, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:33:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1a86cf, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 336.547317][ T9236] usb 4-1: new high-speed USB device number 7 using dummy_hcd 00:33:27 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r2, 0xee1cdf9908b9fa9, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001380)={0x1c8, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "2078cd8d2ecbf71ad2bdf3dbc82a117889afe1d1feac0069456d9361b028e2999593d3287bdafa41e7d19b7d72c95567aca667e595fcf99377d91e370ddebd47fd3c60379057fa27865f09a9d44ae1ad570558be6e8f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "01bce3825a5c17e539a67c5283acd10fdcd760c4d7d396b632055889712e9c590ef0d13783d23322c90697ee5c176b2495c5933f3caf61bd1631903fc9b4345347fcce67ee105d02663148256f621c2abcb68fe247f2ad7c22b64d1348ab8f2be9d9ff0acd82937e1fa26a916979f1118515bde65c37949841f908ac8c6ec8459c87d255d833a70020761ce09e785e4b1e71a9b6c5666635f52087"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1f}, @ETHTOOL_A_BITSET_VALUE={0x70, 0x4, "02fe4dc1ad5ee2b59e53e54e543a5ad61cf9eab3c545c4a5c71577ce2d6ed07483f2993f7213f8bb1707837f4053578ddea3f08542c116b33e40c7938396dc7e5f7558e1d8e8a70043246a5b71dfddbd84747a94dddbb1f98605809db79eccb510f3aeaa69c1f1d874e9cefa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 336.796973][ T8460] usb 3-1: new high-speed USB device number 32 using dummy_hcd 00:33:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 336.907665][ T9236] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 336.920129][ T9236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.931556][ T9236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.943599][ T9236] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 336.958332][ T9236] usb 4-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.40 [ 336.971498][ T9236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.996783][ T9236] usb 4-1: config 0 descriptor?? 00:33:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0), 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r6 = syz_open_dev$midi(&(0x7f00000000c0), 0x7, 0x10c00) r7 = dup2(r3, r6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x14, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x84) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="df09f3de07812b61f54e70d9fec2d86266595a677b5d26230172c31fed62b3013a3497ec16eec045f82e8e1dbd7f47599bac8320012fc1be0004000000000000afef63ded5496ebaa8620820563179825d7ac88a5a5a6000"/98, @ANYRESOCT], 0xe01dd0e) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(r2, 0x0, r8, 0x0, 0x30005, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000240)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r7, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32, @ANYBLOB="00020000", @ANYRESOCT, @ANYBLOB="04dc0001", @ANYRES32=r1, @ANYBLOB], 0x48}}, 0x0) 00:33:28 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r1, 0xee1cdf9908b9fa9, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001380)={0x1c8, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "2078cd8d2ecbf71ad2bdf3dbc82a117889afe1d1feac0069456d9361b028e2999593d3287bdafa41e7d19b7d72c95567aca667e595fcf99377d91e370ddebd47fd3c60379057fa27865f09a9d44ae1ad570558be6e8f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "01bce3825a5c17e539a67c5283acd10fdcd760c4d7d396b632055889712e9c590ef0d13783d23322c90697ee5c176b2495c5933f3caf61bd1631903fc9b4345347fcce67ee105d02663148256f621c2abcb68fe247f2ad7c22b64d1348ab8f2be9d9ff0acd82937e1fa26a916979f1118515bde65c37949841f908ac8c6ec8459c87d255d833a70020761ce09e785e4b1e71a9b6c5666635f52087"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1f}, @ETHTOOL_A_BITSET_VALUE={0x70, 0x4, "02fe4dc1ad5ee2b59e53e54e543a5ad61cf9eab3c545c4a5c71577ce2d6ed07483f2993f7213f8bb1707837f4053578ddea3f08542c116b33e40c7938396dc7e5f7558e1d8e8a70043246a5b71dfddbd84747a94dddbb1f98605809db79eccb510f3aeaa69c1f1d874e9cefa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 337.307251][ T35] audit: type=1326 audit(1621038808.629:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10866 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 337.401448][ T8460] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 337.411601][ T8460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.420598][ T8460] usb 3-1: Product: syz [ 337.424917][ T8460] usb 3-1: Manufacturer: syz [ 337.429801][ T8460] usb 3-1: SerialNumber: syz [ 337.474020][ T9236] wacom 0003:056A:0101.0001: item fetching failed at offset 0/1 [ 337.526821][ T9236] wacom 0003:056A:0101.0001: parse failed [ 337.573004][ T9236] wacom: probe of 0003:056A:0101.0001 failed with error -22 [ 337.621374][ T8460] usb 3-1: config 0 descriptor?? 00:33:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 337.675711][ T8460] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 337.687126][T10850] udc-core: couldn't find an available UDC or it's busy [ 337.694523][T10850] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 337.754176][ T9236] usb 4-1: USB disconnect, device number 7 00:33:29 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r1, 0xee1cdf9908b9fa9, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001380)={0x1c8, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "2078cd8d2ecbf71ad2bdf3dbc82a117889afe1d1feac0069456d9361b028e2999593d3287bdafa41e7d19b7d72c95567aca667e595fcf99377d91e370ddebd47fd3c60379057fa27865f09a9d44ae1ad570558be6e8f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "01bce3825a5c17e539a67c5283acd10fdcd760c4d7d396b632055889712e9c590ef0d13783d23322c90697ee5c176b2495c5933f3caf61bd1631903fc9b4345347fcce67ee105d02663148256f621c2abcb68fe247f2ad7c22b64d1348ab8f2be9d9ff0acd82937e1fa26a916979f1118515bde65c37949841f908ac8c6ec8459c87d255d833a70020761ce09e785e4b1e71a9b6c5666635f52087"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1f}, @ETHTOOL_A_BITSET_VALUE={0x70, 0x4, "02fe4dc1ad5ee2b59e53e54e543a5ad61cf9eab3c545c4a5c71577ce2d6ed07483f2993f7213f8bb1707837f4053578ddea3f08542c116b33e40c7938396dc7e5f7558e1d8e8a70043246a5b71dfddbd84747a94dddbb1f98605809db79eccb510f3aeaa69c1f1d874e9cefa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 338.344257][T10890] udc-core: couldn't find an available UDC or it's busy [ 338.352270][T10890] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 338.526802][ T9236] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 338.632308][ T35] audit: type=1326 audit(1621038809.959:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10891 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:33:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0), 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r6 = syz_open_dev$midi(&(0x7f00000000c0), 0x7, 0x10c00) r7 = dup2(r3, r6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x14, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x84) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="df09f3de07812b61f54e70d9fec2d86266595a677b5d26230172c31fed62b3013a3497ec16eec045f82e8e1dbd7f47599bac8320012fc1be0004000000000000afef63ded5496ebaa8620820563179825d7ac88a5a5a6000"/98, @ANYRESOCT], 0xe01dd0e) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(r2, 0x0, r8, 0x0, 0x30005, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000240)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r7, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32, @ANYBLOB="00020000", @ANYRESOCT, @ANYBLOB="04dc0001", @ANYRES32=r1, @ANYBLOB], 0x48}}, 0x0) [ 338.888037][ T9236] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 338.899459][ T9236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.910930][ T9236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.921054][ T9236] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 338.935433][ T9236] usb 4-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.40 [ 338.945006][ T9236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.172285][ T9236] usb 4-1: config 0 descriptor?? [ 339.338388][ T9236] usb 4-1: can't set config #0, error -71 [ 339.390809][ T9236] usb 4-1: USB disconnect, device number 8 [ 339.951665][ T2056] usb 3-1: USB disconnect, device number 32 [ 339.958715][ T2056] keyspan 3-1:0.0: device disconnected 00:33:31 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r1, 0xee1cdf9908b9fa9, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001380)={0x1c8, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "2078cd8d2ecbf71ad2bdf3dbc82a117889afe1d1feac0069456d9361b028e2999593d3287bdafa41e7d19b7d72c95567aca667e595fcf99377d91e370ddebd47fd3c60379057fa27865f09a9d44ae1ad570558be6e8f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "01bce3825a5c17e539a67c5283acd10fdcd760c4d7d396b632055889712e9c590ef0d13783d23322c90697ee5c176b2495c5933f3caf61bd1631903fc9b4345347fcce67ee105d02663148256f621c2abcb68fe247f2ad7c22b64d1348ab8f2be9d9ff0acd82937e1fa26a916979f1118515bde65c37949841f908ac8c6ec8459c87d255d833a70020761ce09e785e4b1e71a9b6c5666635f52087"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1f}, @ETHTOOL_A_BITSET_VALUE={0x70, 0x4, "02fe4dc1ad5ee2b59e53e54e543a5ad61cf9eab3c545c4a5c71577ce2d6ed07483f2993f7213f8bb1707837f4053578ddea3f08542c116b33e40c7938396dc7e5f7558e1d8e8a70043246a5b71dfddbd84747a94dddbb1f98605809db79eccb510f3aeaa69c1f1d874e9cefa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:33:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:33:31 executing program 3: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r2, 0xee1cdf9908b9fa9, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001380)={0x1c8, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "2078cd8d2ecbf71ad2bdf3dbc82a117889afe1d1feac0069456d9361b028e2999593d3287bdafa41e7d19b7d72c95567aca667e595fcf99377d91e370ddebd47fd3c60379057fa27865f09a9d44ae1ad570558be6e8f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "01bce3825a5c17e539a67c5283acd10fdcd760c4d7d396b632055889712e9c590ef0d13783d23322c90697ee5c176b2495c5933f3caf61bd1631903fc9b4345347fcce67ee105d02663148256f621c2abcb68fe247f2ad7c22b64d1348ab8f2be9d9ff0acd82937e1fa26a916979f1118515bde65c37949841f908ac8c6ec8459c87d255d833a70020761ce09e785e4b1e71a9b6c5666635f52087"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1f}, @ETHTOOL_A_BITSET_VALUE={0x70, 0x4, "02fe4dc1ad5ee2b59e53e54e543a5ad61cf9eab3c545c4a5c71577ce2d6ed07483f2993f7213f8bb1707837f4053578ddea3f08542c116b33e40c7938396dc7e5f7558e1d8e8a70043246a5b71dfddbd84747a94dddbb1f98605809db79eccb510f3aeaa69c1f1d874e9cefa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:33:31 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) r0 = syz_usb_connect$uac1(0x6, 0xcd, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x1f, 0x30, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xc0e, 0x2, 0x81, "791d77a5e5d6223e4f"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x3, 0x0, 0x4e, "8f", '1'}, @as_header={0x7, 0x24, 0x1, 0xff, 0x81}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x401, 0x8000, 0x7f, "b8251959de1a"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3f, 0x2, 0x0, 0x1f, '6'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0xff, 0x0, {0x7, 0x25, 0x1, 0x1, 0x5, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x4, 0x0, 0x5, "91f682", "aa541a"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x5, 0x6, "ff8a2263"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xff, 0x9, 0x8c, {0x7, 0x25, 0x1, 0x83, 0x26, 0x400}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x9, 0x0, 0x0, 0x20, 0x4}, 0x3e, &(0x7f0000000140)={0x5, 0xf, 0x3e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x0, 0xfffa}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x0, 0xf6, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "41dd184667da181467c1333c6d281b7e"}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "2f279e76e1e5b2b36dd1865a9c5e17fd"}]}, 0x4, [{0x14, &(0x7f0000000180)=@string={0x14, 0x3, "c99bfc02f278894c63fbe97531abc2d27be6"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x100c}}]}) syz_usb_control_io(r0, &(0x7f0000000480)={0x18, &(0x7f0000000300)={0x0, 0xf, 0x5c, {0x5c, 0x4, "1d4b0fe6440c0db07432d65e15bba455b993ee8473e28f815a1c9d0343c6d6a640cb48f9552104d24a7e2f25eb431ebd1a66b11f88bf007729996aa5ad1580ebb6122cc10a3ded884a5e165aed44803b0b105ce3aad744cbb2a3"}}, &(0x7f0000000380)={0x0, 0x3, 0x26, @string={0x26, 0x3, "841daa73a8576bee8066163d19e6bb9e3930cf9099772d2e2b6ae40411f32085d19f6696"}}, &(0x7f00000003c0)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0xd9, 0x0, 0x3f, 0x40}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0x7f, 0x1, 'n\ft\'', '1Z!*'}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x80, 0x8, 0x40, 0x58, 0x9}}}, &(0x7f0000000980)={0x44, &(0x7f00000004c0)={0x0, 0xc, 0xee, "7906e9c3b9b3ce9e8c2b9f0373c5806bd172ed11b2ebd3ae24cfd1950ac080938bf48b7d4d9bd79885892ec7fc71904adccddd797f88135238e43b0fdd738a9391112beace41204684db9b17e1a4d6cebdedda33d40d6ad905ddab7c4b061257c8e1c448f74211f619ba4cafc933b9447f34ff069f8efd235bd594833777a3048750856a72d627b3272a861a20f9a42381ceb6359bca9c29eef1aea744c1ca938636ca0c893278936a53c038cd917c60003ae81e6f096fdd358a0243e2ff95782f8e92ed1c0f15547e817d3573c1986ddf15ce0e8859e6f441b3829895070eddc91d08944f6c1735c639fe0ed6ad"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xcc}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x5e0, 0x40, [0x11fff]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0xb, 0x2, "6bc3"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x8000}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000800)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, &(0x7f0000000840)={0x40, 0x19, 0x2, "39e9"}, &(0x7f0000000880)={0x40, 0x1a, 0x2}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000000900)={0x40, 0x1e, 0x1}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x7f}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000b00)={0xc, &(0x7f0000000a00)={0x40, 0x23, 0xa7, {0xa7, 0x3, "9c308f20e1ee747b4b489442d477142b050480349f859a790da38cb3e3858cf5f0c44916d392154a30274cdea6eef5aeab61dda69c7fd33653e028bf7c5c518cd0f8f71506ae99894490f4048eabad06f4fd8959277d3d3008ca3417af11b9f58b8ec147132a8c75da2b40c1263d8a5de302c0d87f54a20c23ceb2138df1e220e255c1fc7aff3d5dc0a5128cb9f2dda671e6d17ebe68ce90bf68e8566421348d060eebfcc5"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c40)={0x10, &(0x7f0000000b40)={0x20, 0x3f, 0x41, "790bdc677105ae5112884c946641e7a07d4991dff479ac53c4dd415bea0474495b8aa955994dc16e2c24263b7b5dbf32932a58c0d40de01586e3555c62e547d3c1"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xa2}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x20}}) [ 340.393119][ T35] audit: type=1326 audit(1621038811.719:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10913 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:33:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'vlan0\x00', @ifru_flags}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) 00:33:32 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:33:32 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r2, 0xee1cdf9908b9fa9, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001380)={0x1c8, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "2078cd8d2ecbf71ad2bdf3dbc82a117889afe1d1feac0069456d9361b028e2999593d3287bdafa41e7d19b7d72c95567aca667e595fcf99377d91e370ddebd47fd3c60379057fa27865f09a9d44ae1ad570558be6e8f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "01bce3825a5c17e539a67c5283acd10fdcd760c4d7d396b632055889712e9c590ef0d13783d23322c90697ee5c176b2495c5933f3caf61bd1631903fc9b4345347fcce67ee105d02663148256f621c2abcb68fe247f2ad7c22b64d1348ab8f2be9d9ff0acd82937e1fa26a916979f1118515bde65c37949841f908ac8c6ec8459c87d255d833a70020761ce09e785e4b1e71a9b6c5666635f52087"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1f}, @ETHTOOL_A_BITSET_VALUE={0x70, 0x4, "02fe4dc1ad5ee2b59e53e54e543a5ad61cf9eab3c545c4a5c71577ce2d6ed07483f2993f7213f8bb1707837f4053578ddea3f08542c116b33e40c7938396dc7e5f7558e1d8e8a70043246a5b71dfddbd84747a94dddbb1f98605809db79eccb510f3aeaa69c1f1d874e9cefa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 340.860058][ T2056] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 341.139528][ T35] audit: type=1326 audit(1621038812.469:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10924 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:33:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0), 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r6 = syz_open_dev$midi(&(0x7f00000000c0), 0x7, 0x10c00) r7 = dup2(r3, r6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x14, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x84) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="df09f3de07812b61f54e70d9fec2d86266595a677b5d26230172c31fed62b3013a3497ec16eec045f82e8e1dbd7f47599bac8320012fc1be0004000000000000afef63ded5496ebaa8620820563179825d7ac88a5a5a6000"/98, @ANYRESOCT], 0xe01dd0e) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(r2, 0x0, r8, 0x0, 0x30005, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000240)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r7, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32, @ANYBLOB="00020000", @ANYRESOCT, @ANYBLOB="04dc0001", @ANYRES32=r1, @ANYBLOB], 0x48}}, 0x0) [ 341.397976][ T2056] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 341.409626][ T2056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.418210][ T2056] usb 3-1: Product: syz [ 341.422638][ T2056] usb 3-1: Manufacturer: syz [ 341.427766][ T2056] usb 3-1: SerialNumber: syz 00:33:32 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 341.650605][ T2056] usb 3-1: config 0 descriptor?? [ 341.714406][ T2056] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:33:33 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x8, 0x80000000) write(r1, &(0x7f0000000240)="ad57a6a446ff973322774132497f4f5d748194f755e7212db8aa8744adbe14e65e3dd958326de2cad75b19b3b026e13f4be773201e48c591858530321b83ad5309c76198a8f3700aa76deb6897c70f7c8ef22a5f3eee938f6751696cff87bd8b92b7d2f94722ba8902f802e749ded3d3fcc7fa38416998974e935e4001e0813a6a8cda1b944d2a5ee3053518a2a7f0b3db13bf7d95f7786341473b5e7a3ed0faaa2207e26a037b8e5cf6afe3501f2b6b03bc1526d8c08261d64b6ed8c6fc801ce9de78d650a6f28074921dc507a3d186431c5fd6754c751581f9b14f1369eb113648afbae16b0def5109dc47e57236", 0xef) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getnetconf={0x4c, 0x52, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_PROXY_NEIGH={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7658032a}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4005850}, 0x804) syz_mount_image$udf(&(0x7f0000001680), &(0x7f00000016c0)='./file1\x00', 0x0, 0x2, &(0x7f0000003c00)=[{0x0, 0x0, 0x101}, {&(0x7f0000001780)="b1", 0x1}], 0x0, &(0x7f0000003d00)) [ 342.076862][ T35] audit: type=1326 audit(1621038813.399:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10942 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 342.380511][T10949] loop3: detected capacity change from 0 to 1 [ 342.439393][T10949] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 342.472775][ T2056] usb 3-1: USB disconnect, device number 33 [ 342.480091][ T2056] keyspan 3-1:0.0: device disconnected 00:33:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:33:33 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r2, 0xee1cdf9908b9fa9, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001380)={0x1c8, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "2078cd8d2ecbf71ad2bdf3dbc82a117889afe1d1feac0069456d9361b028e2999593d3287bdafa41e7d19b7d72c95567aca667e595fcf99377d91e370ddebd47fd3c60379057fa27865f09a9d44ae1ad570558be6e8f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "01bce3825a5c17e539a67c5283acd10fdcd760c4d7d396b632055889712e9c590ef0d13783d23322c90697ee5c176b2495c5933f3caf61bd1631903fc9b4345347fcce67ee105d02663148256f621c2abcb68fe247f2ad7c22b64d1348ab8f2be9d9ff0acd82937e1fa26a916979f1118515bde65c37949841f908ac8c6ec8459c87d255d833a70020761ce09e785e4b1e71a9b6c5666635f52087"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1f}, @ETHTOOL_A_BITSET_VALUE={0x70, 0x4, "02fe4dc1ad5ee2b59e53e54e543a5ad61cf9eab3c545c4a5c71577ce2d6ed07483f2993f7213f8bb1707837f4053578ddea3f08542c116b33e40c7938396dc7e5f7558e1d8e8a70043246a5b71dfddbd84747a94dddbb1f98605809db79eccb510f3aeaa69c1f1d874e9cefa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 342.583875][T10949] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 0: 0xb1 != 0x00 [ 342.595231][T10949] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 342.605619][T10949] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 0: 0xb1 != 0x00 [ 342.616949][T10949] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 0: 0xb1 != 0x00 [ 342.627489][T10949] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 342.636271][T10949] UDF-fs: Scanning with blocksize 512 failed [ 342.896982][ T2056] usb 3-1: new high-speed USB device number 34 using dummy_hcd 00:33:34 executing program 4: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000000)=0x7, 0x4) syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x266, 0x0, &(0x7f0000001840), 0x0, &(0x7f0000001b00)) [ 343.251748][T10949] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 343.262289][T10949] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 343.274695][T10949] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 343.282857][T10949] UDF-fs: Scanning with blocksize 1024 failed 00:33:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x10, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 343.594022][T10949] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 343.604465][T10949] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 343.614409][T10949] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 343.622538][T10949] UDF-fs: Scanning with blocksize 2048 failed 00:33:35 executing program 2: syz_usb_connect(0x0, 0x6d, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a4400001020301090244000101000025090400f9020206002008240600006b35080524007f000d240f0103000000000102000406241a0600020905820200adf8eb2132f513be2000fc901f"], &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xfe, 