd50b322652033ca68271faa4164f93a4fb6d4c8a86d08eeed2d1a1ce859226bd40925482420f14b3cc82f71ed54d9ba8dfda1a223b1ab77b5cc61fc41abc8b9e272c0efb35724035022d4205d0ec6287d1748f091aa650399256676ba0486fc6c860f19c88f7684ac1bd5c627d309833a81f5fbe6bbae5b4811978572052ffedc5cbdd2bd554c0400971da1856ad41529432aa84f4ba8525bcff7dac9aeaba52b59aaaba0e7e6e5400d7e13ddbefd4eff72ef0c5a2d7cab08e79822c1ccfb07c3543a2cc2bdf4d2eed266af347d509e6e4ff70326eba9342077e83bf0882c469f3f0ea41b5f418fd58475e478341830348c16803c7d4e6feb0f5e4ba04d17cd4db589e70fb49f3a048f21b714ec0ec569e59c2c2b96c7f1486a865254203387a02055b4a966c471bd6ba662feb7ecaaf1f902132cfb248eb9368364a05ff41c37bb1a7949d044f8d56d85646b5f05e744acdfcfee21c672b041d54e077cc69bb739de832eea53a96aae49e465e0330c07f060f2ed2618b6c1e3f7df6e292a402ba4c4ea5d1c0bf98677871bd9d53ac78cc692f6e8cc6e448bbfabf416ea648de86285abc72d804359a2f761d97d6b8f3a8b3b4956594748dbac7ad06b8b6f1b3fd2f0d600d438a25ea548e4940435b24f1d4732c440f7e7cf2db3a9e1bad01403826d99a67e28eee71e465efdd18e4f20bce8caf8bc454c659055a267367969d315d168685a814c92c014b229547adec44c6408ef92f508ad6df79856239ced8b38ed6377b113ba39acb0ab74ed00895be64108ad04a9bd740c4a4a7a9bb93e3c10f263581986678d332c3e1da8583c9858ebdc8286a7a9c04455a457e03cb347f7cf44e011ec3ea9dffc16a300a706529c0286e027c930d674bb324d884c17152d389523de71458ee155e52447d3a83dcd56e89bf883c1b5e873d8b7928f2d4a4da6564e0cdfce775fdff8f2dd12d195315317562c312968b029b1665079c8053994f3d8dcdde364b16292b3751ea99d25ced791af2f70c3f62acae9c403020efcfff4980054f87eecdf4914c5dff9673e2aace55ed074bedef91ffda976a998cb5889b2efa18549d3b42351648568ecc2122b95e5058a243af2d68f146c3e22fe6936b6d465d3db140d2c05a6c20b2d723c144f10f5442211d8b123a133afb86a8a5c57fe948f41f9f0b28e82dbedba42913ed0a6896166db7edc8b2565a5f2223feb9121c0ac38f20b6a9066a596a8d413eaeba803249930325046e6885726a840bbeda4a986ac7ce7a9fa2a234e0017406580486d2a8c1246064518641b635846a0c8d0f1692f3b5cef27bd89c3ca2a0d8478147f80104cade765c978da1b73b47201b9d59bc7b2a48f91a95c81c8763c7219e1939fd76c80d0cbddb53a5e52001bf39d98a5f84b020490149b8fc8a1f3d8c10644d0a82ad0f6337943c86becd9e1da65922a27a640c29d6928a124c414bee2fa388d31c4b42fbec07fb53bdd9822ffde87643f7d1f96dab4c6ab4b7a313d87becc35018ecdfed6d5bac58d8b1be292680fdc626870d682b1e0545ca1358318ad3b0a2f979c67f8f7fcbf038bbaf98961e31c318b9da830f5f439e2562b2f8e862a6e1a208a518e3d4420cf96479bac0f623cd159dbb74d576fe43d77a0edb097621d82e6b76245a3586f5f027aa88f16bfea6db85053ae9d550c745f24d927608ac1bd74dfb4cf5470c1bb896efda6645329600c6350f81cdfdb661dfa94a9cafaac1082e4e207edb061bef11b50409b3712713d41b528af85f2f7a54a9c14875f5e9e6c13c9a72f31e5dd7ef841e590c4cc308813d3c3465ae8f9bef4301e0b9f0aea4167b71307213deab9b7ed8bb0ed9d3e94576794cd6a0cdafaa529c21f4f4b5a6a48096addc6d5a83b6ec93ddcb74b11e0d7d2b4b6df2203b838013162ecbebb5b887e80095b891fa53ae862ca2284dde3cafdcc7e50d97125a740de9efc175734522cbc9d3427285b8ce203e459f582174c8008503871a30baa96ac9143845eaa0b0f5870f7284ec7d408ec4526b40773a935f5119112a1f0315b5f087826b5ec84db791443472ea43ab5fae81cc3b3c8df702b74fb19a5df745aa5a988ec59926cba3780740683b6c9e84943419718f83cdf0c3b2bc078ff66aba8adc5b334c73386dd8ccaf95b4e46037d05e07e89eb5b4b7730e30c0feb0370665520d508de7f899d4c20666cae30f5e9f39766bd8ec0f9506f88e9a4272bd1cf1f50b509cf75233559f7b86eeb16a8b76ac547965c6ed82e066d9f779c142fcf82bd6f65e2d70b5c087f3b0eddaa0276c39d0454fc1e15d7b8ba804d24541dd2ab475449820379be3c239ca70958a71f55f32b8476db3cd183487f9159890490c0196b8440162365c325b60cceee3cfeac7db5fccf809db138c543d9845afca6175f465ba3db922de1c0949e5ce9cabd3224b9a25384c5d17d4e25ad59d3b94c255636e44e2a6dad6f95caafed6b205a07e65a463549aa01a764b18e34a48a8fbb50d48dd05a7282649a8ac2e3a7e5b26888337b851ae22432893f4880177d7407c7ade369a01aaff802ae857ed8a9d4b98e80e17c2f67a67d1786746742dac0d49fa7e9a260c8e710d137eacf877c7d0631d1e24b849dc2bb5cff6da9872b2016b963b3aa1615f76fec4b0e7fddf9c0944eede789b6aa51a6f168fa030db80e05de7745ccb3312d08e6954a0511dfdec04885f8a0f9a83718490e875c231ac66ea14d85cc70361aa868e0bb0022c6d1581b2b4c6c22dada34e5296e34c01fafeb5b2901754e00a71cb1e4f9046ccdb6d89c2d2a1691a8008ebb31ca45adc859a9497bee0470415305a476812a4bd7ad962ad85e30de22bdd5e148c65a7417b1ad9c45045134a21af8dfb379523d80dfa66f684827064f9413873c7b044ef6ee3a8f4e20006094066789b7e37346125590cb8b66c2d9cb8f9b01a88e09c98e536da5d8234e2666e81a83ab4d4e4f9c1e126bb8a016817cf412e14a37416b201a42c9669925d2621a9da4b84da3bd04311095435f0ef59d46ea6bec2611e0345ee16957cc671353e6721d5e172b08f7bba56c9c0616c61390b5e29acc65e6d0ef2f7542556dc42f023ed0b7e9adf4ea859ba637a9f4a49e3c8837d07cdf3ff2598eb7711e23678ed3497fe407184736e33cefb0252f9b15b9519d0f094d224f690e3cd5bf2d904fe4341b524b12fcbd2e5cd4dde2b93151d49b8535d01a2eec97c6f1bf28645433e5e39bee07a48772b42f53890484eef5dad04ca937d45ee3982efccb0c23c9342164b8159964cefc3902e43191b4c63211449d2711b73c8247b", 