0x55, 0x6, 0x20, 0x1}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x1, 0xb9dc}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x405}}]}) [ 343.737598][ T2056] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 343.750375][ T2056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.758977][ T2056] usb 3-1: Product: syz [ 343.763484][ T2056] usb 3-1: Manufacturer: syz 00:33:35 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r2, 0xee1cdf9908b9fa9, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001380)={0x1c8, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "2078cd8d2ecbf71ad2bdf3dbc82a117889afe1d1feac0069456d9361b028e2999593d3287bdafa41e7d19b7d72c95567aca667e595fcf99377d91e370ddebd47fd3c60379057fa27865f09a9d44ae1ad570558be6e8f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "01bce3825a5c17e539a67c5283acd10fdcd760c4d7d396b632055889712e9c590ef0d13783d23322c90697ee5c176b2495c5933f3caf61bd1631903fc9b4345347fcce67ee105d02663148256f621c2abcb68fe247f2ad7c22b64d1348ab8f2be9d9ff0acd82937e1fa26a916979f1118515bde65c37949841f908ac8c6ec8459c87d255d833a70020761ce09e785e4b1e71a9b6c5666635f52087"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1f}, @ETHTOOL_A_BITSET_VALUE={0x70, 0x4, "02fe4dc1ad5ee2b59e53e54e543a5ad61cf9eab3c545c4a5c71577ce2d6ed07483f2993f7213f8bb1707837f4053578ddea3f08542c116b33e40c7938396dc7e5f7558e1d8e8a70043246a5b71dfddbd84747a94dddbb1f98605809db79eccb510f3aeaa69c1f1d874e9cefa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 343.849194][T10971] loop4: detected capacity change from 0 to 1 [ 343.869225][ T2056] usb 3-1: config 0 descriptor?? [ 343.897081][T10949] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 343.901776][T10971] hfs: can't find a HFS filesystem on dev loop4 [ 343.909578][T10949] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 343.914191][ T2056] usb 3-1: can't set config #0, error -71 [ 343.923827][T10949] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 343.935011][ T2056] usb 3-1: USB disconnect, device number 34 [ 343.942229][T10949] UDF-fs: Scanning with blocksize 4096 failed [ 343.954608][T10949] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) 00:33:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6400000010000104000000000000114939780100", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010004000000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x6000, 0x1b) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) [ 344.253552][ T35] audit: type=1326 audit(1621038815.579:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10980 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:33:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:33:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfff, 0x44}}}}}, 0x28}}, 0x0) [ 344.587659][ T8828] usb 3-1: new high-speed USB device number 35 using dummy_hcd 00:33:36 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001380)={0x1c8, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "2078cd8d2ecbf71ad2bdf3dbc82a117889afe1d1feac0069456d9361b028e2999593d3287bdafa41e7d19b7d72c95567aca667e595fcf99377d91e370ddebd47fd3c60379057fa27865f09a9d44ae1ad570558be6e8f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "01bce3825a5c17e539a67c5283acd10fdcd760c4d7d396b632055889712e9c590ef0d13783d23322c90697ee5c176b2495c5933f3caf61bd1631903fc9b4345347fcce67ee105d02663148256f621c2abcb68fe247f2ad7c22b64d1348ab8f2be9d9ff0acd82937e1fa26a916979f1118515bde65c37949841f908ac8c6ec8459c87d255d833a70020761ce09e785e4b1e71a9b6c5666635f52087"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1f}, @ETHTOOL_A_BITSET_VALUE={0x70, 0x4, "02fe4dc1ad5ee2b59e53e54e543a5ad61cf9eab3c545c4a5c71577ce2d6ed07483f2993f7213f8bb1707837f4053578ddea3f08542c116b33e40c7938396dc7e5f7558e1d8e8a70043246a5b71dfddbd84747a94dddbb1f98605809db79eccb510f3aeaa69c1f1d874e9cefa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 344.682493][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 344.703304][T10994] device vlan2 entered promiscuous mode [ 344.709183][T10994] device batadv0 entered promiscuous mode [ 344.810891][T10994] device batadv0 left promiscuous mode [ 344.987430][ T8828] usb 3-1: unable to get BOS descriptor or descriptor too short [ 344.995871][ T8828] usb 3-1: too many configurations: 154, using maximum allowed: 8 [ 345.117352][ T8828] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 345.125673][ T8828] usb 3-1: can't read configurations, error -71 00:33:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x248, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:33:37 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:33:37 executing program 3: syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000008c0)="eb52904e5446532020202000100100000000000000f8000000000000000000000000000080008000ff0100000000000003f8000000000000ff0000000000000001000000018aaadd472341352cee5d7e84", 0x51}, {0x0, 0x0, 0xc}], 0x0, &(0x7f0000099000)) chdir(&(0x7f00000001c0)='./file0\x00') syz_mount_image$efs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x10000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1fb96731dbbcd5667704085eac32e5771a4d1be1a479383a701d0bfc2b87c8cdf6d239e19b877f8c338e24cdb58f301f1ced59be79181c03a08d863962c4c04f1a4bcdb75a429899e7", 0x49, 0x4}, {&(0x7f0000000240)="386b36d728eab3959c3d652492400def0459bf1fbea53cf2963e75365a1eff23f0ab34e2a34a760e8de888e2cd7f5a270156fa87ccb6b0a93ebb7c39eeb8ac4a69cf20cb301cc53c2420ca320334fb7b09c838f1c14fe316e4185ee66aa91914ed2cc33ab0744ecd9a097cb3ed3b86bb5bf8c4ee5de8e6814be61fc4c4083437c6139cf8dd6f3d963244d0919d82f3edeee261feee89d03da75c42b7bdabf64ca110af7156b9c0ccc44dcfb25367de531b6740a5a603618e97b9425ac7b37192abf1b8b05588a5999da599", 0xcb, 0x60d}], 0x200400, &(0x7f0000000340)={[{'^'}, {'{(/)/\xe6'}, {'[%@:'}, {'ntfs\x00'}, {'ntfs\x00'}, {'/+@#]Y'}], [{@subj_role={'subj_role', 0x3d, 'ntfs\x00'}}, {@subj_user={'subj_user', 0x3d, '-/'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@dont_hash}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) 00:33:37 executing program 4: syz_mount_image$xfs(&(0x7f00000020c0), &(0x7f0000002100)='./file0\x00', 0x7fff, 0x0, &(0x7f0000002180), 0x0, &(0x7f0000002340)={[{@logdev={'logdev', 0x3d, './file0/file0'}}]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xad) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0xc0684113, &(0x7f0000000040)) setfsuid(r3) r5 = geteuid() ioctl$FS_IOC_GETVERSION(r1, 0x80047601, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100), 0x40008, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}, {@access_user}, {@version_9p2000}, {@version_u}, {@nodevmap}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'logdev'}}, {@subj_role={'subj_role', 0x3d, '/dev/snd/pcmC#D#p\x00'}}, {@euid_lt={'euid<', r3}}, {@smackfshat={'smackfshat', 0x3d, 'lor\x00\x00\b'}}, {@measure}, {@fowner_eq}]}}) [ 345.881980][ T8828] usb 3-1: new high-speed USB device number 36 using dummy_hcd 00:33:37 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 346.207615][T11021] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 346.297595][ T8828] usb 3-1: unable to get BOS descriptor or descriptor too short [ 346.306344][ T8828] usb 3-1: too many configurations: 154, using maximum allowed: 8 [ 346.322590][T11025] loop4: detected capacity change from 0 to 63 [ 346.403964][ T8828] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 346.412181][ T8828] usb 3-1: can't read configurations, error -71 [ 346.422178][ T8828] usb usb3-port1: attempt power cycle [ 346.457379][T11021] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 346.479107][T11025] XFS (loop4): Invalid device [./file0/file0], error=-2 [ 346.567826][T11025] loop4: detected capacity change from 0 to 63 [ 346.584716][T11025] XFS (loop4): Invalid device [./file0/file0], error=-2 00:33:38 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:33:38 executing program 2: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="83f849be5de8a82fed5e8b4e4105d1e4bf9edc2d9e3e4edea7e07fbbe97612cf041040a9592154c8eaa33b967d487e4079848f8066f52c3b0deefb513c514e0801701831a89805d8c6a46672eb4a519b430fc8e733f84a0bf41b00e66af1da8ed59e0975c18913e04c9bfb90891f00ad63e3908de7992e01bec0e4bb", 0x7c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) 00:33:38 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002e00bb0000f88a000000000000000000", @ANYRES32, @ANYBLOB="00000000000000000800f0000500010075"], 0x30}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xad) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, ')&)'}, {0x20, '$@#(/)%%'}, {0x20, '&T%{#\\{{b%%'}], 0xa, "d2748ff3783d41c70beb17086d5056223dfefc0f197b3c04ec7d820a517a12c3e4cb4f3ed709c9e5dbae83d27dc1bed7f885edf83bcc124c669542c87a308625578c85039a2dbfdd4ccd7e062f27b2a262184db1d9d4d2d64a468b8aaf404dd7d4d1199e2456868388487dcb3ae60f647cd0d58c7b91e4c559d33643277cfbe8caa182ed8a4b7a"}, 0xab) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(r1, 0x8, 0x80000000) sendmsg$nl_route_sched(r1, &(0x7f0000000b80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f00000001c0)=@newqdisc={0x970, 0x24, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x6}, {0x3, 0x7}, {0x10, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2322}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0x9, 0xad}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3d5}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xfe, '\x00', 0x80000000, 0x1, 0xffffffff, 0x2}}}}, @qdisc_kind_options=@q_tbf={{0x8}, {0x898, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x2, 0x6, 0x92a6, 0x6, 0x2}, {0x6, 0x2, 0x4b, 0x1195, 0x2, 0xa2}, 0x9, 0xbe, 0x14d9}}, @TCA_TBF_RTAB={0x404, 0x2, [0x2, 0xf0, 0x5, 0x5ea4, 0x7ff, 0x100, 0x9, 0x4, 0x9, 0x3ff, 0x200, 0x7, 0x7f, 0x7, 0x1, 0x6, 0x9, 0x9, 0x7fffffff, 0xffff7fff, 0xd83, 0x7, 0x9, 0xfffff001, 0x2, 0x6, 0x6f, 0x6, 0x0, 0xb67, 0xf1f, 0x6, 0x5, 0x101, 0x100, 0xa04, 0x80000000, 0x2, 0x0, 0x80000000, 0x5, 0x2, 0x3, 0xe0c, 0xcdc, 0x9bf0, 0xd85d, 0x3, 0x7f, 0x3, 0x0, 0x401, 0xaef8, 0x10001, 0xfca3, 0x800, 0xff, 0x5, 0x119, 0x5, 0x51dd206f, 0x80000001, 0x10000000, 0x3, 0x5, 0x4, 0x7, 0x200, 0xffff, 0x843, 0x1f, 0xff, 0x1, 0x80, 0xb7ad, 0x8, 0x7ff, 0x98df, 0xffffffff, 0x5, 0xff, 0xffffffff, 0x1, 0xffffffff, 0x6, 0x1f, 0x1f, 0xfff, 0x80000001, 0x4, 0x3, 0x0, 0x3, 0x10000, 0x9052, 0xffffffe0, 0x6, 0xffffffff, 0x1ff, 0x92, 0xab, 0x1000, 0x1000, 0x7fffffff, 0x101, 0xd153, 0x9a4, 0x8, 0x929, 0x4, 0x1, 0x10000, 0x226, 0x40, 0x101, 0x100, 0x401, 0x9, 0x0, 0xb, 0xffffff97, 0x1, 0x6c43, 0x1ff, 0x8, 0x0, 0x3, 0x9, 0xfba, 0x80, 0x0, 0x9, 0x3, 0xc3, 0x5, 0x0, 0x401, 0x1, 0x7ff, 0x2, 0x8000, 0x2, 0x6, 0x3ff, 0x3f, 0x1ff, 0x7, 0x7f, 0x8, 0x10001, 0x401, 0xffff, 0x1, 0x8, 0x1f, 0x17e4, 0xff, 0x7fffffff, 0x4, 0x7, 0x1, 0x2, 0x7fff, 0x0, 0x6, 0xff, 0xa15, 0x7, 0x1ff, 0x101, 0x80000001, 0x0, 0x22, 0x3, 0x4, 0x9, 0x9, 0x8, 0xfff, 0x1f, 0x81, 0x3, 0x8, 0x0, 0x2, 0x4, 0x2, 0x5, 0x4, 0xfffffff7, 0x4df5b976, 0x8, 0x6, 0x81, 0x3f, 0x4, 0x6, 0x1ff, 0x4, 0x0, 0x9, 0xffffff00, 0x2, 0x1, 0x0, 0x20b, 0x8001, 0x1000, 0x3, 0x80000000, 0x7ff, 0x7ead1a0f, 0x7ff, 0xe950, 0x9, 0x4, 0x4c08, 0x8, 0x7fffffff, 0x7, 0x8, 0x0, 0xffffffc0, 0x1, 0x1, 0x5, 0x0, 0x2, 0x3f, 0x8, 0x7, 0x10001, 0x3f, 0x4b, 0x3, 0x9, 0x4d, 0x5, 0x2, 0x5, 0x10000, 0x4, 0x35e81cb, 0x0, 0x200, 0x4, 0x1000, 0x7, 0x0, 0x1, 0x1, 0x8, 0x80000000, 0x8000, 0x5, 0x80]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x5, 0xb99b, 0x9, 0xf5d}, {0xfa, 0x2, 0x1, 0x0, 0x8, 0x5}, 0x9a2, 0x1, 0x1d2f}}, @TCA_TBF_RATE64={0xc, 0x4, 0xce2a391146a08ef8}, @TCA_TBF_RTAB={0x404, 0x2, [0x4, 0x101, 0xc1, 0x64f, 0xf44b, 0x5, 0x80000000, 0x3f, 0xc8ac, 0x80000001, 0x8001, 0x82d, 0x7, 0x0, 0x1, 0x0, 0x1, 0x20, 0x1ff, 0x1, 0xfffffff9, 0x38d, 0xb017, 0x4b, 0x3, 0x69, 0x1, 0x2, 0xffffffff, 0x3, 0xfffffffe, 0xff, 0x3ff, 0x9053, 0x8, 0x0, 0x7fff, 0x20, 0x3, 0x8eb4, 0x95fc, 0x2, 0x1000, 0x7f, 0x4, 0x7, 0x401, 0xfffffffc, 0x10001, 0x3f, 0x3f, 0xa30, 0x20, 0x7, 0x9, 0x8, 0xe4b8, 0x6, 0x9b, 0xffffffff, 0x1, 0x9a3, 0x400, 0x802, 0x2000000, 0x7ff, 0xb1b, 0x0, 0x31e3f05f, 0x8, 0x1, 0xfffffffc, 0x10001, 0x1, 0x7, 0xa1ad, 0x0, 0x4, 0x1ff, 0x80000001, 0x1ff, 0x800, 0x1, 0x4, 0xffffffff, 0x10000, 0x401, 0xad63, 0x53, 0x5306, 0x2, 0x80, 0xfffffa2e, 0x10000, 0x9, 0x4, 0x5, 0x0, 0x2, 0x5, 0xf608, 0x595408dc, 0x0, 0x800, 0x7944dea6, 0x1, 0xfff, 0x401, 0x2, 0x4, 0x0, 0x5, 0x3, 0x1, 0x9e58, 0x6, 0x8, 0x5, 0x9, 0x5, 0x7, 0x4, 0x4, 0x80, 0x7, 0x5, 0x3, 0x1ff, 0x8001, 0x1, 0xb, 0xe885, 0x7c, 0x0, 0x0, 0x16d0, 0x7fff, 0x5afdfd1d, 0x0, 0x1b4, 0x56a1, 0x8, 0x8, 0x35e, 0x4, 0xfb0c, 0xbc, 0x80, 0x0, 0x10000, 0x1, 0x7, 0x8, 0x4, 0x6, 0x80, 0x7fffffff, 0x80, 0x9a, 0xffff8000, 0x0, 0x10000, 0x1ff, 0x0, 0x1, 0x2, 0x4, 0x2, 0x9, 0x9, 0x7ff, 0x8, 0x5, 0x6, 0x1, 0x100, 0x20, 0x8, 0x43, 0x2, 0x9f7, 0x9e5, 0x2, 0x101, 0x200, 0x0, 0x7, 0x7, 0x401, 0x8001, 0x3b, 0x60c72e51, 0xffffffff, 0x30, 0x3ff, 0x2, 0x0, 0x4, 0x1, 0x10000, 0x4, 0xffff, 0x6ff, 0x3, 0x8, 0x8, 0x19a, 0x3, 0x3, 0x2ff703cf, 0xff, 0x100, 0x1, 0x4, 0x2d, 0x4e, 0x5, 0x0, 0x1, 0x1ff, 0x9e69, 0x5d96, 0x80000000, 0x40, 0x9, 0xc28d, 0x9, 0x553c, 0x3, 0xac, 0x80000001, 0x8, 0x80000001, 0x5, 0x5, 0x1, 0x9, 0x7, 0x8001, 0xff, 0x1, 0x0, 0x400, 0x0, 0xa0bb, 0xffffffe0, 0x5, 0x0, 0x7, 0x3, 0x1, 0x4, 0x599, 0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0x6, 0xffe1, 0x3, 0x5}, {0x0, 0x1, 0x6, 0x3bc, 0x0, 0x24000000}, 0x1, 0x6, 0x192b}}, @TCA_TBF_BURST={0x8, 0x6, 0xfffffff7}]}}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x2, 0x100, 0x5, 0x0, 0x0, 0x9, 0x4}}, {0xc, 0x2, [0x30, 0xfff, 0x0, 0x3]}}, {{0x1c, 0x1, {0x6, 0x4, 0x8000, 0x3, 0x1, 0x0, 0xffffffff, 0x5}}, {0xe, 0x2, [0xff, 0x12, 0x3, 0x1a, 0x7fff]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x20}]}, 0x970}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r2 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x30a, 0x0) 00:33:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x600, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:33:38 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:33:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x900, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 347.577385][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 347.667596][ T8828] usb 3-1: new high-speed USB device number 37 using dummy_hcd 00:33:39 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000016c0), 0x80000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002240)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/14, 0xe}, {&(0x7f0000002100)=""/4, 0x4}, {&(0x7f0000002140)=""/245, 0xf5}], 0x5, 0xffffffff, 0xe000000) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000002380)={{0x0, 0x7885, 0x8, 0x3fa, 0x0, 0x7, 0x10c, 0x8, 0x1f, 0x7fffffff, 0xfff, 0x3, 0xffffffffffff0000, 0xe449, 0x1ea}}) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(r4, 0x8, 0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2b, 0x6, 0x8}) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 347.730879][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 348.098898][ T8828] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 348.108283][ T8828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.116720][ T8828] usb 3-1: Product: syz [ 348.121035][ T8828] usb 3-1: Manufacturer: syz [ 348.125788][ T8828] usb 3-1: SerialNumber: syz 00:33:39 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x74, 0xbe, 0x89, 0x10, 0x1385, 0x5f02, 0xeb6c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x45, 0xf, 0x2}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000001080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xe0, 0x37, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x80, 0x9, 0x98}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x1e, 0x8}}]}}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x310, 0x20, 0x6, 0x1f, 0x10, 0x8b}, 0x39, &(0x7f0000001100)={0x5, 0xf, 0x39, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fffe01, 0xf000, 0xff16}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x40, 0x1, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x1f, 0x7a, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "1224b4549a1f736ecd41481b97215e7b"}]}, 0x4, [{0x102, &(0x7f0000001140)=@string={0x102, 0x3, "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"}}, {0x4b, &(0x7f0000001280)=@string={0x4b, 0x3, "6ae330a39e1429c4f5f0dda616a1bb68add5d3c1abfde1776144f266b3e3cf733e60cee7865715ec704fa5f1800abee3b267bd5d0cc49563068f7ed2cb86648a89575145dc99fbf26e"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x44c}}, {0x5c, &(0x7f0000001340)=@string={0x5c, 0x3, "0f1a7d90ad80125f80ce96462b8ff67ccf1680bd3f52c248cab359fad36b6307325cdb85f00f2c935958cd6c74554253193b84cf946d0f7ffee0ca93c8a22bd23adf2e00e99cb9988c866b44e72bc78d4aa2089b4750b91dc0b0"}}]}) syz_usb_control_io(r2, &(0x7f00000015c0)={0x18, &(0x7f0000001400)={0x8ab9f3731e819817, 0x8f6756f7595ee5fd, 0x9d, {0x9d, 0x31, "42acad3b3e524f46e978a9c47667b1bea69d410313a1761cb66f5f411c4c78caef7ff06bebe3b46a830d4664fceaf33057346f55cc731ae35105c6a81c837873699c724d99828f5996149ed591594fcc4312ee1dd31300858215c99ddbb9d3f994b68906172eef443c46d9ef50462ad3a4653443ee8005e0133281bfcec4aedede317f7956b6703179e9fd2503ec9f0dcf7f21abb6cd910ad87044"}}, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000001500)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "f6546da240b01d80421b43c8ab4ff924"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xb0, 0x4, 0xd0e5}]}}, &(0x7f0000001540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x1, 0xaa, "418237fb", "7708939a"}}, &(0x7f0000001580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb671}}}, &(0x7f0000001ac0)={0x44, &(0x7f0000001600)={0x0, 0x14, 0xe6, "28715b9bf8813afc4d6daf871b318728779a61d69a23cf5347508c34719737e8fd4855ec9ee014ae33e436184953266364e2a8adf25030feca1d245372a30dcd73dfe621d676648dcc4c746d333ed1017fc52304cb98bdbaaf4903f69f37a5d7ddde5a64f518ff63b829c2fd4ba0f83a63524e55e1bacfce612216cb73482f72fbf0166729c8c203ae9dc953da24e0e1a07e040699303039faf5eaa54e2ff297c799a483edca57c9dd31b5a8cb84198e60a992fe65b9f9ba84b2e6102848ccf816c72c34df3501a614e0c53c3f55980e666b171198b7b8fbf1a0c0d247f3599cece425fce712"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0xbe}, &(0x7f0000001740)={0x0, 0x8, 0x1}, &(0x7f0000001780)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000017c0)={0x20, 0x0, 0x8, {0x80, 0x8, [0xf0ff]}}, &(0x7f0000001800)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000001840)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000001880)={0x40, 0xb, 0x2, "4be7"}, &(0x7f00000018c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001900)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, &(0x7f0000001940)={0x40, 0x17, 0x6, @local}, &(0x7f0000001980)={0x40, 0x19, 0x2, "9b8c"}, &(0x7f00000019c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001a00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001a40)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000001a80)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io(r0, &(0x7f0000001f40)={0x18, &(0x7f0000001b40)={0x40, 0x11, 0x8a, {0x8a, 0x22, "3cdceac407feb978131f05ac660e9cf2fee4f4277f8914248efe09e6ad63b1f8c9ba98842d6072101e4f14b466b455eee01e55b69b043a39167623093e293d2a398473d8ed6ee84dd3f3137f819fac09b4d71aa9e295482ce6ad3254616208f415e331e22c5335e3630d5af0aa6099356b0e5f426ccb2e6c59bf997f83847d06c2741ab68fd37883"}}, &(0x7f0000001c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, &(0x7f0000001c40)={0x0, 0xf, 0x240, {0x5, 0xf, 0x240, 0x4, [@generic={0xf8, 0x10, 0xb, "957235a1f99ffbf9569a25cf00e8ec79b9745fdd2f1ec27286b8e1342795f56e833778f2dfd1f662e0df2d18a80c3c16ac14f034aa5055806af59036b08a4b6e94faba1dc656d118a250519925b3eadcb721d261b870e6d5ef003d13a1f1d1607a64ffcbd33a60826f62cc64f0f117c800e358a00a6299b690904e8dd1d472985f35f57b11f4dae8676c1732f98009da4793caa2a46713fafbbf59d029043e516a82442cb4ca6c7eb0dd69f5aed5678c876b57ddd80c8a604104f7bb08606ad9633b1ddb41854e4ad308b23e89c335c630ec4763859a5dfedebb3261d4c31bce87e6fb2548733dcbeb14dae35bfa2bd7fe58255378"}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x101, 0xf000, 0x9}, @generic={0x5a, 0x10, 0x4, "b929e219289dd5d09fb65c72c382ad8cb13920a30a47cde849fc6fda0f2088a2864bf4dadc42cab3982d918c497495a30b208b22142bde3b6d3a38bb3a48a4d8a31287b90382a3d40535ef71857e9c8fc2ba7cf1578616"}, @generic={0xdd, 0x10, 0x2, "0acd573abd5457578f4c20ad016099a280202daeb0b0cf0dd15bfbc24effbbe7a41ed00aa2a63ad75413857be64029cae0c7782961a54129b6b25541d1595103b601c1a6f8a8942d9ef1d746bbad7179c73c2bc8febac1d97ef869e783e9de774c2ec72f31c89ee7c4c53ad3f4c7379327b8773f5fc247d3391e9c9b62d99d621de940ca75e79634424e2261637cb66742b361aa8ad16bd5bd33c4969c0ea024f89a10e5e134e8b4b56c5efb6c4e62e9a67feb0b0e6d5e8038def9a606d25db7199b117b8d6e39b427a8e37bf35e8c274b16a10184ad55c6adf0"}]}}, &(0x7f0000001ec0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x4, 0xad, 0x16, "88a2f0fb", "131e9047"}}, &(0x7f0000001f00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xaf, 0x62, 0x3f, 0xe0, 0x40, 0x80, 0x101}}}, &(0x7f0000002400)={0x44, &(0x7f0000001f80)={0x60, 0xc, 0xb8, "5376a1a31ab120150bbad47319ce2697e9c05d2e814977511d472709578bb89ad32c5938b4ede4f877c4c6dfb845fa28b1d1782f578fdc785cdb318fe61148696400983ebc63c84f2c461c13fa5336784a4f22bcada6ff3a700716a946aa1db3ea3c4539f8519fd8215ceaf7014c4f6ea46aafe4a2b3c28007ac60c861b14ce0d1882c071eda1eef7a0f28a32d76f4d7879a11b37fcd36f33067bc141db304840c989677c40b41132200ef9bd162f3c88c59266c1ab88e35"}, &(0x7f0000002040)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002080)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000020c0)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000002100)={0x20, 0x0, 0x4, {0x800, 0xa523d90747efb66c}}, &(0x7f0000002140)={0x40, 0x7, 0x2, 0xff40}, &(0x7f0000002180)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000021c0)={0x40, 0xb, 0x2, "53d1"}, &(0x7f0000002200)={0x40, 0xf, 0x2, 0xff}, &(0x7f0000002240)={0x40, 0x13, 0x6}, &(0x7f0000002280)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000022c0)={0x40, 0x19, 0x2, "b6c1"}, &(0x7f0000002300)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000002340)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000002380)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000023c0)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, &(0x7f0000000880)={0x40, 0x23, 0x84, {0x84, 0x30, "7a2ad4819a4dbb24e5ba778f0fc2ae526bcccd28b74a60a02940daee6deb361eb2a8ecfccf152fadd40d8d6137bf515a43975126b828316fda90d43acd36abaad51d05e584b2960e43aedb4dbe7e261c3b45649547c2b4171d39b9deec1f8b1b167416ba79862a19cbb8faea445c1e3d50dcc99540b14c4cbe3ab617634db145b7da"}}, &(0x7f0000000940)={0x0, 0x3, 0x97, @string={0x97, 0x3, "6d85808d98fd30d046664783573cfc84ff7784963d033a65d24d8b06d4fda7bcbb8ed40319908f61c8fbaa7d7ed1c9849fbd67cf8ca39688876c2b3457302d54f7107edf6272c8e426f6db53bda7f9c19d0cce2004ebd8d9e63e6f88e4b53967181cd219db89eef250610549b83595c038b400180b5f32795334c51ccef1265eed0d08f9e72d2c1c2b70dd6bc5868e9fe91cba7bee"}}, &(0x7f0000000a00)={0x0, 0xf, 0x47, {0x5, 0xf, 0x47, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x0, 0xf0f, 0x8, [0xc000, 0xc000, 0xff0000, 0xc0, 0x3f00, 0xc0c0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x96, 0x81, 0x9}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3, 0xf, 0x1, [0xff00c0, 0xc000]}]}}, &(0x7f0000000a80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x8, 0x20, "915a0b86", "fd448e1c"}}, &(0x7f0000000ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xcc, 0x1, 0x0, 0x0, 0x8, 0xf000, 0x1}}}, &(0x7f0000001000)={0x44, &(0x7f0000000bc0)={0x20, 0x18, 0xa8, "ed6c378ab15e01c8a9c6164df2f890a4bd038fcef4f7760c0d6b541a803ec2016a5873232020c8da0d93249b9d5725a374b8e0608728f3194ccc0ae645337d9ca6adab8e47d0334a77f166df0eb67391fc0dfb675a2edbbf14875fc91db3811a05de238be1307603f9a5bd8187f86e9dba013713b9d0446722ba135744ce1efcd0a0e27733ea78f04c29b465f7a26fc0b27574c6c351873a41f0d8eafdf3c40ec84ede8edca33245"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x80, 0x10}}, &(0x7f0000000d40)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000d80)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000dc0)={0x40, 0xb, 0x2, "a821"}, &(0x7f0000000e00)={0x40, 0xf, 0x2}, &(0x7f0000000e40)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000e80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000ec0)={0x40, 0x19, 0x2, "ecdf"}, &(0x7f0000000f00)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000f40)={0x40, 0x1c, 0x1, 0x99}, &(0x7f0000000f80)={0x40, 0x1e, 0x1, 0xdc}, &(0x7f0000000fc0)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="14f5af00ddd750f3b7db7e48c350e0633ea38332e49c3813df7e9dbb162891e6b2a2a636bcbcb5e295f8a0bf2a1b"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000300)={0x18, &(0x7f0000000000)={0x20, 0x30, 0x3e, {0x3e, 0xe, "141e0890e1e2ca4777917800f75df5a1f9b08d12ac38e434ee1c21180ddbe86c3cff759aa84d7283b50517ec3da85611fe9f0baab367c8d955a3b8d5"}}, &(0x7f00000000c0)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "14e07d4625927757b3942ca84504434b88cd76629a5d953ce5a75d57585d70170fddc7873b1b2eca2acdf9f4d8f1018f26cf3ca1bbe6cbdcb5"}}, &(0x7f0000000140)={0x0, 0xf, 0x103, {0x5, 0xf, 0x103, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0x3, 0x4}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x3, 0xf, 0x5, [0xffc000, 0x6000, 0xc060, 0x0, 0xffc030]}, @generic={0xd7, 0x10, 0xb, "a4b4906e91c4d7633156c64a1ad8451d88ff750517060f522d22bf3d000a41463a18d808472185699666759f8ca97452689853c1cf95224416edc5f3d6ae3d91e0bf8ea2b147f3ef3ccdef57fa767a7a7001e28fa74fa0841b1af37999c5b388c5a1aef9b5dce6ebc04d150a790054d1f850347900a104532f38d5941bc61cf0056bf80ed9fc6a56c193dac1a87b8cef65d3289ee6bee338c2b45147702492f2ac3cce7efc03592e5dfa51a8c671ab88c523e51f20ce9ffd1ec37974e7aae67e47779735083d8df54bddd6b8198f5364abbcba52"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x59, 0x80, 0x8, 0x4, "eb51650a", "c852144e"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x2, 0xf7, 0x8, 0x1, 0xfffd, 0x800}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000340)={0x0, 0x1, 0xa9, "bb8f820e8a40a3c3f7b784be4e3931a3dd6562a2c4f967a0b471bc2353b476759b5d1ed30c5d57c0451f9c4a5f4b01f94ce16cb08bd7bf4ae464ae5caa8550d521f7686a5adc54176341f005f4512ef8d4c177e54af947926ea19bb5e042e50d7850b438121d78d4f6453969cc5b3c28342c3192075210d1f4f7bc82446d68b80f497a35aa8174f89aae8c6d0edb40763a3dc95e1df1cc2b23631a28cb952513d27de6cb25a4cff092"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x5, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x200, 0x80, [0xf000]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xf5}, &(0x7f0000000580)={0x40, 0xb, 0x2, "e21a"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000600)={0x40, 0x13, 0x6, @random="e80175bc7a7a"}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, '$p'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0xffff}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x20}}) 00:33:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2000, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 348.382204][ T8828] usb 3-1: config 0 descriptor?? [ 348.456371][ T8828] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:33:39 executing program 3: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x2, 0x0, @rand_addr=0x5}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)='b', 0xff07}], 0x1}, 0x4004044) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000001c0)=""/55, 0x37}, 0x40010020) r2 = open(&(0x7f0000000000)='./file0\x00', 0x10002, 0x0) sendmsg$kcm(r2, &(0x7f0000000300)={&(0x7f0000000440)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="5d6dd49c9ef741fa74", 0x9}, {&(0x7f0000002600)="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", 0x1000}, {&(0x7f0000003600)="815c54d02c6cb7fc1c321c81d39df1c0cc01490c000ebdc74d795d11d52da531a8a65bd35b010932eb251fb12b01eb9a5e8039f3afa75ca4b104a281c4b5693d046995cb32720c4b69ba049c2a6383beaff3002f765e1411fb45531bc3320a43baee647c25182cdcbf353a031bc8b7a5729d2718c8d41c1c2eb62e3115894a9c977c19d80bf637c74f9fa393556f4336e2e9ad00ea8d932ac8f4ae4b965b", 0x9e}], 0x3, &(0x7f00000036c0)=[{0xdc, 0x118, 0x0, "d30204c5210b50132e9fdd13fdb98a929b42f82b7b8080d512d558f7b616871d52851089bcd74566923899cc19232d09ea9fabd71c6b32e2f543217987e6e6e5574ca951e11afae721db5750531e2a924250f438f397efea8c6b21297e2e817cee3406eab2e83104a7d7698e9eebfe0f1e9c8bd29fa0bf3f9364e39ef6ba1d37978c93edc99cbbee26c649766bf68f1d64b2a50791e1075f9e9d86b38cedef3c6e9b681026b904f68de95f26468cf5ee5166bb475e2df40aa5237c7444778120d5da804c641aafee46aff36b76803a"}], 0xdc}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(r3, 0x8, 0x80000000) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10001, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="be4760fe2e80415757c4d7d7f45625e2e26f96da380845e49436a51b0838248ec1a6c0bce74f3e074f652e05086a7cf7184035a3ae37e6000051de31801bff3a444cc2ca0cf2bc3d1dbe87576bb08baf62c64f2069a13072102a2ba1e8ba5ee6d1890829894dd944b0ebfff765a2231789bb5f9170b411e668f49c8ba9311bc612bb19e0258c7da49396d8187f2c9fd16433366672686600e6b4ed36bd582ce924", 0xa1}, {&(0x7f0000000540)="60efb61faa5329e6f8ac1e4aeca29b9fd26fe7b0cc7b1ed7d3d3c6245b1048deb200968f553545e61a03ef0e7e085fb8d8a3ec082a0ebfce7453c72e02ea39f3b9fab0d00dc249f870af043d5ab6f7c830ab79d1a3a03b6bf02901adb042754d4ea7b6e2e50760b82e3a32fbfdc63de7146df0717bf9c48851ef98e7869244229fb0", 0x82}, {}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="b774b32d575b7ed71fb073d6228bf4ded65de8ae4ad08666ec2f5a02e561b485291b3bb90f3ec9ef4094cf3faa7f75888f287496856d6dd4c396de53e93022ceddad949a0a4a24964f1bc4ea1ea17776c8b08557ae3743227b83d20de0bb5cb3bbb14e7ab86b09b6b275e4e25576801d89e876fdcbc7a5528641ef0f1deaa36b014c1ac94ee3d5a8e31ca6edf72186b9f5765981283ada9a17b6e9b170c1bb1f20b219c72e179e46b90e3082b2b9bed3cd111b6f5fe60ec9e3c796c18e38ce2b9fe900a0ca55a0c51a8295a2db60b1f4cc72d943dfb010ea34a45a76c1f54351c38562040ba5dabf1650587cbafbc4f7d9abfdc3a677cc3ee04c4358fce24f8f913b35f5713470955df22bfbbeb139d4c7d3d160b2c929ab37752b3a03bd7f730831a78ed15ced7a841e6623dcb7371dc6a5bb9a8877b267c8d03bb9384ec86afaf61369565d2ab86953d1b58274396aeb1ab9da7d01328e066f2a398711de1dcc122472b15740d59296b938e52a9a54becbc54e1c7465f011e36ffd9096593a98a2e6ec74972e51a54a48891d8f584b7002742abcae54222288eb7eb2e75d8b3709e53526c560245d288afedf900a466ad6c0fb697ae43165b63d2e863919d0e96bdd9be05a10990229b78bfaf2cf35cf161b6e0ce7f04bce66cccfe9ab131ede8093d72f6154765b754a2b2e851e23877149fcdfb57d3b7f6d287be5dc4c1840786313c5d5975fde5c2cf9c261df1faa112e16350d2f40c48efeb401345de4473703d338df0eeb773dca66cecbc8c69d4c846f0544c3c2f0b882b86b8669cb55bc5532a9f6318754d89cf4d194ba04bace12aed6a097b42f163fcf2994b6f0de9e481135fcd9513e79464dc57befb57bb4c06f4238be2d05ed999e9a9ab0c36ffa85d58ce563a584e0221a7c061fe8630d386b5ae16cf2e7849d32b93f5d36f9059c7e74e044a33ee77309202a5d263cbd61946d69e8dba730366aba3b44c5f8b8517967723196a7499992a40657a3b96068a86286ad96dbf238d4759e5ed082eadf6952e28fd4677454c4f06f6408953801bb1109fb6c2d4526bbedeaa53fd6a13977147efb3749afefdb35a3b01a295be7c2fad49e7b27741eba31918d7e08abb2f96bd5d24ac35930d915b2292a57207be28349ca438fd1b38c5b121d8c4cff519014df03da1248353db3307d42765380fca9753511d3983199d720234b40efc384e24635f4a65b12fd8162687dc3b0fffbda5fa711c66ab4490a45eff8e6224292cb30b3434b6b117555d1b777682b940e4c3f4d2c75c09a5b6845701adf77778fc98599d545b9391fa6f3a94851b3e01a80a76e4b126821fa1bfe482938602f13ecad3f7a7260681b95548f0391bd076dedcc62427a16462929fe41ef459f4ddd4091d753e1247b5663ceeacfd3f6149b18a604b25d52f307ab4efa9c127b6e2781722e5994b843054bf7300f15979ca2f2f8af60ed86de76144e73998506f6c81d0a6ea1a4df0019ad00c65d952419bee05c20a1b09028198528d108aaeaf8aa44d8c026b8d9fde2117a36a5fd95fc3045911b82473bc41a1a0048bebbda6746d141d5146eff91f3fab63fce5d6e06f8911287fa83a50f1332df47b0b5c68337dbe94a1f4e91d08315d30b8c446b9148d78ff3a4fcce247cfcbf9c0d33be5d3e057dc7a20412b46bf0224a2be9f1254d2f6039c9ec848963b35de387e799c4151659f9adc559b6e6750bb4c3def9cf724caadb44680cff02b54517fffd179294535072e7239d31c33049e7a4fd7e0ba7bfac83bed77e563595c105e3d57074897c5d494399d05c133108753759740fdb91694dd58aca22fe4090bd28c866100314238f56aa8619837c6bf22cfaeeaf594ecba14a94ddb376b70cd14847758d6ca06f30881605541989ea316640aca609b43f44ed6bde95eaccb6b90c46370d11ae40c864323716f9beca1a711aa29d611a70bcfd898cbac284873548790f6772ce645c4b54b37f25c55b099ed130a90780a52cd9f1021d2c95325f588c96fba527da6906ec310cd8ac79021260b3ba06b43a8f9b3a36ab8c8c146e8a1aad7508946555df24fe820ac61cdaa738e6959e74be6bc0187aa3c02b64039be6218c9ba3ffee27b0798155d46dbc802a9126dfd3a17de7a7bdf89909a163c61c740dd42c5982c978119efd283e0a5697b58af430eaa85cabbaca78117932ad978987fb89d0e4c036f3e6b852d0934fe6cfd4fdd077660a6df1b04381be5b37cc47ccefea261e826e0f331744a2dca53f5c11a613a5218eda090c0067838644e1afd3287ce399d9a5afe4e1e2fdc6cea3e2d900095ea1b6eb10ad2b483264a078116bba6b891261dc89a568c34be4cb6c93cd47ceef060ddc7dcc044e9664b488c9dbede040cbe5b2efe42ea6cbd85ded89c64037425db141b04c27d8f537bdedc7f98c48894ffd9bcc29a642cce2cbf921a6071a1c60d8853411b4ea0dcd906ebc1e7088bfdeb951e9fdb89337f148067869632a96a3eaf6d4f67d15717af03e87d02b5d9a4382fa5c29e9bc53cc4cb841c23c3565226f4e0174525a0cc6f2f05bcba14e2a986db661a04083c63d11a767fbd3a665154dcc36f69cfe6acf90677963284e425f89a79fb4e08c686359b5d7ee8b9c6ee4f600c545c9d94a86b115b3e68d035ce8bb5e371c3e09dcbbdfb8f18b6591c9b924a4c8ae2571a0268e35b4e6ee2399b54b3c04942a973a5f5e8f276ab9860cd3a63f90005d7595942c40faff6eb7ff771c12319755ee80fda5602fd3902d252e37c448dab1e560d81e94fb9a758100a790e958aa0af2f36751608a2914fc0487d88a558eae2e78145cda6193746b7767b48c045ad710f4ab9ec017c39e16b598d0bb6e1593ebf38f7dde011d913e939c901c02ada3f71784dba3f98e8466ec367db8a6e8b6fd2adde7f92e4a56a28b45476dd00c3a6f35b4ffd986fa405fbaeab0e85922cca58661233234029fd3948cc6c74e8bca0abbeaf9228d5837c9cc2a0747a038bd81f02f7fcec2ac1be41f385d079fc36d08e3a01d66a0a81778abb9947529af2eb73b8a526940ed1435768aef178b8000f504ef0c5e09b1b6668aa3233ced4815e9f2722ba65b1755dfa48f42b673a744ff513bd38951a11313d98d52261f31fed975c4df5434574f73c7fed3e7a829bcafab2e7b016efba4d422b692a19784f23c5694df63cb44949d0f6663622fbe52f9134481efa8a86264718444325809a86e74a834679c05a3dfe29a4bbfa09dbc5ec3517d07a44255d49c45de41682986992fd471a29d85d60eb5ead149e24c2b82e0f5d6089f3565720264ca7c7f85f7483cc622bbf7f682ff3d733b99e512b60396ce679b9c972d35777f829bbdcca03c84ab2981f2b8b5d20c4e24637189f4114e3de7c190ffe280068e865e7bf11e7acfd591793241f741101970f5166933f5f54c32ba6513937a4bc356250e287e6bc4945685c13100f9c5134bc2f1cdd57e4c4c270394e6b4c3c49a8f07fb3c818f860350876fdfa470fc94eb8a435d3adb94557cd0df99e9192ceba39b95cd9a5dd53a6430e75d1f3d896ef29735c21b2c9bb52307cd85caa171b5a6f3628c34e88e3f847cef166061dc8e9775c9aef8296b1909633b2c32c80d195f939952821d36e2e678a11ac3557b2c2f36eb731b79008035fbccb182db958e7426d8907aa4963cd0379b14a1dcdab7f0cfd65795ebf3da863a7e960c38970e2faaaf78fda99214ad69b92dd6c1d1079c844861c3b8c05f4e220f771ea2088a07cb4c27861eee3537150be6a16dc64efc566bb660542eceaf177372a0b12bc102c918e20fb956187f66bd04e72806118aa5b1d9323956beb7e3def8fbcc23cc5bebfbaf4fc5adcb1aeab0afcad3fc21a12fcb69456430a36af12f87575029900a153a72157665e7bebcbef4cf60a31c032f1c96c29e4ce2986de19ec4a9e1adabe0df4aab0e9ec75b7e1e23646f31b36b199ba78c852361c9d61d022a39ef2eb5b6a6c8886ded4b6e3dbb8aa0f9c7e10107bc56012e4cb2e3557445eee60b0dcdc6bbdeb0720ddfe30040604f9142f9f0a4e52b8a8de8182c79e0fd7913601ee949d97fc50a932842233f2276eed2e2cdd0476cd7c1fa101b51ab0e017206af4804aecefaf38d3202eba7e585d38dd9d4e91878a96614c53dd74b7059a4d290ca7cdc62fe9c1a5089a60ef671de25675be7dbcee6a688beb31bfeea395ea888ac48725215b6e57f3fa99c93ca081b4830cc74efc09d03958daaea9230d16282801d20e9e3143ac11c9c3227c8686a9986217f6d670ac398a123d0516e1a23fa4211579b018733a3685a9fe2978abc2c709daeb4c9f75ac6caf064d3e6290ac0bb67561d36128974e939b6c17227cddab9f814e1a31dc36a1b4dd6a5a3cde56b7d97d556b3d768b0e2cbb293837855fea50288d60a4c2731e6b1850b02c046e8ed5331191319cd6d941b90415f55a1f793b3f8d1a830249c8c7d4f72ea830831756722ca890ea3e088bd6c6f647d9f35e63478ca48fa73c22dce9d29c11b6201ffad7a921c3fa3e5fdd8ebec4c345bc260a0d3714ef277a18b083d1b2e08ec55110a60d97779bb35276c49d4ab0b66440df5aa350ad61633a14f21ba36d29322137df3fb0eafd23aab98918c00f61f5ed9ecd3813e12e2e9d9900ed3d8f4296c639e038e27bd2342fe5f27b87a742cae9ff3ea89d55845ea8746529aaebb5718176b4cfd7a77c374b17ba02ea6e34bacf086d09b8166b5f36519c00d119cb7d8f0f36a2a5709058127d941a60546e9e89a992d98f500b9011dc46a773d652600de844d33e5a91383af05d4ea7b3373b20288fbbd9f367a9644b11eba7a4e8457ae3a7b813f957c92da4708f06cb2650a3932bd24f8d5c08735fd035b556f8b6cfca112283c56da57c26e2fecbb031453a6e5d805200557cf5eded665ffad52450c3920987ce21abac4cb2ab30a01ebba255977379a7289d687d27b4b46b1baae49bcc4a4289808191f4934a78ec3ab670b2bf59c6223741011f609eb30d287eadab54fd21e58626c90e78680b2fe5c84533e6dea34af7cd65efc49611623fdd9f711460040bad7859424da1da3c90388e48c5b0d9b7d0c501f9c0dd1000865ccc91070b4b0bc28d290974088757c363ef96f61d2351aa1a7a5f82bafc028412bfaf1352f2029a4225bbda60201fa92969d8c39172b3f70de7413d8bb1385f42e1959a531cf28ab64cffa7291e148293d4fc21b1e9e020097e0b1ecabbd511de2a10f8971fb6185a353e89087d3aa6e306f84781d746487c109487932ad01eb01a6d7feec1eee72ecebee1f35baa1a4e6f8040bc8c9a17fa638143d153713326121482300453e531194f442dfc8e5e7a1e3c1860c9f9c5a36e8bd73f6c2f0c5ab1586be11dc050971e9fde2561f8b95e88aad279dc496f9ee74cd02b4899e536d8fb417e563efe5a343a7d0f46c7c670bcea14750d657ee79d4b6de10f036eb1605d78769bc6eb8b7e9b0280ec81f673eb99d92aec692a601629f6b197d9fe899ddfdfd888f585da006ccb0a624edd7e01fe47a0a8765142c68ae5855bd5812aa01e98ab48eeeb4225914427f9e5f31e4b5eaf52798851c107d9007842e99201931baed7328a38427712157f1f2a639b77bcea77f72b562a368bd5fceecf9ab4cb5bdb85dc788e736c7dd32f56620b4ee8aa1949e239985b79d0aa99a833ef8522173864a5d453359ee4004a9c89c1d6c93df6c1bd606c5890f974f984f5352e343f5eac2637af41da4", 0x1000}], 0x5}, 0x4040060) close(r0) socket$kcm(0x29, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(r4, 0x8, 0x80000000) shutdown(r4, 0x1) [ 348.636329][ T8462] usb 3-1: USB disconnect, device number 37 [ 348.644127][ T8462] keyspan 3-1:0.0: device disconnected 00:33:40 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001380)={0x1c8, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "2078cd8d2ecbf71ad2bdf3dbc82a117889afe1d1feac0069456d9361b028e2999593d3287bdafa41e7d19b7d72c95567aca667e595fcf99377d91e370ddebd47fd3c60379057fa27865f09a9d44ae1ad570558be6e8f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "01bce3825a5c17e539a67c5283acd10fdcd760c4d7d396b632055889712e9c590ef0d13783d23322c90697ee5c176b2495c5933f3caf61bd1631903fc9b4345347fcce67ee105d02663148256f621c2abcb68fe247f2ad7c22b64d1348ab8f2be9d9ff0acd82937e1fa26a916979f1118515bde65c37949841f908ac8c6ec8459c87d255d833a70020761ce09e785e4b1e71a9b6c5666635f52087"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1f}, @ETHTOOL_A_BITSET_VALUE={0x70, 0x4, "02fe4dc1ad5ee2b59e53e54e543a5ad61cf9eab3c545c4a5c71577ce2d6ed07483f2993f7213f8bb1707837f4053578ddea3f08542c116b33e40c7938396dc7e5f7558e1d8e8a70043246a5b71dfddbd84747a94dddbb1f98605809db79eccb510f3aeaa69c1f1d874e9cefa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:33:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4802, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 349.040846][ T8828] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 349.297090][ T8828] usb 5-1: Using ep0 maxpacket: 16 00:33:40 executing program 2: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a45321, &(0x7f0000000040)={{0x2, 0x75}, 'port0\x00', 0x20, 0x30040, 0x7, 0x8000, 0x10000, 0x7ffffffc, 0x6, 0x0, 0x0, 0x2}) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) 00:33:40 executing program 3: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000300)={'ip6tnl0\x00'}) pwrite64(0xffffffffffffffff, &(0x7f0000000240)="3cd15c375d5fc0ef37f0035057aaeb3e544f9b4f7ee501179b17dac3bfd546b2ef56dc95d1c0a755eb3918f2ce024cb08a5de4c3de332ec167196457cf1ec0ec88162adeab61c4e996b044a12e4a1af664cdc897d4b539cd0a6e2f28874a1aefde19eac382c5763763411fbd44db9d99712ec6beb276d1dfb124bf2b0936ba2a7c4c7d9207f0914fd38ea45c7dce56cfb2ad2210b73a05d0d1e94475c632cdc55335", 0xa2, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x80}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="0000001f00040000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@delchain={0x224, 0x65, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x10}, {0xb, 0x5}, {0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1b4, 0x2, [@TCA_FLOW_ACT={0x1b0, 0x9, 0x0, 0x1, [@m_mpls={0xac, 0xe, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x1, 0x10000000, 0x1, 0x1}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc78f4}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1000, 0x2, 0x8, 0x2, 0x42f0ad62}, 0x2}}]}, {0x30, 0x6, "e8cefea5b294b4c51c2fbefb9465a9e0cf791d4a0c1dc464f7e570ad8a069143c85f92df1132bc916b2d03c8"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x100, 0x9, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}]}, {0xba, 0x6, "7b27d62626bd9b868ea7514d8bcdb745a2e19797800fabde28acff4f8fb502d2d3f2f410293d19e6970d324887921cf47abc3459cb8938976c8852c0341690c38eca323da5d8a1bfa15a2a09740d4cb054764f6fd62ef3e2634259b0fea83ca3b359692d5afc15e90580a9e449b97c584cbb0396a02ad550f674fe37996213f92ea3bc594e85f6750b2be4047a763f6867e660dd6328567a114e99ea874bb506bc2a1dbee4d7624c675250f7cfac96fb8d481618a57d"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @filter_kind_options=@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}, @filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0x8}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0xc7}}]}, 0x224}, 0x1, 0x0, 0x0, 0x40}, 0x894) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x6, 0x10000, 0x0, 0x9f0a, 0x80, 0x7, 0x4}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 349.442079][ T8828] usb 5-1: New USB device found, idVendor=1385, idProduct=5f02, bcdDevice=eb.6c [ 349.451677][ T8828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.552016][ T8828] usb 5-1: config 0 descriptor?? 00:33:41 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 349.664022][ T8828] usb 5-1: error -2 when submitting rx urb [ 349.670633][ T8828] usb 5-1: Failed to submit rx cmd [ 349.765038][ T8828] ar5523: probe of 5-1:0.0 failed with error -2 [ 349.804373][T11083] udc-core: couldn't find an available UDC or it's busy [ 349.816022][T11083] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:33:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb001, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 350.059658][T11110] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 350.279412][ T2056] usb 3-1: new high-speed USB device number 38 using dummy_hcd 00:33:41 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:33:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc002, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 350.807787][ T2056] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 350.817621][ T2056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.826125][ T2056] usb 3-1: Product: syz [ 350.830704][ T2056] usb 3-1: Manufacturer: syz [ 350.835537][ T2056] usb 3-1: SerialNumber: syz [ 351.040067][ T2056] usb 3-1: config 0 descriptor?? 