0x1000}], 0x2, &(0x7f0000001980)=[@hopopts={{0x20, 0x29, 0x36, {0x2b, 0x0, [], [@pad1, @enc_lim={0x4, 0x1, 0x48}]}}}, @hopopts_2292={{0x150, 0x29, 0x36, {0x3b, 0x26, [], [@hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0xfffffe01}, @generic={0x0, 0xdd, "f371d98927634fba407f694a3cced386521310c08be88acff1995854998f16b0ebbb4eddd724ac3fbdeb9d10e0881b569f5c9cc4b5d464e76efad2461fddd5a43e253e710f1678dda0b96da5f3e3e5170d924f14eff69e1c01aac0e18c346405ac8f086a87caf0ac4cdc925d4b269e714d0553cc1b4357cd850b81eaff6d7041b2d010fa1843576a8d5c7682d32a2be6e3db32bcf9a6a9a62ff5bfa3d7c3045f2d10034a2e24e1b4b3f2e78db0d0a12c7c4376e1f58550e529596029cb535bda49205cc245c16d1adcbc9c2eca6726b373d28a5728ec23601f61947b5c"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x5, 0x93, [0xffffffff, 0x100, 0xffff, 0x101, 0x7fff]}}, @pad1]}}}, @hopopts={{0x20, 0x29, 0x36, {0x2b, 0x0, [], [@pad1, @ra={0x5, 0x2, 0x8}]}}}, @dstopts={{0x148, 0x29, 0x37, {0x67, 0x25, [], [@jumbo={0xc2, 0x4, 0x8}, @generic={0x20, 0xb3, "48d0f1293b59588fa52c6d454a945c004f603ec2803fd6ccff3d3b005bc252eb573fc96a0878a8d503c26248f177be21e750a3586824e68d76d61866a04e958208f27d1fff039061e28b44b3322d984e00c8bfaa95dba4c32fbe16e013ab34cfafc1c2084e3d9a34ad7d80638d52c50b348c34ed207445f3f012bd4321df90f75e53a9eec23f06182ca1277f8bf04126a0eb7644dcf8d7499685ef7afabce82dff3fb04090a1b4471eda00dee3ee19557f45b7"}, @enc_lim={0x4, 0x1, 0x3f}, @ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0x81}, @generic={0x1, 0x5d, "0838cc51b14bb83512c37f9d37d875819b2f10ab76271e362d9d37b91df8e647d87790f283c59724afb9e5952fb457d57acf0cf3299876da67c0df5ce8648880015580348da7fc312712271139056893788d43d72c3119cf805d3d5724"}, @ra={0x5, 0x2, 0x20}, @pad1]}}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x2e, 0x8, [], [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @ipv4={[], [], @rand_addr=0x64010101}}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x2b}}, @pad1, @enc_lim={0x4, 0x1, 0x6}]}}}, @hoplimit_2292={{0x14}}, @rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0x0, 0x80, 0x0, [@private2]}}}, @hopopts={{0x38, 0x29, 0x36, {0x73, 0x4, [], [@enc_lim={0x4, 0x1, 0x48}, @ra={0x5, 0x2, 0x80}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0xfffc, [0xff]}}, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x5e, 0x3, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x40}, @hao={0xc9, 0x10, @private0}]}}}], 0x3e8}}, {{&(0x7f00000007c0)={0xa, 0x4e21, 0xb9, @mcast1, 0x200}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000001d80)="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", 0x1000}, {&(0x7f0000002d80)="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", 0x1000}], 0x2, &(0x7f0000003d80)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2c}}}, @rthdrdstopts={{0x168, 0x29, 0x37, {0x1, 0x29, [], [@pad1, @calipso={0x7, 0x58, {0xaef1a3e13d37cb40, 0x14, 0x1, 0x3, [0x10001, 0x600000, 0xed, 0x44, 0x2, 0xffff, 0xfff0000000000000, 0x8, 0x4, 0x400]}}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x9, 0xc2, "f20901b14776b824514fb85deeda48ef2904fe2db78a6a1ca764180649b62fcf4ac0621e9b51cd18a5b35838fc8fd0a0d3d7cd89633cebb9f140a48821ee255e84d1e73982ff5150570eab8e1b6ada2a2dcc0dcb2953380b4d096825376786c18ea36497c84d35ef129b9dc7493117b149faf82893ee61ae09b9da63d1c70436dcf04db2417865eecfcc0fdbbc64098670ed2779a7f26ca9c2aba3aa8d673f855b0efce2b59885aed6dcb7d202178d9a08f39cdc1ea45aefef7876dba206a57579e2"}, @hao={0xc9, 0x10, @ipv4={[], [], @loopback}}, @ra={0x5, 0x2, 0x1ff}, @generic={0x7, 0xa, "ae81200b62d36ca5204e"}, @ra={0x5, 0x2, 0x5}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x32}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x2b, 0x1, [], [@ra={0x5, 0x2, 0xef3}, @jumbo={0xc2, 0x4, 0x6}]}}}], 0x1c0}}], 0x3, 0x8040844) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 23:39:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x10, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_set$uid(0x0, 0x0, 0x0) socket$inet(0x2, 0xdf422efc40559841, 0x4) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}, 0xea0000}], 0x1, 0x100, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 23:39:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0xffffffff00000000}, 0x0) [ 557.273039][ T22] audit: type=1326 audit(1601077151.793:914): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17766 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 557.313647][ T22] audit: type=1326 audit(1601077151.833:915): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17828 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 557.368886][ T3256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.379801][ T3256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.389974][ T3256] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 557.403289][ T3256] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 557.412886][ T3256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.421872][ T3256] usb 3-1: config 0 descriptor?? [ 557.899752][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x4 [ 557.907172][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 557.915906][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 557.924035][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 557.931714][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 557.939120][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 557.946477][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 557.953995][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 557.961423][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 557.968828][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 557.976190][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 557.983575][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 557.990976][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 557.998327][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 558.005708][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 558.013130][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 558.020529][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 558.027911][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 558.035568][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 558.043018][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 558.050416][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 558.057925][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 558.065308][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 558.072741][ T3256] hid-generic 0003:045E:03DA.0044: unknown main item tag 0x0 [ 558.081053][ T3256] hid-generic 0003:045E:03DA.0044: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 558.100089][ T3256] usb 3-1: USB disconnect, device number 94 [ 558.113406][ T22] audit: type=1326 audit(1601077152.633:916): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17828 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 558.868884][ T5139] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 559.108870][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 559.228958][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.239887][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.251194][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 559.264449][ T5139] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 559.273774][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.282801][ T5139] usb 3-1: config 0 descriptor?? 23:39:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2001024}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xb4, 0x453, 0x200, 0x70bd25, 0x25dfdbfc, "5d9dbd2bbed43eddf9289f6660599c8c83fb6933c79c0a72e01db29a631c62f7c9c797dbfbc52b11175d02bb6b2f8478d4e11f6c694d9f6d4a05282dbda3c1127fb3c1d51a2fdcc839fa7c7253fb91f5728ff557e7a1515cee4a0d3920b7e6c7517af5bcf556c15284c05d4e44ac536a6bc8e5b115c0d2121fb5209d21fe8d581f364f0dded7122beacd65c1fff0fc9bed1802bcbefc7fe1870f47b6594c309def", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 23:39:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x2}, 0x0) 23:39:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c107f10548f3b4af2d611a090606010105000000000e0000050000030900030c73797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862bdfdb82a595e93f05071467d8f286ebbc9da38e5041ca8b844d755301892beeff0057dd3d6f8bad382a84ecbc"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 23:39:14 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x4e23, 0x8, @remote, 0x2}}, 0x1, 0x5, [{{0xa, 0x4e21, 0xeb, @local, 0x3}}, {{0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, [], 0x1}, 0x4}}, {{0xa, 0x4e24, 0xe1, @private0, 0x6e1}}, {{0xa, 0x4e22, 0x8, @private0, 0x9f}}, {{0xa, 0x4e20, 0xea, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}]}, 0x310) 23:39:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x10, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_set$uid(0x0, 0x0, 0x0) socket$inet(0x2, 0xdf422efc40559841, 0x4) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}, 0xea0000}], 0x1, 0x100, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 23:39:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xa80, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000080)) 