00:33:42 executing program 3: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000bc82008b40402005fed000000010902120001000100000904"], 0x0) syz_usb_connect$uac1(0x1, 0xd1, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xdf, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0x20, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x3}, [@processing_unit={0x9, 0x24, 0x7, 0x3, 0x2, 0xdb, "b5a6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x2, 0x8, 0x1f}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf7, 0x2, 0x0, 0x0, "19b4d468ed7048963c"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x1, 0x7, 0xfe, "05eb7371"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf9, 0x3, 0x6, 0x7}, @as_header={0x7, 0x24, 0x1, 0x8, 0x20, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0xaac51167380e730c, 0x5, 0x0, 0x1f, {0x7, 0x25, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x40, 0x3, 0x1}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x2, 0x4a, 0x1, "6c8d2de4b250e93b05"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x4, 0x9e, 0x5, "7ee1a0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xb5, 0x6, 0x3, {0x7, 0x25, 0x1, 0x1, 0xd1, 0x5}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x4, 0x0, 0xd8, 0x10, 0x4}, 0x1e, &(0x7f0000000040)={0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x41, 0x3, 0x80, 0x4650, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0xc, 0x800}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x2, 0x3}]}, 0x7, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x825}}, {0x13, &(0x7f0000000200)=@string={0x13, 0x3, "7fed7094a92b2a82783ef39168e0346e84"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xd}}, {0xe1, &(0x7f0000000280)=@string={0xe1, 0x3, "6c277d60cb2cac1a941ccd123fffe1f5d485c225c4db7c98977c0af27998415f4d2188405ea946433fc01dcd6b0822cd14a853249ad5e48d04d5585fd6a64c58253dc7375f1c4e53b6038f9cb1b2c7931ed7d5d5fe2b45c68e9682c79ee6de2f98b1a23ec7c2b5b212cac5ad2d4d2dc247ae79fe27e6c2831ea3a72f75ba1a0ace196985eb2fb71e3a67a9698633b4617cca09ad38579cf7d731633f2b74cd3a594487378f5b3f55a783ac3d9bd7bb9e55ee6c0e13a7a8e64031a26b9346550cd3ca0d5cb606792eb79ad343f0290f6978d5b17191d2813f6353f3750bb835"}}, {0xa4, &(0x7f0000000380)=@string={0xa4, 0x3, "ff4a240c6496310d562eebfbd6e76df60e25166d8f5b75e72791056eb48cfa9c4278b8811654b6418c8741c5af5b847cf3d24532000454b65c4ff1c27b9b16f7a19201f5bb367e7f25e976ce18e7fc382bf8405adcc825daa481816131e759cc5be7500559db8ee2cc63d4310a7626033cc6fdfd2f8fad4d31d12da4ed7be02cdc179a2179083cbd51789909ae7952a47d49fd8b7a067e5fc5a8ecbcf76b48d1ed03"}}, {0xe, &(0x7f0000000440)=@string={0xe, 0x3, "b65094238dfd661a4d544b22"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1c09}}]}) [ 351.081706][ T2056] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 351.282813][ T2056] usb 3-1: USB disconnect, device number 38 [ 351.290321][ T2056] keyspan 3-1:0.0: device disconnected 00:33:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000000000000000000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c00800000001000000080000baaca933585770b3d8f6b632a07cdd2200018c2e741f76a88ab79ad31840a0110f27a5c14aa4ba3cf88ddc2c12e3f8ebdc6ebcdc5f6fe131b3a998aa7076c83ed5f0e255ca3b5aa750b346f989abb64327b141644f69be2cd41cdb6383a2ec4134d9523d86ca717cbd7b56065de0cb8ce34eb8372a8913431c417e03cc5dae56ae80d784e8b4a316fe6563017e304504c80ed529915f9a47af9c3a37540b5d46f5e6a3869d8e06cc3df89a657664a882cbca4cffe1b488e85c5519f33d3179179c729c07ce42a1e19cfd92dac7634c31d1fcb4133fdc75a316ecfb3836a06aa66e5e0a457ff4d2f326df8da97d04cdfc6f2b86d94c4e7c79625eba592fe986bc8504fbef0565e929ba2988097610bfe47ead6d09693ea9f027661a71362b91788a06d51ba2bac041f01b937b2811351b4e1bdb32c9ac9e3efad5fa25e89195adce7ab3a926b95cfc85e6a8af7e504353fbab5805d8146bd34a872060701b386306401b665f86b90d4d206e1f93b70737a79cddee5f155a0e6672238929431e49695458ae252689457267ad5ceed365849b7d5cf7c0731c16208e72865ce850"]) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000000800008002000000de0000000400000009000000000000000d00000000000000000000040000000000f07f7f0000000700"/80]) 00:33:43 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:33:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xff7f, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 351.830684][ T8828] usb 5-1: USB disconnect, device number 2 [ 351.837247][ T2056] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 352.067008][ T8829] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 352.088040][ T2056] usb 4-1: Using ep0 maxpacket: 8 [ 352.207730][ T2056] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=ed.5f [ 352.217600][ T2056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.292982][ T2056] usb 4-1: config 0 descriptor?? 00:33:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x100000, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:33:43 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 352.545581][T11140] udc-core: couldn't find an available UDC or it's busy [ 352.553349][T11140] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 352.599109][ T8829] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 352.611236][ T8829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.620663][ T8829] usb 3-1: Product: syz [ 352.625256][ T8829] usb 3-1: Manufacturer: syz [ 352.630341][ T8829] usb 3-1: SerialNumber: syz [ 352.757204][ T2056] usb 4-1: string descriptor 0 read error: -71 [ 352.769565][ T2056] cytherm 4-1:0.0: Cypress thermometer device now attached [ 352.903743][ T2056] usb 4-1: USB disconnect, device number 9 [ 352.913671][ T2056] cytherm 4-1:0.0: Cypress thermometer now disconnected [ 352.929024][ T8829] usb 3-1: config 0 descriptor?? [ 352.938404][ T7] Bluetooth: hci0: command 0x0406 tx timeout 00:33:44 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf9, 0x0, 0x8a, [{{0x9, 0x4, 0x0, 0xec, 0x2, 0x7, 0x1, 0x1, 0x74, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x6, 0x6, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0xff, 0x91, 0xee}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x188, 0x3, 0xff, 0x7f, 0x50, 0x4}, 0x4d, &(0x7f0000000780)={0x5, 0xf, 0x4d, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x3, 0x2, 0x414, 0x3}, @generic={0x3d, 0x10, 0x4, "97ecdda652700c0dc12b20b07a7ae36304b47feaf0b8c78da89dfae64a806c6474de5ba8856b05ab309857c16845f2498677f819b6739ecda667"}]}, 0x2, [{0x9a, &(0x7f0000000800)=@string={0x9a, 0x3, "c805d157a021b8dd0a8934305092c1a306af940e8b77576b652f974c6370814f2e7e83397c23971f5045478af93484c15415fba7f52cf79d40696aa59a5113bb21ed68afc874f2b5ebe964e9f1f26c39d46c849d1d2395526e7d877dbc863bbe514dd748af5d1f70af2b9a33ac9debe1b07a3bd6decc384175dadcd483c14b9af182e3091939ae0266d95167ea1de8a67d6a6f3f4707ea1f"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x445}}]}) syz_usb_control_io(r1, &(0x7f0000000a80)={0x18, &(0x7f0000000940)={0x40, 0x1, 0x6, {0x6, 0x24, "dcc49d10"}}, &(0x7f0000000980)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "04f082ceadc47205d7db7e2e26486c0075f46065ca1b4d360c8871"}}, &(0x7f00000009c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0x3f, 0x97, "11d1a47b", "0361ac37"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x25, 0x3, 0x3, 0xf2, 0x80, 0x6, 0x1f}}}, &(0x7f0000000f40)={0x44, &(0x7f0000000ac0)={0x40, 0x8, 0x9e, "bd42eca07884b80d37a45c164753e29301ffae215f7a44c6e7760a41ab9d30487357f0f77b57286bbb5f7f9ee8c310f23485caf62e2d3bd892aeba1d9e1d86bce70537dcdca159a45b32c7b90cb6ea44a234edc000bf90b7547a7adb88149861d8acef52fbfe1bb3167e823b4fbac214457e197a1b2a722d471f9ead097b71b1b1e677caa0e912d1f2a8b96a46cbe3200b4e32349112ed9ce3a9442f36b2"}, &(0x7f0000000b80)={0x0, 0xa, 0x1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0xbc}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x0, 0x10}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000cc0)={0x40, 0x9, 0x1}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "7cd2"}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x6c9}, &(0x7f0000000d80)={0x40, 0x13, 0x6, @random="e23ef76a1795"}, &(0x7f0000000dc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000e00)={0x40, 0x19, 0x2, "0645"}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000e80)={0x40, 0x1c, 0x1}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000000)={0x40, 0x1, 0x8e, {0x8e, 0x69, "093716972b67f1596b102f993dd2def15cca5d0a7ae6069fdfa81701aaf0fcda79883f5245c315def24c2fda5dc402353f263ed01bc95137ca230e0a965503d28f6a090f750e688409ec398b66f8856c487380f01daa34a716930b75136a67e8b849aba2631fd01d6bc1281a12a04ae07a6d0fef7b479bd5f085fa83c355b409d920826f05b964c642d12665"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, &(0x7f0000000100)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2d, 0xfa, 0xe1f6}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x8, 0x8, 0x6, "f316154d", "b55b1891"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x8, 0x11, 0x1f, 0x3, 0xa9b, 0x26c}}}, &(0x7f0000000680)={0x44, &(0x7f0000000240)={0x20, 0x7, 0x6f, "86b2a0295df938237dc8e3e9a6725220ba7c0163abcac1de7ae8277fb83870fd2d0471812428af5c4b9c27e8922e4637aeb35c472bea6bf575dd0b557159b4294a3ffefd91b9cea1f35be8a7613dd82b09584b0b2b59bd7a5763ee53e1ea864198134c749c94ec6c6e0da64f4de8e9"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7c}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x10, 0x4, [0xf000]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x6c}, &(0x7f0000000440)={0x40, 0xb, 0x2, 'NJ'}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000500)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x19, 0x2, "b3e3"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x75}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x3}}) 00:33:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x230, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xe8, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39deea4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fad5244}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x114e3d1a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ca67d30}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72174717}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e4c9371}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd206569}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50647391}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79b929ac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5761a1e7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12beff65}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4be9fcf3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd181e7a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a432bb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x492b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59fc66a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b8a}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78b88929}]}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x40800}, 0x4004840) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000010) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="12010102020000102505a1a440000102030109025c0002010000000904000001020d000005240e000105240000000d240f0100000000000000000006241a0000000905810300000000000902010000020d00000904010102020d"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) [ 353.168378][ T8829] usb 3-1: can't set config #0, error -71 [ 353.210924][ T8829] usb 3-1: USB disconnect, device number 39 00:33:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x12945c, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:33:44 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 353.629573][ T2056] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 353.876833][ T2056] usb 4-1: Using ep0 maxpacket: 8 [ 353.882780][ T8829] usb 5-1: new high-speed USB device number 3 using dummy_hcd 00:33:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x200000, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 353.999403][ T2056] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=ed.5f [ 354.012772][ T2056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.047438][ T18] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 354.116176][ T2056] usb 4-1: config 0 descriptor?? [ 354.157718][ T8829] usb 5-1: Using ep0 maxpacket: 16 [ 354.318627][ T8829] usb 5-1: unable to get BOS descriptor or descriptor too short [ 354.397105][ T2056] usb 4-1: string descriptor 0 read error: -71 [ 354.409568][ T2056] cytherm 4-1:0.0: Cypress thermometer device now attached [ 354.427813][ T8829] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping 00:33:45 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 354.437464][ T8829] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.450575][ T8829] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.462427][ T8829] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.472864][ T8829] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 354.488648][ T8829] usb 5-1: config 1 interface 1 has no altsetting 0 [ 354.564140][ T2056] usb 4-1: USB disconnect, device number 10 [ 354.571440][ T2056] cytherm 4-1:0.0: Cypress thermometer now disconnected 00:33:46 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1000000, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 354.658458][ T18] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 354.668453][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.676984][ T18] usb 3-1: Product: syz [ 354.681329][ T18] usb 3-1: Manufacturer: syz [ 354.686082][ T18] usb 3-1: SerialNumber: syz [ 354.791272][ T18] usb 3-1: config 0 descriptor?? 00:33:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x8, 0x80000000) fcntl$setpipe(0xffffffffffffffff, 0x8, 0x80000000) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) close(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xad) pwritev(r3, &(0x7f0000001900)=[{&(0x7f0000000240)="aed498db5a1912ba90ce9b6c0043717386218a1041112e8e568991ec15e9770812eaf40a9292bdbc42badc7f12763f742dd0c395b72da9ebefb689c553c793e43410b524b84e5d773d67302611a519e2300c4b0fb2bde2cb47ef05cb41bf0ee7807fee2c5fa6b902372edb", 0x6b}, {&(0x7f0000000340)="535a5772437742edfa9ab582047201648efb412bc649977fbbed085447ed463f91b6670724015ab7275bf18cf3209ad8c6681dd0e266459ae8672576bde2473fbf4a4c06b8f841ff4479cb76d9e457f4f03226677304b9e3e80c9634b82515f95bf3732586a0a904c3b04db0e002c51f3cd042b37c5c8fa1bccee5cd50e963f4715f9c110062b969535f61e39b119c668c371ef975e118a4113876995453cec90481f4bcb8a16fb37bb3d74d6aa79d31244ed47b5228aac0f3020d97ae4ee24a573a0cad65c3e7c5d1986893e8762d505df68e537d092289d2fb8b19ea063ea53b581329fc7c1659f957210bdf9dacf13632b273bc55", 0xf6}, {&(0x7f0000000440)="295de92ba2421e2c780b148ae01c9ccee45f1137d6b8734c5573ac74e20ab28375bc18b206dba9068668f663d0aad7631aea0a26c7a46e6ed182ceddcc12607538f6a34478515c05e7b8cdc29a7f14b31bead34a49e35a6ac7039ee26e978681233bab0c5beb656f87296044d2d42ba4", 0x70}, {&(0x7f00000004c0)="37eccfc3d7145ad21b15eea59c34e4cd435e4387d9c7853ff99316afe1596a73c4c9fd2d8da9d25e89e633a5c90d2bbfb160d86a58dcc1069ed27cb2f03f3c86e5f5667c8e0bd10c82a9d3b1417b619871caac98343eea615f35457c", 0x5c}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="90228f469a1e994b4927c469020e130be1e8a7870a78b1bbcfc4f9fae55ac87a4d97fbec7fe3984902315b7e3e9f853bc17e84982b5e360feea1ba314ae9f0ac511f6ec7febd45b145f8deac4bdf31b524206fde1292731c6432cd7cd599f753cd1d61ff7007fab19e3a9d396394f62d6c3855e2727a3f0e6d64a129e5770e3cc9138c027306ffb1b69ff166c1fd3c2405bb8ca3f64caac4649f3e1820d1775587234cbd367fc05b3a2f4cddf19ff747460f0f1ad92bd57e83be6c5dfb67d9101a8863c68c4dbc09a94e0d45f1e2cc3f110708da2d2144c68821166d9359", 0xde}, {&(0x7f0000001640)="83af57c12fafd6c947da7d85420d8f73aa1f1db0062df0963e3cd271155e55d78fa8fe02cdd3996200c379593a1c0a6447fc2bf16fd2d9652a4394485be6e9b7125b638bb9091ecb43ddcad01857541a269d82eafb4c7b22d1442e45eca150b5cbbe9c84fa7aea3b8fb92932529231eed748", 0x72}, {&(0x7f00000016c0)="7be821e4d2758a169e078c234e0804ffc5f526ddc893d6355575f70008385c64f4e53771882547085bf55aff6d909849ab6a672541d006d24c8d52f7dbaaacb957c6ac4d877e897af963917549f0b252323b47f3764829266e0ed86248aa682a8c", 0x61}, {&(0x7f0000001740)="deb166eafe2d4dda168f401685e241603178eafad439d2a04e714d7f6c6cf79f2c12db0a33cdbbb1d184fe1c1ffe648dd38489de6dd8a914b598141ed3b67ef3cf0e9361d41cfdf33117fc507daf39a85e490bf6a308df5bb04baa16c94527e1e80860223eb406274aa9af51dc2910377fece73c0a2c1e7ceecd7735e9abc017d6b235048bd32755e24fd03c0bfac0702aa126cc08455093899bc6ced7719f7cd1f56fec3022537d1de25494acc50fe54dd4849d217fef34ab5981b6ba95ba20d8aded9fb0a20df2ec87", 0xca}, {&(0x7f0000001840)="f61692f0c7c4cc431c73de9799eecf58990c22578bb9f77f9eadc0beda67f26a9cbe8afad25dba301d8301545c82256f966e156f4be2217a3c2b3a61b9b262dc2b0a5f0341455d186a65a2bc880a8025f247e28a16eff9369e4c5ea2c2774d30220ce806ee10172e39894854c8d1a8e0839ea3a6f4550133f5fcf6d2eb18d5790ee6cbd0c0ad8ba91b2c0c0d0a43d1ce006da50659b0e406bd9143223d98661f73933427daea2d614fbc0e0177ca", 0xae}], 0xa, 0x40, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000001980)={0x1000000002, 0x80, 0x12, 0x1, 0xb9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffa, 0x68}, 0x920, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}, r4, 0x0, r1, 0x0) close(r0) [ 354.845329][ T18] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 354.917782][ T8829] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 354.927850][ T8829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.936225][ T8829] usb 5-1: Product: syz [ 354.941104][ T8829] usb 5-1: Manufacturer: syz [ 354.945929][ T8829] usb 5-1: SerialNumber: syz [ 355.045403][T11192] udc-core: couldn't find an available UDC or it's busy [ 355.052921][T11192] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 355.109670][ T8829] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 355.117012][ T8829] cdc_ncm 5-1:1.0: bind() failure 00:33:46 executing program 5: r0 = openat$full(0xffffff9c, &(0x7f0000000000), 0x38000, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x174, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9a29}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x15}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2f94}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x10000000) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe8bc}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000884}, 0x4000000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001a80)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000001b80)=0xe4) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001c00)=0x14, 0x80800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000001cc0)={'sit0\x00', &(0x7f0000001c40)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x20, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x40, 0x80, 0x10001, 0x3f}}) getsockopt$inet6_mreq(r0, 0x29, 0xce3b20d3c7e6f0a4, &(0x7f0000001d00)={@mcast1, 0x0}, &(0x7f0000001d40)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001d80)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001e00)={'tunl0\x00', &(0x7f0000001dc0)={'tunl0\x00', 0x0, 0x7, 0x40, 0x1fe, 0x80000000, {{0x7, 0x4, 0x3, 0xc, 0x1c, 0x66, 0x0, 0x7, 0x29, 0x0, @empty, @remote, {[@generic={0x82, 0x5, "528b5c"}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000020c0)={&(0x7f0000001e40)={0x244, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x244}}, 0x801) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000006, 0x20010, r0, 0x1aa09000) pipe2(&(0x7f0000002140)={0xffffffffffffffff}, 0x80800) r9 = socket$caif_seqpacket(0x25, 0x5, 0x4) fgetxattr(r9, &(0x7f0000002180)=@known='trusted.overlay.opaque\x00', &(0x7f00000021c0)=""/209, 0xd1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000022c0)={{{@in6=@private0, @in6=@mcast1}}, {{@in6=@private0}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f00000023c0)=0xe4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000002480)={'ip6gre0\x00', &(0x7f0000002400)={'syztnl0\x00', r5, 0x2f, 0x3, 0x8, 0x0, 0x46, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x40, 0x40, 0x6, 0x3c}}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc01cf509, &(0x7f0000002600)={r0, 0x80000000, 0xf8a, 0x2}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002740)={r8, 0x10, &(0x7f0000002700)={&(0x7f00000026c0)=""/12, 0xc, 0x0}}, 0x10) pipe2(&(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x19, 0x5, &(0x7f00000024c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}]}, &(0x7f0000002500)='GPL\x00', 0x80, 0xb5, &(0x7f0000002540)=""/181, 0x41000, 0xf, '\x00', r1, 0x11, r10, 0x8, &(0x7f0000002640)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000002680)={0x3, 0xa, 0x1f, 0xacc}, 0x10, r11, r12}, 0x74) 00:33:46 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 355.532639][ T8829] usb 5-1: USB disconnect, device number 3 00:33:47 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2000000, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:33:47 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x101001) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x15}) [ 356.726857][ T9236] usb 5-1: new high-speed USB device number 4 using dummy_hcd 00:33:48 executing program 2: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x7, 0x6de4, 0x492, 0x800, 0x80, "cb716bf48e2a621b7c57631d175a9faf8a0711", 0x9, 0x1}) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) [ 356.846291][ T18] usb 3-1: USB disconnect, device number 40 [ 356.853551][ T18] keyspan 3-1:0.0: device disconnected 00:33:48 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x101001) write$char_raw(r0, &(0x7f0000000200)={"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"}, 0x1200) 00:33:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8943, &(0x7f0000000100)={'sit0\x00', 0x0}) 00:33:48 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:33:48 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) fcntl$setstatus(r0, 0x4, 0x40400) 00:33:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4000000, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 357.697606][ T7] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 358.164354][T11249] IPVS: ftp: loaded support on port[0] = 21 00:33:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6000000, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:33:49 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 358.287747][ T7] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 358.298368][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.308365][ T7] usb 3-1: Product: syz [ 358.312744][ T7] usb 3-1: Manufacturer: syz [ 358.317881][ T7] usb 3-1: SerialNumber: syz [ 358.491313][ T7] usb 3-1: config 0 descriptor?? [ 358.553120][ T7] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 358.760844][ T1977] usb 3-1: USB disconnect, device number 41 [ 358.768374][ T1977] keyspan 3-1:0.0: device disconnected [ 358.798512][ T35] audit: type=1326 audit(1621038830.129:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11310 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 359.140001][T11249] chnl_net:caif_netlink_parms(): no params data found [ 359.555156][T11249] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.563234][T11249] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.575562][T11249] device bridge_slave_0 entered promiscuous mode [ 359.589851][T11249] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.598006][T11249] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.609785][T11249] device bridge_slave_1 entered promiscuous mode [ 359.679196][T11249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.700623][T11249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.761314][T11249] team0: Port device team_slave_0 added [ 359.784996][T11249] team0: Port device team_slave_1 added [ 359.836977][T11249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.844286][T11249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.872039][T11249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.903585][T11249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.911338][T11249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.938128][T11249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.034947][T11249] device hsr_slave_0 entered promiscuous mode [ 360.051652][T11249] device hsr_slave_1 entered promiscuous mode [ 360.064472][T11249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.072773][T11249] Cannot create hsr debugfs directory [ 360.146916][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 360.425270][T11249] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 360.480955][T11249] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 360.520860][T11249] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 360.539428][T11249] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 360.935320][T11249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.991283][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 361.004652][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 361.027365][T11249] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.053965][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 361.067357][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 361.080182][ T9236] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.088895][ T9236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.112843][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 361.144853][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 361.164320][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 361.175699][ T9236] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.184527][ T9236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.250632][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 361.263487][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 361.278312][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 361.295191][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 361.357490][T11249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 361.374023][T11249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.394239][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 361.404718][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 361.416851][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 361.428469][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 361.438813][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 361.449780][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 361.459870][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 361.539976][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 361.549868][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 361.558889][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 361.587069][T11249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.924805][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 361.935975][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 362.007269][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 362.017462][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 362.054267][T11249] device veth0_vlan entered promiscuous mode [ 362.071795][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 362.081756][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 362.130426][T11249] device veth1_vlan entered promiscuous mode [ 362.217835][ T8460] Bluetooth: hci5: command 0x041b tx timeout [ 362.247225][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 362.258871][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 362.279612][T11249] device veth0_macvtap entered promiscuous mode [ 362.317468][T11249] device veth1_macvtap entered promiscuous mode [ 362.378792][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 362.399743][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.411414][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 362.424833][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.436733][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 362.450893][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.463339][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 362.474462][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.485319][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 362.496887][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.512097][T11249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.525126][ T1977] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 362.537274][ T1977] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 362.547889][ T1977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 362.559273][ T1977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 362.622815][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 362.635468][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.646304][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 362.657117][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.667308][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 362.678064][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.688755][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 362.700554][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.711292][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 362.723958][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.739567][T11249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.753263][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 362.764157][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 362.811064][T11249] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.820710][T11249] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.830887][T11249] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.841489][T11249] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.201891][ T9236] Bluetooth: hci1: command 0x0406 tx timeout [ 363.308484][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.318032][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.333554][ T1977] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 363.385580][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.395004][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.411394][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:33:55 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r0, 0x40e, 0x4fd000) 00:33:55 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:33:55 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r0, 0x9, 0x0) 00:33:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8000000, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:33:55 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x541b, 0x0) 00:33:55 executing program 2: syz_usb_connect(0x4, 0x765, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x6, 0x0, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "f6490279"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x9, 0x0, 0x40}, {0x6, 0x24, 0x1a, 0x7ff, 0x12}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x4, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc0, 0x59, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x5, 0x7}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xc1, 0x7a, 0xef, 0x10, 0x7}, 0xfb, &(0x7f00000000c0)={0x5, 0xf, 0xfb, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "df926945b402ed12edbc1ac89f96717a"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "51ae3c54c35468dfac3224f7ba51a814"}, @generic={0xb6, 0x10, 0x2, "35b12b14279ba197f5c994c5c00a89a7f82ee5d9c2f4be63dbabac87959d90c2d5bea44f164ac85dfe98405242eaeb08dde820ac41bd0f4736f304e928cf55bb04349978e79ba9fc6b31a2c17dcf0eafabcc7ef70de32111ef5a918c4656ad1c27174af68bdb439bb96210fda2ab014f66cc3089b6ddcbe384273de464ce99bddb563f4a8be0e1dcf39294a06891e0d44f6fa4e09d1914cf0fa1f56784ea23611705eff746811ff57fb10ec59457643c7800b5"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xde, 0x1, 0x3, 0x2, 0x1f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x81, 0x9}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2803}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3401}}, {0x11, &(0x7f0000000240)=@string={0x11, 0x3, "20b722e4208586bbd34b5770e07c65"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x400a}}]}) [ 364.298607][ T7] Bluetooth: hci5: command 0x040f tx timeout 00:33:55 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x2405, &(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) 00:33:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_BEACON_HEAD={0x4, 0xe, {@with_ht={{{}, {}, @device_b, @broadcast, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]}, 0x70}}, 0x0) [ 364.497044][ T9236] usb 3-1: new high-speed USB device number 42 using dummy_hcd 00:33:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9000000, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:33:55 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:33:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x401c5820, &(0x7f0000000000)={'vcan0\x00', @ifru_mtu}) [ 364.737859][ T9236] usb 3-1: Using ep0 maxpacket: 8 [ 364.938004][ T9236] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 00:33:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) [ 365.107848][ T9236] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 365.118248][ T9236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.127141][ T9236] usb 3-1: Product: 뜠î¢è” ë®†ä¯“ç—ç³  [ 365.133176][ T9236] usb 3-1: Manufacturer: ã [ 365.138831][ T9236] usb 3-1: SerialNumber: 䀊 00:33:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0), 0x4) 00:33:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x48020000, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:33:56 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:33:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) [ 365.718057][ T9236] cdc_ncm 3-1:1.0: bind() failure [ 365.732863][ T9236] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 365.740663][ T9236] cdc_ncm 3-1:1.1: bind() failure [ 365.893954][ T9236] usb 3-1: USB disconnect, device number 42 00:33:57 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r0, 0x402, 0x4af000) 00:33:57 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000000)={0x20, 0xf, 0x67, {0x67, 0x30, "784ae93508072cda051a03f25f79d23478d60e5628773f2a98e09821ab0212390c55636e0493efeb47a0480e91bbfab6a0ef0886bec9ac27ce5c021663b2737ba993fef263ec2bcb3bf2889f7c3a2ac21d3bfd3d80334879d211229e055883ce4b54581c7a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, &(0x7f00000000c0)={0x0, 0xf, 0x73, {0x5, 0xf, 0x73, 0x2, [@ptm_cap={0x3}, @generic={0x6b, 0x10, 0x1, "09f99e76956e88b850ea287cdc898dac5c51a46c1c0ab5eccc5920743831d6e73b40abd71cbb834231e36d947408cd7b4c23308df476f9364bd949b8119d66be62d4ed5cfc0cce5ecbf4e744a989d7b97a06690ed0d89841dd1d89395a11379407b36f978a0ac621"}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x1, 0x5a, 0x6, "38e6f8a0", '>8O1'}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x8, 0x1, 0x8, 0x60, 0x4, 0xb1dc}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000240)={0x40, 0x3, 0xb6, "caf9b2854f5b4ce9e0e09a517ca703948910b4c77cd8f35dc160ec3f33082e80dd2c77d9fe9628366d944a1c4c49da6deabaf44b645459682ca3aee45b059ff5639f4fa755fdc7263c92056b21864ac4022a6aeaba23ec7dc6b47ad256520dc67ebb26156e8e38443701bd7346cca0a9901818cff0fc0b504dcc83406d6593fb72846b4f4e9a42a2e29cba0a519b88514a6e7e043d573d7781e0c3a123efb0a5f1b4be7910b1e8e6212c626275910aa2425eccd89967"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x80, 0x1}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000440)={0x40, 0x9, 0x1}, &(0x7f0000000480)={0x40, 0xb, 0x2, "1fd6"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "82f9"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0xd4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0xd0}}) 00:33:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5c941200, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:33:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='statm\x00') ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000140)) [ 366.379763][ T1977] Bluetooth: hci5: command 0x0419 tx timeout 00:33:57 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:33:57 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r0, 0x402, 0x0) 00:33:58 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001580)={0x1, &(0x7f0000001500)=[{0x3, 0x0, 0x0, 0xb0d}]}) 00:33:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7fff0000, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:33:58 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x101001) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='c', 0x1}, {0x0}, {&(0x7f0000000180)="e2", 0x1}], 0x3, 0x0, 0x0) 00:33:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', 0x0}) [ 367.249398][ T1977] usb 3-1: new high-speed USB device number 43 using dummy_hcd 00:33:58 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:33:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:33:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_BEACON_HEAD={0x47, 0x2, {@with_ht={{{}, {}, @device_b, @broadcast, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]}, 0x70}}, 0x0) [ 367.798364][ T1977] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 367.807761][ T1977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.816018][ T1977] usb 3-1: Product: syz [ 367.821973][ T1977] usb 3-1: Manufacturer: syz [ 367.826830][ T1977] usb 3-1: SerialNumber: syz [ 368.051735][ T1977] usb 3-1: config 0 descriptor?? [ 368.110499][ T1977] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 369.861304][ T1977] usb 3-1: USB disconnect, device number 43 [ 369.868653][ T1977] keyspan 3-1:0.0: device disconnected 00:34:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x100) sendfile64(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0xb7) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x220100, 0x0) 00:34:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_BEACON_HEAD={0x5, 0x2, {@with_ht={{{}, {}, @device_b, @broadcast, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]}, 0x70}}, 0x0) 00:34:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb0010000, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:34:01 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:01 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x2401, 0x0) 00:34:01 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x5452, &(0x7f0000000200)={0xffffffffffffffff}) 00:34:01 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, r0, 0x0) 00:34:01 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000080)={'team0\x00', @ifru_data=0x0}) 00:34:01 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:34:01 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc0020000, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:34:02 executing program 2: setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480)=0xe25, 0x4) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3e, &(0x7f00000004c0)=0x7f, 0x4) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000500)={0x7, 'hsr0\x00', {0x3}, 0x9}) r2 = syz_usb_connect$cdc_ecm(0x5, 0xca, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x1, 0x1, 0x2, 0x80, 0x20, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x9, 0x24, 0x6, 0x0, 0x0, "9266481b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x401, 0x3, 0x45}, [@acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x8, 0x7}, @country_functional={0x12, 0x24, 0x7, 0x9, 0x101, [0x1dc4, 0x9, 0x8000, 0x20, 0xffff, 0x69]}, @network_terminal={0x7, 0x24, 0xa, 0xfc, 0x7, 0x9, 0x5}, @mdlm_detail={0x47, 0x24, 0x13, 0xff, "ee39dee5ac2858bb908d658ea37a5821640b56366100fb5cfd0f9ef2f68b76d907c00e02575c73e5b5a45c6e189fc8eb60d92768b447588b55f5da43d23783918f15b7"}, @acm={0x4, 0x24, 0x2, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x20, 0x5, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x80, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x8, 0x3}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x610, 0x0, 0x8, 0x0, 0x8, 0x1}, 0x63, &(0x7f0000000680)={0x5, 0xf, 0x63, 0x4, [@generic={0x27, 0x10, 0xa, "b036f856a482bd484561cc40ab110c6f416c43b2680531b520ab38c896882b340e4b1579"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x81, 0x81, 0x4f, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "aba4528917e29fad5792e3d6d881443c"}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0xfb5, 0xf, 0x80, [0x101ff90, 0xff3f00, 0x0]}]}}) syz_usb_control_io(r2, &(0x7f0000000900)={0x18, &(0x7f0000000740)={0x40, 0x22, 0x45, {0x45, 0x15, "c1cedc9d84e56530f0fca91be5c8b52e6997dd677c8566ec09b72237b92bf29fb485df6fcb8265fda4f48ff91a394c31f57725c2c6dd6ef10ce0dfb208cd56036888f1"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000800)={0x0, 0xf, 0x5e, {0x5, 0xf, 0x5e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "9ea2c88d79dff6fb6c79d1ff056b42a8"}, @generic={0xf, 0x10, 0x2, "96e3612d818acbe38b28d52c"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x4f, 0x3, 0x59, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "54d72bcced41d6f30120b4c2a04453b7"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "550a2f25e7bfdf142b017fb296c605d2"}]}}, &(0x7f0000000880)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x80, 0x8, 0x2e, "086f8584", "85759c54"}}, &(0x7f00000008c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x10, 0x3, 0x5, 0x75, 0x846a, 0xfff}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000940)={0x0, 0x0, 0x4e, "1479b0326cacd650bec1f7146a89ba5e9e843836f93284f8710c561c41015bddbf69047401423483b5f285d286d6a157722c8c48878d47d00c4a711e8ea1b3ccdcc870b656dda7ca10d140dd01a8"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x200, 0xba, [0xf0f0]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "8d2d"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0xff}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "f131"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x3d}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0xc, &(0x7f0000000000)={0x40, 0x24, 0x4, {0x4, 0x5, "f446"}}, &(0x7f0000000040)={0x0, 0x3, 0x9e, @string={0x9e, 0x3, "4da1225a6e4a4fb89f7cb6c617d26e72082649182290569aa6a1737c834afedaacdf6ccadab6906f3610a0b0938197047212a3c9e9cf401c06fb5e09a84124ddd865f94b8da5df2a80c4811a8f13c6a0a205519ec24ee7e111f2cecc9ff55f178c02a1ab4eb6362ab67967aa8699be8ba9ae87f81586a4e10069432f9871be9487095d974cd5d7abb139d233069c289e4e81846667e78196a6fe552f"}}}, &(0x7f0000000440)={0x24, &(0x7f0000000200)={0x40, 0xe, 0xdb, "3d7b0ee2bb6f9b1e8a9d133a508050e6b33a55e22eb75ff0efe92e53918e6f5764f0cee220c8462daf283e532085e98a9a1537cc25a63a1ff49463e4411be383cf499a2688683e626791f2564b3528821cbbedb1328322bae11508fe172dee902718021e6527bb250553cae14c0d590f2c430c76b2a1de5d8a0680e9af02d34d26ee3b72de0f362b277f60834c97db10e5fdbd77eadcd23c86d3d0e2254bf2182730a22c2623da54f83211d39750446e0cb1ced3e0a3ca8ca1b12a1e5d943d91bcafb23b3c98e4e51bdee249a08f296b6e0acdcacd512f0554ab1c"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000300)={0x20, 0x81, 0x3, "ce6236"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "629346"}, &(0x7f0000000380)={0x20, 0x83, 0x1, 'b'}, &(0x7f00000003c0)={0x20, 0x84, 0x4, "2df9537e"}, &(0x7f0000000400)={0x20, 0x85, 0x3, 'cku'}}) 00:34:02 executing program 5: syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00') 00:34:02 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, 0xfffffffffffffffe) 00:34:02 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:34:02 executing program 4: select(0xffffffffffffff57, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 00:34:03 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 372.017235][ T7] usb 3-1: new high-speed USB device number 44 using dummy_hcd 00:34:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:34:03 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r0, 0x11, 0x0) 00:34:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x64, 0x0, 0x0, 0x180}]}) 00:34:03 executing program 4: perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:34:03 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 372.601567][ T7] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 372.629807][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.642180][ T7] usb 3-1: Product: syz [ 372.648122][ T7] usb 3-1: Manufacturer: syz [ 372.655513][ T7] usb 3-1: SerialNumber: syz 00:34:04 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 372.908263][ T7] usb 3-1: config 0 descriptor?? [ 372.966943][ T7] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 373.174679][T11697] udc-core: couldn't find an available UDC or it's busy [ 373.182368][T11697] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:34:06 executing program 2: syz_usb_connect(0x0, 0xac, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0x64, 0x7d, 0x40, 0x2013, 0x257, 0xdf55, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe, 0x0, 0x0, 0xdb, 0xe8, 0x45, 0x0, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "dca6f7ca"}, {0x5, 0x24, 0x0, 0x3600}, {0xd, 0x24, 0xf, 0x1, 0x7dd2, 0x7ff, 0x0, 0x81}, [@obex={0x5, 0x24, 0x15, 0x3}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x69b, 0x1}, {0x6, 0x24, 0x1a, 0xfff}, [@country_functional={0xe, 0x24, 0x7, 0x4, 0x20, [0x6, 0xff3, 0xf800, 0x3]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x9, 0xfffd, 0x4c, 0x4, 0x3, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @obex={0x5, 0x24, 0x15, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x403}]}]}}]}}]}}, 0x0) 00:34:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8955, 0x0) [ 374.668350][ T9236] usb 3-1: USB disconnect, device number 44 [ 374.688768][ T9236] keyspan 3-1:0.0: device disconnected 00:34:06 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={0x0, 0x0, r0}) 00:34:06 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r0, 0x4, 0xfffffffffffffffe) 00:34:06 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x2}, {0x6}]}) [ 374.914116][ T35] audit: type=1326 audit(1621038846.239:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11746 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 375.192931][ T35] audit: type=1326 audit(1621038846.379:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11752 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f8b549 code=0x0 00:34:06 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40086602, 0x0) 00:34:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x3}, {0x6}]}) 00:34:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:34:06 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 375.676511][ T7] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 375.726568][ T35] audit: type=1326 audit(1621038847.049:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11768 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff2549 code=0x0 [ 375.840571][ T35] audit: type=1326 audit(1621038847.109:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11769 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 375.869613][ T35] audit: type=1326 audit(1621038847.139:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11752 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f8b549 code=0x0 00:34:07 executing program 3: perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 376.069437][ T7] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 376.078783][ T7] usb 3-1: config 0 has no interface number 0 [ 376.238863][ T7] usb 3-1: New USB device found, idVendor=2013, idProduct=0257, bcdDevice=df.55 [ 376.248401][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.260018][ T7] usb 3-1: Product: syz [ 376.264603][ T7] usb 3-1: Manufacturer: syz [ 376.270379][ T7] usb 3-1: SerialNumber: syz 00:34:07 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x4}, {0x6}]}) [ 376.548388][ T35] audit: type=1326 audit(1621038847.879:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11768 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff2549 code=0x0 [ 376.574996][ T7] usb 3-1: config 0 descriptor?? [ 376.641318][ T7] smsusb:smsusb_probe: board id=21, interface number 14 [ 376.846948][ T8460] usb 3-1: USB disconnect, device number 45 [ 376.947477][ T35] audit: type=1326 audit(1621038848.269:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11790 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 377.616536][ T8460] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 378.037391][ T8460] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 378.045712][ T8460] usb 3-1: config 0 has no interface number 0 00:34:09 executing program 2: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="66b9800000c00f326635008000000f300f5522b80d008ed0ba6100b80700ef2ef2dfeb660f381ef266b9220b000066b8ecd738a666ba000000000f30ba2100b0e7eeb807008ec8660f71f402", 0x4c}], 0x1, 0x46, &(0x7f00000000c0)=[@efer={0x2, 0x100}, @vmwrite={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffade7}], 0x2) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) 00:34:09 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x24}}, 0x0) 00:34:09 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x15}) 00:34:09 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 00:34:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x5}, {0x6}]}) [ 378.566715][ T8460] usb 3-1: New USB device found, idVendor=2013, idProduct=0257, bcdDevice=df.55 [ 378.576929][ T8460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.585790][ T8460] usb 3-1: Product: syz [ 378.590413][ T8460] usb 3-1: Manufacturer: syz [ 378.989639][ T8460] usb 3-1: config 0 descriptor?? [ 379.021061][ T8460] usb 3-1: can't set config #0, error -71 [ 379.071889][ T35] audit: type=1326 audit(1621038850.399:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11810 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 379.147944][ T8460] usb 3-1: USB disconnect, device number 46 00:34:10 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000200), 0x0, 0x0, 0x0) 00:34:11 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:34:11 executing program 4: clone3(&(0x7f000000d940)={0x12001000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:34:11 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x6}, {0x6}]}) [ 380.386591][ T7] usb 3-1: new high-speed USB device number 47 using dummy_hcd 00:34:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') fork() pread64(r0, &(0x7f0000000a40)=""/59, 0x3b, 0x5) [ 380.544410][ T35] audit: type=1326 audit(1621038851.869:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11835 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 380.963168][ T7] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 380.976687][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.985232][ T7] usb 3-1: Product: syz [ 380.990317][ T7] usb 3-1: Manufacturer: syz [ 380.995163][ T7] usb 3-1: SerialNumber: syz [ 381.198565][ T7] usb 3-1: config 0 descriptor?? [ 381.250538][ T7] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 381.458648][ T9236] usb 3-1: USB disconnect, device number 47 [ 381.471166][ T9236] keyspan 3-1:0.0: device disconnected 00:34:13 executing program 2: vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000240)="fc13cf9b087790a0da08a12891b6a39989086ee466a0e159c25b76c1b627e0fbd3f620522c658ae6d7377d4d3e8f9342f105076145bb43336b115cc7997c3642c04dee81904f54420f", 0x49}, {&(0x7f00000002c0)="493ee87924df322f4ea5694a5187f09679e76ef83fd75a50d958b4de6268094b0c313ac50a1d91b6b1f3085ed5d11e61dee7ae9d5f76ae8db1bc9a097068e1d38199c61cc9f4197b745347ee54bf96e3fb2bc432271d71dd2eee1d80eec181b6", 0x60}, {&(0x7f0000000340)="2515cd4386e84231a2e74c24624c0cdef6bcd8f2769ede72549ba6417b3970e4d5ec256c750a975cb756703d6ed7a8ed7615b4ea675b52c84d0c492f0d55d3eedd6b1f955a96f92118271f0017ec5c484eeb179cd2d61241da7088fb44befd488525c16d6aaebcd583c1a0b2d262c9c95cb25e63", 0x74}], 0x3, 0x2) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x2f, 0x20, 0x6e, 0x8, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x20, 0x6, 0xfff}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x31}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x400c8c0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x9d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc4, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x1000, 0x5, 0x1, {0x22, 0x99d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x6, 0x56}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x40, 0x8}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x5b1, 0x2, 0x3, 0x5, 0x20, 0x5}, 0x26, &(0x7f0000000080)={0x5, 0xf, 0x26, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0xf0, 0x7fff}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "cbbf0d3e53689fb5257d8bff90415b12"}]}, 0x2, [{0x44, &(0x7f00000000c0)=@string={0x44, 0x3, "29c5449923833f5819dc169c81ee99cc52306392dd48dc60f97d45de37768c191cc7475cc4c6c6f820e73dde37d6f3badee65923c850b1548e4598804c51a8c757e9"}}, {0x62, &(0x7f0000000140)=@string={0x62, 0x3, "252cdae809f42a3c490094739246ba0b322c3a4b1d25da14a16368aea4143c82065a29e2b3559186fb8706c830d6d600bba2bcdffdfff96cbc8a4da8a4e4625e9543fb08e2ba0a12510b359897e6a1e9f226e83a09b4921b7c715626a888b0ab"}}]}) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0x57f}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc9, 0x9, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x1, 0x5, 0x7}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x111, 0xa4, 0x1, 0x6, 0x40, 0xdd}, 0x20, &(0x7f0000000680)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "0a8bb76f064ccd08b07d177577aaf4a7"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0xf, 0x1f}]}, 0x6, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc09}}, {0xea, &(0x7f0000000700)=@string={0xea, 0x3, "31400a4b93e3a6234f1f3f32473013cdcbe279077dd2d0574212c835f3ee4e2c54f4b113f50fa0f21ab00a1f9b279b8b982e99bc34e2a3f28a9bff6aeb299458ab02c6607e034b7d21ffa43b3c138b15c39846f42aeda5eed87fd6c204160c5642be59145cef27ce174b7ad847545519e77f02a16cf3494f7e23c1bb3bd4eb37e711719750940c4fae45f648c57cdbaba2ae6e130247b1e3d00b5e65f243b69dab6e2871e4755c09f68ec5ccade7cc1668df69b12696c41665d8264e8ca31dae08c1d7400d42533bd05231b674702425d38952b07217733ae560157872981c1685aa00f2ddb9f0c2"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x408}}, {0x22, &(0x7f0000000880)=@string={0x22, 0x3, "4b358e34cbb79d4b27692273b30328111ec76a8fb3ed3b5063ade7d62ace8a5c"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0xc09}}]}) 00:34:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8901, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_ivalue}) 00:34:13 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:13 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x7}, {0x6}]}) 00:34:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x4020940d, &(0x7f0000000140)={0x0, @isdn, @xdp, @tipc}) 00:34:13 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x54a0, 0x0) [ 382.251970][ T35] audit: type=1326 audit(1621038853.579:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11868 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:34:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 00:34:13 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f00000002c0)=ANY=[], 0xcc, 0x0) 00:34:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:34:13 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0xc}, {0x6}]}) 00:34:14 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 383.037448][ T7] usb 3-1: new high-speed USB device number 48 using dummy_hcd 00:34:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8970, &(0x7f0000000100)={'sit0\x00', 0x0}) [ 383.403559][ T35] audit: type=1326 audit(1621038854.729:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11888 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 383.661109][ T8460] Bluetooth: hci2: command 0x0406 tx timeout [ 383.677862][ T7] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 383.687544][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.696471][ T7] usb 3-1: Product: syz [ 383.701169][ T7] usb 3-1: Manufacturer: syz [ 383.706002][ T7] usb 3-1: SerialNumber: syz [ 383.874086][ T7] usb 3-1: config 0 descriptor?? [ 383.931142][ T7] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 384.130799][T11880] udc-core: couldn't find an available UDC or it's busy [ 384.138523][T11880] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 384.170429][T11880] udc-core: couldn't find an available UDC or it's busy [ 384.177928][T11880] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 384.198024][ T9236] usb 3-1: USB disconnect, device number 48 [ 384.204830][ T9236] keyspan 3-1:0.0: device disconnected [ 384.988598][ T9236] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 385.556941][ T9236] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 385.567019][ T9236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.577939][ T9236] usb 3-1: Product: syz [ 385.585136][ T9236] usb 3-1: Manufacturer: syz [ 385.590725][ T9236] usb 3-1: SerialNumber: syz 00:34:17 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:17 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x101001) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='c', 0x7fffefff}, {&(0x7f0000000140)="c7", 0x20000181}, {&(0x7f0000000180)="e2", 0x1}], 0x3, 0x0, 0x0) 00:34:17 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11a80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2874, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:34:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x14}, {0x6}]}) [ 385.845711][ T9236] usb 3-1: config 0 descriptor?? 00:34:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8927, &(0x7f0000000100)={'sit0\x00', 0x0}) 00:34:17 executing program 2: syz_usb_connect(0x1, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xf4, 0xa0, 0x2d, 0x40, 0x1b3d, 0x157, 0x7a9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xf0, 0x0, [{{0x9, 0x4, 0x8, 0x0, 0x0, 0x26, 0x45, 0xaf}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xb0, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x3, 0x1, 0x5, 0x20, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1ff, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x1, 0x3, 0x6, '*', "c3af96"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb2, 0x2, 0x5a, 0x81, "e52765", 'a'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x33, 0x0, "82cd10"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x5, 0x2}, @as_header={0x7, 0x24, 0x1, 0x9, 0xd4, 0x1}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0x0, 0x4, "16d7ad", "6a977e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x6, 0xe6, {0x7, 0x25, 0x1, 0x0, 0x5, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xab, 0x0, 0x38, {0x7, 0x25, 0x1, 0x1, 0x4, 0x6}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x6, 0x1, 0x5, 0x40, 0x1}, 0x17, &(0x7f0000000140)={0x5, 0xf, 0x17, 0x3, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x4f, 0x0, 0x22, 0xf0f, 0x7}, @ptm_cap={0x3}]}, 0x4, [{0xff, &(0x7f0000000180)=@string={0xff, 0x3, "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"}}, {0x2f, &(0x7f0000000280)=@string={0x2f, 0x3, "a50b6a0d397f23f478980d4fdd50658ab7777b64a18202294a57e4e8090d90d995a845d8ba0528a0d056fd8243"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x446}}, {0x5e, &(0x7f0000000300)=@string={0x5e, 0x3, "0df87bfca2adb8a00b9cd639c56ab687cf190164599e0f1642a0a5944d6d2aff1c1498e9be90b1ae826828bde493d76531c02442252d01486c1685e2963311276d7f261e933fc2583c0e80337eae18802dd571cadb2ad65ba6e7f71c"}}]}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x220, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0xc0, 0x7, [{{0x9, 0x4, 0x0, 0xca, 0x1, 0x3, 0x1, 0x1, 0x81, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x739}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x5, 0xc1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x0, 0x80, 0x7f}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x3d9, 0x7, 0x6, 0x9, 0xff, 0x81}, 0x19, &(0x7f0000000440)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "753a0fb308eaa29adb768a9e7c504e2f"}]}, 0x6, [{0xd0, &(0x7f0000000480)=@string={0xd0, 0x3, "5d896cb46dcd256697756edc8716f1c11ceb9fb4f10be5d4e0c372299264084a4e20733c0ab84d0fae8f60831daed58b630c52a1b479dbc9627e3d755bbd66c80fc4f6ca1cf8a2c9b4f5e07d47b14db4cecb0b145f361f919c22760857cacef89ce9251d3e94a13087cb8d554979464a1a4f3883d4cb05213de1e944357d4b164e9191b78288e2004fd9284d673513439f07e955101a2bc17d1d04686bf6ca304a4363738bfac04d392a053356d825ff819307205f53e28a7b9e542022e4d06e7cb9195ae671377a0021c143527b"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x807}}, {0x3c, &(0x7f0000000640)=@string={0x3c, 0x3, "8aba95dbaae7411fbec731034f08ae800565fa8dc3e116bd11dd53418782e5831a7711f9930870f56319c3ec5b0cb042e782b027bbf5c76cc5ea"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x44c}}]}) [ 385.966585][ T9236] usb 3-1: can't set config #0, error -71 [ 386.078241][ T9236] usb 3-1: USB disconnect, device number 49 [ 386.325593][ T35] audit: type=1326 audit(1621038857.649:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11921 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:34:18 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x64, 0x0, 0x0, 0xcad}]}) [ 386.711325][ T3123] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.727180][ T3123] ieee802154 phy1 wpan1: encryption failed: -22 00:34:18 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r0, 0x5, 0xf04a00) 00:34:18 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r0, 0xf, 0x4af000) 00:34:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x15}, {0x6}]}) 00:34:18 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 387.271618][ T35] audit: type=1326 audit(1621038858.599:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11939 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 387.306463][ T9236] usb 3-1: new low-speed USB device number 50 using dummy_hcd 00:34:18 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x101001) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) [ 387.556688][ T9236] usb 3-1: Invalid ep0 maxpacket: 64 [ 387.706731][ T9236] usb 3-1: new low-speed USB device number 51 using dummy_hcd 00:34:19 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40045402, &(0x7f0000000200)) 00:34:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x16}, {0x6}]}) 00:34:19 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) [ 387.967318][ T9236] usb 3-1: Invalid ep0 maxpacket: 64 [ 387.973409][ T9236] usb usb3-port1: attempt power cycle 00:34:19 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:19 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0xc0502100, &(0x7f0000000100)) [ 388.330289][ T35] audit: type=1326 audit(1621038859.659:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11957 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 388.716455][ T9236] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 388.848635][ T9236] usb 3-1: Invalid ep0 maxpacket: 64 [ 389.046446][ T9236] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 389.184279][ T35] audit: type=1326 audit(1621038860.509:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11974 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff2549 code=0x0 [ 389.197830][ T9236] usb 3-1: Invalid ep0 maxpacket: 64 [ 389.264915][ T9236] usb usb3-port1: unable to enumerate USB device [ 389.983849][ T35] audit: type=1326 audit(1621038861.309:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11974 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff2549 code=0x0 00:34:21 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x458, 0x153, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x190, 0x5, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0x575}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7, 0x40, 0xfb}}]}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x300, 0x0, 0x20, 0x0, 0x10, 0x4}, 0x172, &(0x7f0000000740)={0x5, 0xf, 0x172, 0x5, [@generic={0x80, 0x10, 0x1, "4f7c6ff1c427e3412dfdce4f7d96ac7243ad9451b72b65dfa8282b4b13f993e6766afe91b8dfd3f6e6553b51a46829006dfed2f827d673c22bcaab17a3f77802fc362ca34dd534d9e43552a55e359be6e5ad78a36f574ca32d622750f8e042941ea1e415153811c91b78c04eb4030c385af092e5a88f5beb06b196aefe"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x9, 0x20}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0xa4, 0xf00f, 0x9, [0xff00c0, 0x180f0]}, @generic={0x43, 0x10, 0x1, "a3ef1ab3e29f31ef67b284bc5cf9a3e9c5355b0043f6e17eb35726e574295169c5b54208a031f8812f89ec7edc8004c1fe1fa07a9e7129a874694b4616cd672c"}, @generic={0x8f, 0x10, 0x1, "89b8ed2cee39ba1f45a9cbaf4ff2092c3e95105d024541b7bd8c8e4c754a3a2ecf88198c4bff60bb942c285b77f5852a7fc5b94944425e3e4662f96fc69d57c71d4829ab63c2f35c37348d6a01110fb5adde7ce66256090a027810533b3d69f1f69cadf6a807836d23c557336b7118b52c7e9e0991bf5717ab53285a2de2a57cc778fafbb2b393d3f284379c"}]}, 0x9, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x458}}, {0x8e, &(0x7f0000000900)=@string={0x8e, 0x3, "bbfd3a686919f50de3e61053ce0f46891e4b8c03c340e18d68714a97a8fd73656a50e535187ca9522eebc95d9752afb6ebd27f69028b91e0104d488495471a15a9870f4356daaa9df5092aa49df2c43469efc25ac67a1e34ce74c937f2b48f65b79a465f2ba70783194f1e0bfdf2fb0c577fea3de89864443faf308f017cc7d029ca00f617760d550670dca9"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x412}}, {0x93, &(0x7f0000000a00)=@string={0x93, 0x3, "61221b130e159a7ccfac58540c9da5f2547afc5b65bc87f0f28ffe8e5e4e6ec682123041bc92da2cf1eef0146060e7664b065147a5e6d055db032a4f831567071508999326f9a43eaf10709a8b0d4fa76b5b8bb33aef766ccfba1bab75fd5b45cdcdc0593d8fd15477e807bc4866e020e514e57d4745847aae01638c95546fca8bbbe2b08b30412b77efe8a3b77e803029"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x810}}, {0x7e, &(0x7f0000000b00)=@string={0x7e, 0x3, "d922ce49f5c0e8a81126aef427b88d0d8c21d942cb708eafb75f56d5ad0b167f732f6e6c8b70dbda5183ad908dfba5a91aacdb8a5c8e892c0b0a3262866d8f7487b38b1a8a688d370f33ba749ffb7133cddc1987cbf7c46b8c89a4668c0684cb44ecf9f5c1ac2d5651d3cc56aa05209db5e418ea75eb0e99ef8f195b"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x82c}}, {0x9a, &(0x7f0000000bc0)=@string={0x9a, 0x3, "43723323b31270fe3a93487d2c4f3b005d30f54cf9719ab99f63526a14a5e117af4aea278713679276c5ce5096d79d2226de26595fd2dc39cc1280927a273114d4f87d4eb5b332b48a711255236315f66bbcff832e8cac7672be597696cec391cce09e4e8f7d2711b6c8d3be60c12869d95893b3ae4e3c461c0f2997365ca711173f98c0e81b7cc34f9abcc74b116ebbe35bc4ba82e7abef"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x439}}]}) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000000)={0x20, 0xd, 0xc6, {0xc6, 0x23, "fbf6113266285e328a3c21093223988834071cf71d400ee039d876b158d8ba33f4e99f54228e5ba01d56f5b66f4afbcd0eb4014815f047177fe72d2c5df0790a1da986a94540426fd0eeb5ad22ffe2818f7df2b335ba5ad41b736f8bfeb4b45329361a58c42cdccf92dd535f39c361aa93d452897a2416f095fc8cb9acc43d6e7633c8ec49d564b4b306b96d4d079ef438b61510cec2158f7892f67afe5563e06740f109380c7d68870e49e05d7cd8dce7a27084ad368a04c1fb2d186e7b546058212fe3"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, 0xffffffffffffffff, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0x8, 0x4, "764aef57", "5bec9b03"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x3, 0x1, 0x7f, 0x3, 0x1000, 0x100}}}, &(0x7f0000000640)={0x44, &(0x7f0000000240)={0x40, 0x1, 0x3, "21f4e8"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x88}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x20, [0xff0]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x834}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0xfa}, &(0x7f0000000400)={0x40, 0xb, 0x2, "805f"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x1000}, &(0x7f0000000480)={0x40, 0x13, 0x6, @remote}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000500)={0x40, 0x19, 0x2, "12e6"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x1}}) 00:34:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x20}, 0x0) 00:34:21 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x1c}, {0x6}]}) 00:34:21 executing program 3: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup2(r0, r1) sync_file_range(r2, 0x1000000, 0x0, 0x6) 00:34:21 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 390.680354][ T35] audit: type=1326 audit(1621038862.009:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11982 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:34:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', 0x0}) 00:34:22 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup2(r0, r0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x0, 0x0, 0x0) 00:34:22 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x1d}, {0x6}]}) 00:34:22 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:22 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x5423, 0x0) [ 391.517006][ T2056] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 391.579173][ T35] audit: type=1326 audit(1621038862.909:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12004 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:34:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8913, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_ivalue}) [ 392.039511][ T2056] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 392.049537][ T2056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.058365][ T2056] usb 3-1: Product: syz [ 392.062682][ T2056] usb 3-1: Manufacturer: syz [ 392.067576][ T2056] usb 3-1: SerialNumber: syz [ 392.278509][ T2056] usb 3-1: config 0 descriptor?? [ 392.338159][ T2056] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 392.522721][T11997] udc-core: couldn't find an available UDC or it's busy [ 392.531712][T11997] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 394.282331][ T9236] usb 3-1: USB disconnect, device number 54 [ 394.289400][ T9236] keyspan 3-1:0.0: device disconnected 00:34:25 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x21}, {0x6}]}) 00:34:25 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:34:25 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) accept4$packet(r1, 0x0, 0x0, 0x0) 00:34:25 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x40082404, 0x0) 00:34:25 executing program 2: syz_usb_connect(0x5, 0xfffffffffffffec9, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xfc, 0x14, 0x48, 0x10, 0x19d2, 0x73, 0xd11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb88, 0x4, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb0, 0x2, 0xc, 0xff, 0xff, 0xff, 0x24, [], [{{0x9, 0x5, 0x5, 0x8, 0x0, 0x58, 0x1f, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xd295}]}}, {{0x9, 0x5, 0x5, 0x1a, 0x40, 0x3, 0x30, 0x2}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x0, 0x0, 0xff, [@generic={0x26, 0xf, "316bee683890b3542ab359c3f3df5dbc2974f437dbd45857b03732220d5eeb8c4127977d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x87}]}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x0, 0x8, 0x0, [@generic={0x9a, 0x4, "908a2206c5a52955a1d424fc6543e2273fba5fdb4216c051be07a4eca289bc6089b410b2f4eeeb05fbd9cd2b7cc528183cb378b9306af81803124923a708df9cafcf216c476c0f94f58d7a7c8546322aae17899cc78ca0bf54d51c1859fe23c33005dba4ba67ffacb4347fb144ec535b560c271336f287a94a909e10d61b24293dba66a3b4ce5521da380692251d3c631cc6b2718c809bb6"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x3, 0x33, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0xffff}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x0, 0x81, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x3, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x4}, @generic={0xb5, 0xe, "2db363eac9ce56d47b3e6717c0be67fc86e4dfbd4de86b393fa658fc8086364b90f9786bcdbcbe215c396f29fe3345baec431a5f532bf64c154400aa612efbd073510d1844ded3e8324d06fdbd49796c92818ca864dbe43f120c800f7f0818782680c651336668b3dbab86d2fe89fdd47b6175f88cf1519daf0f6bb46a78cd7ea423bcbb1458556acf6f3ff5a1c6a3cc1cc01f4dd43696b16a826a9b7a247b4ffa01c13b1b246c78229eb835cc52c8e642fa7b"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x80, 0x2, 0x8, [@generic={0x56, 0x9, "31cc4b305ed2e943bf30885287a822fd6b2b1e50a805906d62684309a0fff54e3f2d32e779d46ecd430db69553391760001b7bc2379cc96c84afa965ed9043758996bd6a4d730d11052da528f03ba3f29426bfad"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x81}]}}, {{0x9, 0x5, 0x8, 0x4, 0x0, 0x3, 0x4, 0x20}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x3f, 0x80, 0x5}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0x1f, 0x70, 0x7}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x4, 0xa5, 0x4}}]}}, {{0x9, 0x4, 0x83, 0x50, 0xa, 0x87, 0x13, 0x7c, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x4}, [@selector_unit={0x6, 0x24, 0x5, 0x1, 0x1, '|'}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x305, 0x6, 0x6}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0xd5, "cb71c864"}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x8000, 0xb2}]}], [{{0x9, 0x5, 0x80, 0x2, 0x428, 0x40, 0x0, 0x0, [@generic={0x86, 0x3, "f1d3c926ee6de010403eba7b0f77e7b715d4b620817e11cb21fc469c13670bc5ca0d8856c78997ac3647c535e566811223a0a3c35d5275bb5349085ae3d2a7bacaca4f4c9f1234c8142d24a7e648c855756556cd0a00720f4d3ebcd1ee5f9d27d50fc16b705b34cd1009dc8f052b3bfa10b36ef86074e1fb6caf453f5f3fe523931ce059"}, @generic={0xea, 0x8, "0d8f711ef22960a07c3b49ef90a9296eeb7ce97905c312347735f55622673d1f276b1067e14f622072b1fa3d15f6e9a8d92d8e33aeacf264b8748285abe9d6fd124fa5e4b0076c3b3fda9d5bb1c9c953b9a70bc7fde61778051c9384c0d1fa1f94cdde3b776540485109719f6ac7190fefdbc7c939f9a52d49167a64ef64041ea2b8b7bc683f46d737f49b853931795d6ea39da6646ae0d2e023ef6abc42c0bcaa98aefa8831c711ac13092919a649ec85d819db394a8abf513466ffccb22154dea35d63c43251c1a6cb73b535a7d0624ff705a08a0fb1894ddca803882d9302807aba81b2f89190"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x7, 0x20, 0x80, [@generic={0x101, 0xa, "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"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x1, 0x1, 0x19, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7f}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x81, 0x9, 0x98}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x81, 0x20, 0x0, [@generic={0x76, 0x11, "c7525f9b7406d12ee380c93603817a49061b9001f843c3c9a9d9629a332da09caf729c20e966c3f47a3ce26605a66fbea65c49df4ec2cfc608b790a59bf35f051c1c4aef9f00a6ac0798e6365245222025ff5f9d88d389ca71330571ae4178c682082c98098e7d659033ca0c15e56c4d918477de"}, @uac_iso={0x0, 0x25, 0x1, 0x82, 0x0, 0xfffa}]}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x0, 0x4, 0x1f, [@generic={0x97, 0x23, "e5edcf01ef3dda3b50e2ec2e5736f1697bb312f693455350b0015ead71757b00867107f3721022f349f66eedc4efa986bb483b4dde9bbdbe418befc2c9dfaa9b87a7b280d2218ba8d454966187f00f3130182d4a950ef72768b3ec2b6ce4c19155a0e0b18ad089aa04513cbce37829c86687e2fb9fce91fee8aef7db590ef61088c2d773f6afd6746b54ce773912db32ab5b627206"}]}}, {{0x9, 0x5, 0xe70312a232413ee5, 0x3, 0x220, 0x9, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xffff}]}}, {{0x9, 0x5, 0xb, 0x10, 0x0, 0x5, 0x5, 0xdd}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x81, 0x2}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xce, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x81}]}}]}}, {{0x9, 0x4, 0x77, 0x4, 0xb, 0x3d, 0xd2, 0xa1, 0xf1, [], [{{0x9, 0x5, 0xa, 0x0, 0x400, 0x80, 0x1, 0x8}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0xd5, 0xff, 0x18}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x4, 0x3, 0x1, [@generic={0x98, 0x11, "b932e8562bea1e49440f0391a5331aa081a8d85b816eb647d0eaa7ce4cdedca28d7b4fa288024c9a8ebb6d4b2cd69abb1b608d49405841bcad272f4b0baf833a7f1b7a68b43b2e117a06ab5c2aa1691419f5937b2506a2c16156e998a72a9e85075e585286ca07bf9a0d922bd1c645523e3b7f09e3309734fb22f4fbf1596783d8fcda89747b450cc7f9697bc4a915c4707e4ed0032f"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}]}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x3, 0x3f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x0, 0x4, 0x9, [@generic={0xe3, 0x22, "1a8a74e26bce58fc1e6dcb9e9d5db855beefb45b4015e4f6fa7c1d32f307deebb42a2b28437f4b5131442ab224b81e075fb90e4de8ddc1a939a52472049ae9324d7eb0c238017f95252e09976312567c58bf46cf15c94763b6207dc70bdd18ed1e152e69a1a705f4b19d333125c3f4a14626b7316dde2353886971ea4e71db5d0c7468f08b735fffaa9aa61b7f54d72a1d5032f8895232c65634f4517810304fd066567e5edcf39a00c8a3146e59e126557f8baf201c33fa60e6f9fd19f58196d26e2d1b8591a633f96a56ee004da3907afe98ab8d0b50d8d03fa6975a19e83156"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x2, 0x8, 0x0, [@uac_iso={0x0, 0x25, 0x1, 0x80, 0x7f, 0x2}, @generic={0x0, 0x22, "4d254d4d38e4d698ee17812b1a3b412071fc91edebd83db001001b3e6eb7a561ba9e3e0c19f0e57467bb27ce1713358a50354fbdc1509bde96b3921c2cff49e4dec0fa7048bf75db2c3c483dbb33313486e8528a7d76326dfbd75827a52412a3c6bc56006498626f88848360f6dccfd801bbfd858709bededf81094d7cd8719552fa2662f18f0cc8"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x0, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x452}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x0, 0x7, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3}]}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x8, 0xc5, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xce, 0x2}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x6, 0x2, 0x3}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x0, 0x80, 0x2, [@generic={0xaa, 0xf, "8e74d6cb2e6578e3fb3efdf8fed79586167fcc1edd079f00d6dd92461aeebc4a26f180d7215d038a859c08a43673f257e5f25275a8b1d72c7e27eb23ebde8e3d2794884eb3377c2c1547e6f7819b4b0a26a8e51d4e0635caa6abd97084d19663d2b16623f8e9833bd936d10b5bc05318e3652859086d3464135ff044cc627633b84f30b4c482cdcddfc8eb3b89bdb46cc2a56cd0825f18884b29180d1ca8b98e9c62efae9f325894"}]}}]}}, {{0x9, 0x4, 0x8a, 0x8, 0xc, 0xe, 0x1, 0x0, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x2}, [@processing_unit={0x7, 0x24, 0x7, 0x6, 0x5, 0x1}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x3f}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0xe19cdf9693ccad8d, 0x2, 0x2, 0x70, 0x80}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x6, 0x1, [0x0], 0x3f}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x1, 0x81, 0x80, 0x40, 0x10}]}, @generic={0xaa, 0x0, "2c28575bfe7925c4e6614eb2d70257ad802684b31ee76bfcb82cbe7545804383e217090b3f590b7ac099edb31c50ab7e1fc76be963008cec7de2efab83d4836ec548053eec515a26968bdbac8ad3822b0b19c2fe427ac0e853568811c95f2d617badc6199927bf4a51de90b2a14d38199694ee1002dcca2a47a82c98f3e2c77947f4721961209a6174917f39beae05be6ee0520cebd7bdf3fffa585b61ca197ebd901e1c8b7aae04"}], [{{0x9, 0x5, 0x3, 0x8, 0x40, 0x6, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xc3}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x7f}]}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x81, 0xb7, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x20, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1b, 0x2}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x17, 0x4f}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x1, 0x9, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x25, 0x5}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x4, 0x4, 0x4}}, {{0x9, 0x5, 0xc, 0x8156a8180254c19f, 0x20, 0xd6, 0x6, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x3}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x7c, 0x7, 0x3}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x81, 0x65, 0x9, [@generic={0x12, 0x31, "2a6d2649ce86c3ab130988dea8d87946"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x1, 0x1, 0x7}}, {{0x9, 0x5, 0xb, 0xc, 0x48, 0x1a, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x79, 0x8001}]}}]}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000dc0)={0x18, &(0x7f0000000000)={0x0, 0x77, 0xe8, {0xe8, 0x4, "68a382abcc8f693b8672a232b006d18a77b33d26c32ede66e2f83c71bf575d391fe3c9e5410d2464b5b088a11ef36024c518222a0a82fb87bea78838c317d3afbe8d0f016ac7632e1b13417d2e196b041dfb2ff9b6255d221c7b23c0d9b86e2773f61445a4b2432afbfcccf1d2c0a29997b6e349ec25302d6a1af233d426c4361851e28bd0f35f06286b96be498c82bb9bb0b8711293bedb4404fc3a8006dfed19e13152884caf7fa6e14853b8f9172c78a12e7ed01a947eb010890c50264a078b325ad2e57d46a1cb2e326bb9f752f879ebe6b0ed9bce4db42f4a7fb2f70d1e9b3f0a584251"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f0000000140)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0xd, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0xd, 0x631}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xfa, 0x8, "2e56f040", "9534c245"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x33, 0x9, 0x4, 0x101, 0x7ff}}}, &(0x7f0000001240)={0x44, &(0x7f0000000e00)={0x40, 0x1d, 0x73, "9c491e13b766d813476f4351241ecf1c837cef7c9021b2ca6b32655877210fbc2526cbd75ef5c528df37012f3674983623bfdec9c6acbd4c79f3b763ad031375baf23cfedd21d31d446bab51b1f250362415dbc77125e5f12255b0463d19a0fb840116c60327e2234a41f7be5960c21d03e3ab"}, &(0x7f0000000e80)={0x0, 0xa, 0x1}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0xa6}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000f40)={0x20, 0x0, 0x8, {0x60, 0x0, [0xf00]}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000001000)={0x40, 0xb, 0x2, "ed01"}, &(0x7f0000001040)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001080)={0x40, 0x13, 0x6}, &(0x7f00000010c0)={0x40, 0x17, 0x6, @random="19dd71bf1a23"}, &(0x7f0000001100)={0x40, 0x19, 0x2, "aeb9"}, &(0x7f0000001140)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000001180)={0x40, 0x1c, 0x1}, &(0x7f00000011c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001200)={0x40, 0x21, 0x1, 0x2}}) 00:34:26 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x101001) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 00:34:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x24}, {0x6}]}) 00:34:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8921, &(0x7f0000000100)={'sit0\x00', 0x0}) 00:34:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f7, &(0x7f0000000100)={'sit0\x00', 0x0}) 00:34:26 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 395.382609][ T35] audit: type=1326 audit(1621038866.709:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12049 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 395.476315][ T2056] usb 3-1: new high-speed USB device number 55 using dummy_hcd 00:34:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='statm\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100000000000000}) [ 395.717844][ T2056] usb 3-1: Using ep0 maxpacket: 16 00:34:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x28}, {0x6}]}) 00:34:27 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x60, 0x0, 0x0, 0x180}]}) [ 395.937481][ T2056] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 395.945642][ T2056] usb 3-1: can't read configurations, error -22 00:34:27 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:27 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r0, 0x6, 0x4af000) [ 396.146369][ T2056] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 396.446271][ T2056] usb 3-1: Using ep0 maxpacket: 16 00:34:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x2c}, {0x6}]}) [ 396.607637][ T2056] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 396.616873][ T2056] usb 3-1: can't read configurations, error -22 [ 396.722951][ T2056] usb usb3-port1: attempt power cycle [ 397.096482][ T35] audit: type=1326 audit(1621038868.419:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12078 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 397.466532][ T2056] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 397.559330][ T2056] usb 3-1: Using ep0 maxpacket: 16 [ 397.716697][ T2056] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 397.724943][ T2056] usb 3-1: can't read configurations, error -22 [ 397.887265][ T2056] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 397.977137][ T2056] usb 3-1: Using ep0 maxpacket: 16 00:34:29 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x60, 0xcd, 0x6f, 0x40, 0x1410, 0xa002, 0xcf49, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x15, 0x0, 0x0, 0x4b, 0x5a, 0x24}}]}}]}}, 0x0) 00:34:29 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x101001) pwritev(r0, &(0x7f0000002640)=[{&(0x7f0000000300)="0c4bdc9cc91b7290582853bbf6ecb0fd5c722f98ba2c18d86ad8d24ed727d214fb2331a7057d17ee07fb85ba585da9afdba6885ea4fc", 0x36}, {&(0x7f0000000380)="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", 0xf68}], 0x2, 0x7, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 00:34:29 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)) 00:34:29 executing program 4: perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x334c, &(0x7f0000000680)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000700), &(0x7f0000000740)) 00:34:29 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x2d}, {0x6}]}) [ 398.280788][ T2056] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 398.289223][ T2056] usb 3-1: can't read configurations, error -71 [ 398.396361][ T2056] usb usb3-port1: unable to enumerate USB device [ 398.517466][ T35] audit: type=1326 audit(1621038869.839:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12089 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 398.754614][ T35] audit: type=1326 audit(1621038869.929:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12090 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff2549 code=0x0 00:34:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x8}, 0x0) 00:34:30 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x30}, {0x6}]}) 00:34:30 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000180)={0x0, 0x0, 0x1000}) 00:34:30 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000000)={[{@max_batch_time}]}) [ 399.336562][ T2056] usb 3-1: new high-speed USB device number 59 using dummy_hcd 00:34:31 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r0, 0x7, 0x541000) [ 399.709830][ T2056] usb 3-1: unable to get BOS descriptor or descriptor too short [ 399.735551][T12130] loop4: detected capacity change from 0 to 1051 [ 399.782018][ T2056] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 399.790125][ T2056] usb 3-1: can't read configurations, error -71 [ 399.859398][T12130] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 399.963320][T12130] EXT4-fs (loop4): orphan cleanup on readonly fs [ 399.970262][T12130] EXT4-fs error (device loop4): ext4_orphan_get:1412: comm syz-executor.4: bad orphan inode 33554432 [ 399.981783][T12130] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 400.586222][ T2056] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 400.946324][ T2056] usb 3-1: unable to get BOS descriptor or descriptor too short 00:34:32 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e186f240cd0613014b14010203010902120001000000554d2723a381d9754000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000000)={0x40, 0xa, 0x96, {0x96, 0xd1b29ce12bc18788, "7b939c337dfedf3afed2ecd96e83e9455931706427f57f81625e63a0956619e891171e06a98e180135f573b5a8155e0b58d95ee7f56ea25d830dd59d6234e96f21811d9c360407f6b31d081475d38da63d00410b70bcdcc271fd7fb4a902d3360cd964a39650d9b01efbfaa1c2e5a2161f15d756bf939d0cee519970b107e2235665ea012facee3dfeb4a640de2e75796060fe0b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000100)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x2, [@generic={0x16, 0x10, 0x2, "89286ff8d4053b2a1be5d942c7031fbf3b950f"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x24, 0x20, 0x3, 0x6c3, 0x4}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x78, 0x80, 0x9, 0x7, "7e0a39ab", "cb0b5717"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x20, 0xb6, 0x8, 0x7, 0x6}}}, &(0x7f0000000680)={0x44, &(0x7f0000000240)={0x20, 0x16, 0x51, "5c2d9a27ba84ab56bb50c8a2cf670e09ba25ec67832927f6e163e4ea327f35d741d0c88d6090313e43c302dc65eb7945e84b7702c41ad53764ca4f86a26f2e49f9a861668039204f1f96d34fb6d2f1183e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0xa0, 0x40, [0xff88]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x3c2}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000440)={0x40, 0xb, 0x2, "1598"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x19, 0x2, "3acb"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0xc0}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x40}}) syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, &(0x7f0000000700)={0x0, 0x31, 0x7c, {0x7c, 0x6, "3d36dc3c660ab8132b86d87c04f952b3ed0818603c9a7019c74ecc1cb1b964455bf61e6c5c93e7c35b389193f93f6be09b169b64278c09f42d64bb41a23cda37d752b46b35bd5cf58b395e5a4ad0e901d2cfdf5fc249f7975827f8adaed485ac46a6c1546c798f2d6857416a0ef9de1c0871a6f1afd16ea25a93"}}, &(0x7f00000007c0)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "0f6df44ec30f7b29cf1a2eefbfcb6e51c417763201dc4004efdbb832e2d2a15ddbb9bdb820f1018239c240178d04027939d62e6975d21b0735823c198a01a4196b9cf7bdaf80de49f813a4f9eeb604ff07c5f6cbfc4f29c2106e8054071f60ff14161477a928a9013c90c09437841abebca96bf9f5a6b38bd90b"}}, &(0x7f0000000880)={0x0, 0xf, 0x1dd, {0x5, 0xf, 0x1dd, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x2, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x20, 0xff0f, 0x7, [0xff3f00, 0xf0, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x7, 0x3, 0x7}, @generic={0xf0, 0x10, 0x1, "7f1062a0e09d569a4f6f279f555540c5c6d396ff067ff93e456edd7f0e111f93675d7a253efa4e063188734ef3f8ca2657450bf286bdacb3e814354d7c92f4ccc2f258fd96f03e5ffdf309fa448d78939b50b86d771693a4ce7e9cc190c400d5f465a0d6adff794446fe201b0a5163620c4c94eb9489268ac16c577c74185cf1a5774bc6c3e92cf47e2731fc298060fbb75064bf6afa20dd06d8d0cfeec1f1e7a34b20de87b46dcc440139ff53f51f9d73f4abdb073947120343ac83879e39e38096722ad685d63e9c9127b6a903ca8a19e0f270b311bacbca455d4347f887536910ecc90f826ef9383eb4e896"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0x80, 0x5}, @generic={0xb5, 0x10, 0x3, "90ad69fb880490049bdff8d72aa7fff209c1758222c9213965d9430e2f6fb04eee70e1dd5ef5d24c36a8fddab635b9f5b54d36a0e772744ac728baacc6303dbe2284a49e3195b3902e64489b240277ef9250880fc51fd29b66d55e131f43b338c2c5dc16f8547b8fdfe24be5a4d9dad8c27255638e86562bac162b8d3ba52daade8e2f0cacaccd03dd732e999893cef3e72fe1da0149786463e9d7e206e096c5b9be4111655c8f5fdcbc8c2d43154f14ca9e"}]}}, &(0x7f0000000a80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x1, 0x6, 0x4, "7e4463e9", "da260b3f"}}, &(0x7f0000000ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x10, 0x3, 0x2, 0xff, 0x80, 0xff}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000b40)={0x40, 0x1, 0x5d, "367ebb0f19de3bc34ade68184f20aa73132da4c54409bd95de4b68f85eab02e3e6c3f7f77c174aebbac2630826439e96be06ed7dfb24da2487009203b400d17550e7c9b4b7c2c458cd2f58165ba5c4265294a41bccf19e51c558552c3a"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x87}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x1e0, 0x1}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "b2a6"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000e40)={0x40, 0x19, 0x2, '&2'}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x80}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x8}}) 00:34:32 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x34}, {0x6}]}) 00:34:32 executing program 5: socketpair(0x2, 0xa, 0x8, &(0x7f0000000000)) 00:34:32 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x24}}, 0x0) 00:34:32 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x101001) fcntl$setpipe(r0, 0x6, 0x4fd000) [ 401.036769][ T2056] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 401.046520][ T2056] usb 3-1: can't read configurations, error -71 [ 401.066252][ T2056] usb usb3-port1: attempt power cycle 00:34:32 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x2, &(0x7f00000008c0)=[{0x94, 0x0, 0x0, 0x180}, {}]}) 00:34:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8953, 0x0) 00:34:32 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x35}, {0x6}]}) 00:34:32 executing program 3: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="70871fc28064e38b6d0ea59ef8161d8e2c5b811c93bb634146dbcda877468c32b6bdfb07acc1"], 0x2c}}, 0x0) r0 = semget$private(0x0, 0x4, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)) 00:34:33 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 401.911397][ T2056] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 402.053512][ T35] audit: type=1326 audit(1621038873.369:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12168 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 402.127223][ T2056] usb 3-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 402.137957][ T2056] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 00:34:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x5452, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_ivalue}) [ 402.396189][ T2056] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 402.405595][ T2056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.414368][ T2056] usb 3-1: Product: syz [ 402.419871][ T2056] usb 3-1: Manufacturer: syz [ 402.424694][ T2056] usb 3-1: SerialNumber: syz [ 402.584841][ T2056] usb 3-1: config 0 descriptor?? 00:34:35 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000009c0)={0x18, &(0x7f0000000840)={0x0, 0x5, 0x4c, {0x4c, 0x1, "d3d90ddef13f8f12f7a969a449bcb064d3b2da2b3d9a02dbb5a05d10de75579cfc74f65303e4777ecb5dae632b2e92bbd80c9b3357c085904f037282b51bb3549075e388f981f7dba19c"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "46d3"}}, &(0x7f0000000900)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x5, 0x1, 0xf, "e3ba7a97", "cdbd4da6"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x3, 0x9, 0x20, 0x1f, 0x40, 0x8}}}, &(0x7f0000000e00)={0x44, &(0x7f0000000a00)={0x40, 0xf, 0x34, "aae8db96bcf1db1633a53e986972a18e64d6b5fee91b1eec52dff5b4f7a78a26023b0d13168cd3d5a5e5da11b4d8d0d85b948ccd"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x8, 0x8}}, &(0x7f0000000b40)={0x40, 0x7, 0x2, 0x1fc0}, &(0x7f0000000b80)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000bc0)={0x40, 0xb, 0x2, "9a66"}, &(0x7f0000000c00)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f0000000c40)={0x40, 0x13, 0x6}, &(0x7f0000000c80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, &(0x7f0000000cc0)={0x40, 0x19, 0x2, 'B1'}, &(0x7f0000000d00)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000d40)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000d80)={0x40, 0x1e, 0x1, 0xb4}, &(0x7f0000000dc0)={0x40, 0x21, 0x1, 0x81}}) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x40, 0x11, 0xd4, {0xd4, 0x30, "4d88dbd86beb3f1fcbae68af8c36b22cc06cb4837acdfce598fa97d8c12b0f9b6400e8fc82675a98dc931ff14a8654762282bbd131d1283beab9f68126dd04f8f253d46e837deff441f49d16eb71ac40aed3bf29eba5abd9418e4c9dbc513d1c3804b534698d8bb990d61030dfa0de5ec2b6618ea5da3924c7fe8b2cd8b24b3ba1ed3f3639328b2f646ac91edbc1ca0a13e88220d989b10de3ccd33c920bc66f00464444434883b7183b72228ad895241a8169acf48a9051650a2664551bd69932003220a2a6abfa2ccbe9712406a7642837"}}, &(0x7f0000000e80)=ANY=[@ANYBLOB="0003040000008103d2ced334339f8e3fcc43b678a4de0403270415c5f9070e9afff5ae3b7b6534fd40e2a837ca4e9668af76b78a5755d1156d1f68a6fcc99b3ccbe1f597195374b5955859ca5a9f93cbff718bf2340e0e1a4ed49ae7609774d8dceac8f3ff05f5af50eb3875b91d9d06d62933ed0aa3c64dfc734b0e470fa4bf399282e1b2f3abe10a2aa2caccf73a24ec881f1e4f52f8fb389c11374c6b476dc4d2868a7621953a1fb67367353d625a1f5d6e6bfb6ba0496e44ed7b7e7e9a2dd141cca8ea2fd51d57f97ab6bae8cf487b4a9975f04dad37c227188d2ebf0bc5eacc322e75e77bba357fd1766a54bf00f2d01c841f"], &(0x7f0000000140)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "52fe7b7fe604aed611db9ff1000079d2"}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x74, 0x4, "34816d24", "537a20b1"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x0, 0x5, 0x20, 0x6e, 0xec, 0x3ff}}}, &(0x7f0000000740)={0x44, &(0x7f0000000280)={0x20, 0xd, 0xca, "92e27e2b39ddac214cb9f76d9523aa6ed0856bae9155f86a0d8e5d13ceeb4311db1b2fff94016afc02ae0ffa6bc8c754cc3ff87e19220c95c9a7f4fbe397da2b30f21cbc08d18038a82e97de8d124a2dc01657d814f5ceaae62800cc50a4a2d3c0b98d30a0948747d647f849552c69223bd6419b5a7ce7b1c1c3502f5577b79fcb80220d75ebf858884ddd37c98da2a9cf85f95f9932fbd9cbde68ffbb254564d0db2c76f6ff7287fd4f9de491476d174e4dc19492d8d53f66a27fa7f9dd455c27346b852813654f0abf"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x39}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x282e52b5000cbb83, 0x2, [0x787]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0xfffa}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000500)={0x40, 0xb, 0x2, "06c6"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x1f}, &(0x7f0000000580)={0x40, 0x13, 0x6}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000600)={0x40, 0x19, 0x2, '9D'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0xe1}, &(0x7f0000000700)={0x40, 0x21, 0x1}}) 00:34:35 executing program 4: r0 = getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) 00:34:35 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:34:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x3c}, {0x6}]}) 00:34:35 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) [ 404.566073][ T1977] usb 3-1: USB disconnect, device number 61 [ 404.796476][ T35] audit: type=1326 audit(1621038876.110:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12193 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 404.922030][ T35] audit: type=1326 audit(1621038876.160:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12192 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff2549 code=0x0 00:34:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x2, &(0x7f00000008c0)=[{0x20, 0x0, 0x0, 0x180}, {0x6}]}) 00:34:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8929, &(0x7f0000000100)={'sit0\x00', 0x0}) 00:34:36 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xe9000, 0x0) ioctl$FIONCLEX(r0, 0x5450) 00:34:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x3d}, {0x6}]}) 00:34:36 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 405.597535][ T2056] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 405.663636][ T35] audit: type=1326 audit(1621038876.980:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12216 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:34:37 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40345410, &(0x7f0000000200)={0xffffffffffffffff}) [ 406.117312][ T2056] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 406.131428][ T2056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.139997][ T2056] usb 3-1: Product: syz [ 406.144310][ T2056] usb 3-1: Manufacturer: syz [ 406.149451][ T2056] usb 3-1: SerialNumber: syz [ 406.187225][ T2056] usb 3-1: config 0 descriptor?? [ 406.231117][ T2056] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 406.431529][T12209] udc-core: couldn't find an available UDC or it's busy [ 406.439852][T12209] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:34:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x44}, {0x6}]}) 00:34:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f00000002c0)) 00:34:39 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x1, 0xfb78]) r1 = semget(0x3, 0x4, 0x0) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000040)=""/246) 00:34:39 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:39 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(r0, 0x8, 0x80000000) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x6, 0x0, 0xa33) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000000)={0x7, 'veth0_macvtap\x00', {0x8}, 0x1e}) syz_usb_connect(0x3, 0x47, &(0x7f00000001c0)=ANY=[@ANYBLOB="12050000e186f240cd0613014b14010203f8ff021200810000000009040000001a104000"], 0x0) 00:34:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x800, 0x4) [ 408.237710][ T18] usb 3-1: USB disconnect, device number 62 [ 408.244593][ T18] keyspan 3-1:0.0: device disconnected [ 408.509245][ T35] audit: type=1326 audit(1621038879.830:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12250 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:34:40 executing program 3: syz_io_uring_setup(0x76ff, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)) 00:34:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x45}, {0x6}]}) 00:34:40 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:40 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000200), 0x0, 0x0, 0x3) 00:34:40 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 409.210474][ T35] audit: type=1326 audit(1621038880.530:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12267 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 409.256521][ T2056] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 409.456265][ T2056] usb 3-1: device descriptor read/64, error 18 00:34:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r0, 0x40a, 0x0) 00:34:40 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8995, &(0x7f0000000100)={'sit0\x00', 0x0}) 00:34:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x48}, {0x6}]}) 00:34:40 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:41 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40045402, 0x0) [ 409.726388][ T2056] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 409.927468][ T2056] usb 3-1: device descriptor read/64, error 18 [ 410.047712][ T2056] usb usb3-port1: attempt power cycle [ 410.835951][ T2056] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 411.016228][ T2056] usb 3-1: device descriptor read/8, error -61 [ 411.285964][ T2056] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 411.456931][ T2056] usb 3-1: device descriptor read/8, error -61 [ 411.580460][ T2056] usb usb3-port1: unable to enumerate USB device 00:34:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x4c}, {0x6}]}) 00:34:43 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r0, 0x24, 0x541000) 00:34:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='shortname=winnt,dmask=00000000000000000000010,nonumtail=0,nfs,']) 00:34:43 executing program 5: perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:34:43 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:43 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000001000)={0x14, &(0x7f0000000e00)={0x0, 0x23, 0xfc, {0xfc, 0x30, "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"}}, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}, &(0x7f0000000f80)={0x0, 0x22, 0x12, {[@local=@item_012={0x0, 0x2, 0x1}, @global=@item_012={0x0, 0x1, 0x1}, @local=@item_012={0x0, 0x2, 0x7}, @local=@item_012={0x2, 0x2, 0x7, "192b"}, @global=@item_012={0x1, 0x1, 0xe, '['}, @global=@item_4={0x3, 0x1, 0x3, "a395c092"}, @local=@item_4={0x3, 0x2, 0x5, "8ef839f8"}]}}, &(0x7f0000000fc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xfe, 0x1, {0x22, 0xbb1}}}}, &(0x7f0000001300)={0x18, &(0x7f0000001040)={0x40, 0x5, 0xff, "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"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001200)={0x20, 0x1, 0x9e, "92a8687d6447aaf2d90cc979541ecad0a5dd7e5300a21ba9a05e1df657ba5a5c770c3a606f6d5acdc966155729099e9b7eaf8a68aabcc05590a5e4a307a26b7252a7a7f54e1c254cabb57a4b177a8ff462126e868cfc759ef7a8ad1df6fbc4ebc4f660b5ee836716a0a5107798731961026a993ddf7a46af4d0bf7b04dcf5ad5b7892493e9c9319feeb7073e647701662fbe22033a8c8bed7a74b52ca02f"}, &(0x7f00000012c0)={0x20, 0x3, 0x1, 0x9}}) syz_usb_connect(0x2, 0x9fe, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x3d, 0x5b, 0x86, 0x40, 0x1bc7, 0x1045, 0x73ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9ec, 0x3, 0x4, 0x7, 0x100, 0x6, [{{0x9, 0x4, 0x88, 0x1, 0x0, 0xff, 0x83, 0x17, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x6}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "cd8246"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xae74, 0x101, 0x3, 0x2}, {0x6, 0x24, 0x1a, 0xfffa, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @obex={0x5, 0x24, 0x15, 0x2}]}]}}, {{0x9, 0x4, 0x2c, 0x1, 0x10, 0xff, 0x18, 0xd, 0x1a, [@generic={0x38, 0x8, "04450b66075e32e88592c3f8d5938a7b702d553a6612fb63906a5328a39450b0540fa9f252b853845f1c479e5a716ee152e0829baf79"}, @uac_control={{0xa, 0x24, 0x1, 0x7ff, 0x8}, [@processing_unit={0xd, 0x24, 0x7, 0x2, 0x3, 0x6, "32ec3c44db52"}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x1, 0x47, "a54da4"}, @selector_unit={0x7, 0x24, 0x5, 0x4, 0x5, "63b2"}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x4, 0xe3, "c9d825b1"}]}], [{{0x9, 0x5, 0xa, 0x10, 0x200, 0x5, 0x0, 0x20}}, {{0x9, 0x5, 0x5, 0x3, 0x50, 0x9, 0x20, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xb3, 0x6}]}}, {{0x9, 0x5, 0xd, 0x8, 0x8, 0x36, 0x1, 0x4, [@generic={0xe6, 0x7, "f5da5deb122970fa831e502e94d9f84e61669cc22e384653fed77517f123c784ce697d9d85eb4c0f2bbe94a7353fc68993bcc87ffae836e0ff2dbaae0889f20bd86c4b9c1557fda57460280850d38545d9ee583c5540729121ab0e876dfee206a30a14870b4b53709e4b229304d8afc2c68f4956de335f39148cbb8c8c3f08b26c095ebd38b47a856ef297e5a4568db41c9fb165589559bdc13e621beba19a2ec2e0fc3575beb1faf31feed49f96fc975de9c3eaf5e641b500d0f86571b1c675b112bcfe08bac63bc22fc8c0862f77182efb299c73db1540cd15364cfb893592f3f26c95"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x81, 0x6, 0x2, [@generic={0x39, 0x9, "30c53cd07d60e38622f82bc748b0418031581a783c76648995e07d2c71763ac7831306c1d3802b2ab1ec1dbe82e29151546d5da71939f9"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x10, 0x0, 0x3, 0x0, [@generic={0x81, 0x23, "dfb747cfab1dd8dc210a85e15e0e339823837322d87a9c656b8bac6cf64687b4a7ceb745a4a0ed68922551d196dfe268b26a09d21de61d2701334ea75b092f8f42d35a36f40ba539da5cc439dae285f59963b466bcaa406b15acca654b538f759c61ce6351cb8e7812d2a9e1c276a90b49e73a0785d72e6b9f79de569de026"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x4, 0x7, 0xab, [@generic={0xd4, 0x4, "45e7bbf526f0c34d8af474d7d71b3bf324f48560f8aa766c3042d55ccf5ea5631b07995172f78d681c342ac4668af9bc77b2587fe7847c47db0b7f3dfcc8ffe0bed2d14b6ddb7d349c3b1442306886cbe6a2b50222141fe56ed08575c2fba770fd142fc81dbace6eaff679621de6d3465309fee4632cdbf87f9dd281d6b8668c0010a8c4c7ac91292053a1350d10486497363f8dd7ce68c0dfffda20d1ed401fb5a6e875e4c39b625c57f82f8f7468312b968c357d375a856a4ca7d9c58c99a3783c7207feb10960cf5d6a2402513b2bab24"}, @generic={0x18, 0x7, "6d017e5b775346f73f3951b3da9211c3fbf36dda5ac4"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x3f, 0x26, 0x2}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0xbf, 0x6, 0x3f, [@generic={0x71, 0x22, "b2c5a29e682fb4f9f97deb290de108871d19b4259cd4d6e61d9f7219d7be79acf61d565a8e3c89449378ea60dfea469553da5cb6eb3169fbe4f4d33746c470484e13e8e7eb6ddeebb2c65172c58039abe63fe2b9531dfeac87a5844a82f339151c1aeed03a8d9b6daa2d669bcfe38e"}, @generic={0x8a, 0xe, "d2678d6a3c5553a8bf34216447e47b90a06e2cb000d7b464129e41e066c85bda71e80f0cc551b70f6d693db5cdc6a4f2d9a920f3704fc530edbdeddd712315506a31c6812663de5d6052e7293a6dcd2a83b0adb4fabafd8a546462b2741838fbe591397099ce15bb7c188622ac591500100c726f7d82fa6b1a49ae997508650f32e635075535fa2a"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x5, 0x8a, 0xfa}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x6, 0x7f, 0x20, [@generic={0xcd, 0x30, "f10bc00a9e8b4700c7a0470fdad1973768d6b72f1c11b0d368e46e3e03cb4568bd272d1bee39901ac6ab6763561bce61159250b629e47cbe03f475140850d105a2cf592e34d79fdb3279d88b7e6b1d70638ea2d05bc146997674b480baffbb1790ed96c17e394a3193d8740f1d6d157fbbfe935d096ffcb103210eb729afdd9cfe557dccdd4b43e63eab507c270ed8c220fcb54380329c5c9fece2d94a86ef7ac2afe9ccfe1bf1fe877e35b1ad0cd6136d86795680177d18514b381d94bf072533a6e93bcfe30ae46ba93a"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x400}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x4, 0x5, 0x4, [@generic={0xcb, 0x23, "fb67911ce85341d4c75546ffe92e7855984cc6a9cde6d0984be5d3cc85d7db53b8c20f7737661e813a15957b5832e9ab45666ec1527bded5f4f39767597d2c0f1a65409bbf264c0fd143dc66bf767689bcc89f324c3dc527453b3866fdd0cf50149c37f6b8385cbf9210a72a9bd6ed6497970a695b3187aa870d3e8d11bfb9cff6f582154ecb158cd17bb798f74260fc28fcc23dcbcb9ce3b1ffeb01180390509559f662e6978afb02651c437daa3c461c240957c2713fa96d59f0f4e220845a5ee5337515322b60de"}, @generic={0x62, 0x7, "f07750b77e079d84d62c4112e2909ec152e5d918f13327097921e7a2a2e0f6d58dd028ad3d0fa3914d6ef47a92fcc127ea9679236bba06d02dc5aaafc7cc55d315e56c6ee8af19e762772fa5425f2273f6dc99c113a9a6407bc1de617dc80f28"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0xff, 0x7f, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xfffa}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x80}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x92, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x6}, @generic={0xa8, 0xd, "18e4d842100745b518d60c79d02868594af6ee4a60ec61a6a2cb712066af536fb7a113cc53092ec5c838c235d2509b3e6d815f34bff9402dd48e254087978725c747948ff37767b920f84820c6edbc6d4534d63836aac45d9de02cd1241279b8da06e4568585baa88d0b1f70d1a977811721e377004286481f20cfdd75ffb82da00b4204710ba85742496de2be7e5fb0ce0bba5aef2670e670aedc850f10d998e09beee8250e"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x20, 0x1f, 0x2, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x7fff}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x5, 0xa2, 0x8}}, {{0x9, 0x5, 0xe, 0x1e, 0x20, 0x3f, 0x2, 0x1a}}]}}, {{0x9, 0x4, 0xe, 0x9, 0x3, 0xbc, 0x13, 0x2, 0x65, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0xff}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x205, 0x5, 0x1, 0x0, 0x81}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "57abaaa5aa"}, {0x5, 0x24, 0x0, 0xc4d}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x0, 0x6, 0x5}, {0x6, 0x24, 0x1a, 0x8000, 0x12}, [@country_functional={0x10, 0x24, 0x7, 0x3f, 0x1, [0x9, 0x7530, 0x1000, 0x1, 0x4]}, @mdlm_detail={0xa5, 0x24, 0x13, 0x3, "5506d2ebabcafd6c8fc1aab1af39f8ddc270c766c9db127cf7ca1682a2fa626e5a1c3384e654156ab9ee6e9710031692521a93223631be3c2165b79cf3409a1b35116140387d887e62be78645d4af49a2ace006d3a45bdb334cee00383917509887835729bf1d67928dc474095c9ec70ba40763168e90ea0bfc2b783d928976eb1a45e4928d3996f25ad72cf6373ecb2d11a4dd44611efac62cff08ae2c9c8a40d"}, @obex={0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x3a, 0x20}, @obex={0x5, 0x24, 0x15, 0x3f}]}], [{{0x9, 0x5, 0xb, 0x0, 0x0, 0x7f, 0x54, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x5, 0x13, 0x0, [@generic={0x56, 0x4, "4f26927c934309490458936a8542e8084aec730e7f3efab68e48ef74111f538b539fefbbef60725edecbbfdcfd219b5122380633136576f4bda7050cc37488dd571daabd1508c9f4d6beeca444bdabb9b72375be"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x30, 0x17, 0x8, [@generic={0x8b, 0xb, "638e4168508f1e1af89113a44ae65e6680d41bdd83e9f7f0059be395c79893633019c9ed7de62bf5c3f72603b170df90463c50980c84de363bbc205521ddbc59684433674376d09701412e0d66ebe54739583c32ee06be8e77c6893fdc43408a1030866910372c2aaf02fbf757a4de71578c3baed5eb7d3d2741a7182045a6681bc4474e590e1032f5"}, @generic={0x29, 0x30, "7c3d13d837ba154dc59131a4ff1314f55fd2db49552d446745498a95bc488de34602d172ff11d6"}]}}]}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x7f, 0x6b, 0x3, 0x20, 0xfd}, 0x62, &(0x7f0000000040)={0x5, 0xf, 0x62, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x59, 0xf, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "87957a7e409f3eaacfd6323c00d95a6e"}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x8, 0xff07, 0x81, [0xff000f, 0xf0, 0xff0000, 0x3f0f, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x9, 0x1, 0xf1a4}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e6a7e2181b1f5caadc738840dfb8fcfe"}]}, 0x6, [{0xa8, &(0x7f00000000c0)=@string={0xa8, 0x3, "c6fa539ff4e8bf449bb38f8ec5f276ac5136ba29550c269844f706f706c5d6a6ca4aa96aa3777b5733c81a25982ce85f26f94ea36ec50598f21c323af7d3ff6843ae4b899ec40f857a2200d62d424e988265bcae707439bf3cec58f5cd4494d3fec73e2a8318b5fcc5c8bf61678360c0ce996e86812d0ee7bb4e227facd2ca8c688f4fd88d155304524cd56d28ccc6a035a5007a49ddcaeabaecc09e03f2d1d651175b6a1d84"}}, {0x92, &(0x7f0000000c00)=@string={0x92, 0x3, "f022aa0d86a6a05af1dc452bcb806dfe601fa8b9d3b9b35739eb2c472ab6b89c582936ea54e429de8715f158e74104386fecc64497dd66ede50a8622cbf2046ff0e5d02211d68b4f18126df39bd23f026d10f250484a0bacd76ae0e4bd29538bc635851e5e98