23:39:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x3}, 0x0) 23:39:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x4}, 0x0) [ 559.485102][ T22] audit: type=1326 audit(1601077154.003:917): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17859 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 559.509790][ T22] audit: type=1326 audit(1601077154.003:918): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17863 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:39:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x300}, 0x0) 23:39:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0xbec}, 0x0) 23:39:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x4000}, 0x0) 23:39:14 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x5) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 559.578930][ T5139] usbhid 3-1:0.0: can't add hid device: -71 [ 559.584946][ T5139] usbhid: probe of 3-1:0.0 failed with error -71 [ 559.601876][ T5139] usb 3-1: USB disconnect, device number 95 [ 559.968876][ T5139] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 560.218895][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 560.282369][ T22] audit: type=1326 audit(1601077154.803:919): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17859 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 560.305041][ T22] audit: type=1326 audit(1601077154.823:920): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17863 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 560.338989][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.350083][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.363961][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 560.376752][ T5139] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 560.385823][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.394933][ T5139] usb 3-1: config 0 descriptor?? [ 560.879862][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x4 [ 560.887423][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 560.896244][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 560.903908][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 560.911346][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 560.918706][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 560.926105][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 560.933509][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 560.940927][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 560.948294][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 560.955719][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 560.963254][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 560.970652][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 560.980780][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 560.988159][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 560.995562][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 561.003379][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 561.010788][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 561.018154][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 561.025576][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 561.033005][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 561.040415][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 561.047787][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 561.055280][ T5139] hid-generic 0003:045E:03DA.0045: unknown main item tag 0x0 [ 561.063474][ T5139] hid-generic 0003:045E:03DA.0045: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.2-1/input0 [ 561.081033][ T5139] usb 3-1: USB disconnect, device number 96 [ 561.848957][ T5139] usb 3-1: new high-speed USB device number 97 using dummy_hcd 23:39:16 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x7ff}, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={r0, r1, 0xffffffffffffffff}, 0xc) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009050603"], 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x4010, r2, 0xfff) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000004278816650ba57a9"], 0x0}, 0x0) 23:39:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0xec0b}, 0x0) 23:39:16 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r1, 0x0, 0x28, &(0x7f0000000100)="f8be51fd71dca6ddfe6485640bb679412737c7862da475bb75faf7f0587f4268dd3875b2f0af5e979a8002540864d89e58734ef68d9b9e79843b0227127ea45457aeb0055b57c4362353db5f8859d12fce704760935d6a2a8b4dfef2539befe94409", 0x62) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x8ec0, 0x0) waitid$P_PIDFD(0x3, r4, &(0x7f00000002c0), 0x8, &(0x7f0000000340)) r6 = dup2(r3, r2) write$FUSE_POLL(r6, &(0x7f0000000180)={0x18}, 0xffa0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @private=0xa010101}, 0x9, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000180)='veth0_to_hsr\x00', 0x3, 0x7ff, 0x9}) 23:39:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000d860c1fff10548f3b4af2d611a09062e4e7a0c028fce315974c2f01100d0437d1d16a6caceb706010105000000000e00000573797a31000000020900020073c5d95d0fef3a0d5182451e18b4ccfd8544323d4514645c88c47b862b01000100000000000714686e6f5967d8f286ebbc9d"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) r0 = getpid() sched_setattr(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, ':+(]}}@+\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8041) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r1, 0x0, 0x20000000000000d8) 23:39:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10000001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x6}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$ppp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x25dfdbfb, {}, [@NL80211_ATTR_BSSID={0x0, 0xf5, @random="0365ce179948"}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x0, 0x3, "52497f6ef5062f7f7b524512ae6739f1f393c0e68d2d2b95f58adaf3c670e932ebd0aba5f892a1bdf966df2050d1476f71b7de609aa543afc9c71a617e5f819b575a4f2e7c7d5aaa295dd6c8ff8629164b5c"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY]}, 0x28}}, 0x8000) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0xf044cf802f24b4c8}, 0x1) 23:39:16 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x0, 0xe}, [@NDA_LLADDR={0xa, 0x2, @random="b7a9e1e56caa"}]}, 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r13, 0x0, 0xe}, [@NDA_LLADDR={0xa, 0x2, @random="b7a9e1e56caa"}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x20004840) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 23:39:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x30000}, 0x0) [ 561.955088][ T22] audit: type=1326 audit(1601077156.473:921): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17943 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 561.977997][ T22] audit: type=1326 audit(1601077156.473:922): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17941 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 23:39:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x34000}, 0x0) 23:39:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x400300}, 0x0) 23:39:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x1000000}, 0x0) [ 562.009705][T17958] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 23:39:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x2000000}, 0x0) 23:39:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x3000000}, 0x0) [ 562.228930][ T3256] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 562.309026][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 562.429035][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 562.440018][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 562.450387][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 562.464671][ T5139] usb 3-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 562.474210][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.483276][ T5139] usb 3-1: config 0 descriptor?? [ 562.519540][ T5139] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 562.609024][ T3256] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.752744][ T22] audit: type=1326 audit(1601077157.273:923): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17943 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 562.774991][ T22] audit: type=1326 audit(1601077157.293:924): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17941 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 562.779118][ T3256] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 562.806822][T18009] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 562.810944][ T3256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.810956][ T3256] usb 2-1: Product: syz [ 562.832738][ T3256] usb 2-1: Manufacturer: syz [ 562.837356][ T3256] usb 2-1: SerialNumber: syz [ 563.969051][ T3256] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 563.975734][ T3256] cdc_ncm 2-1:1.0: dwNtbInMaxSize=2047 is too small. Using 2048 [ 563.984850][ T3256] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 564.219087][ T3256] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 564.230277][ T3256] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 564.242280][ T3256] usb 2-1: USB disconnect, device number 25 [ 564.248360][ T3256] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM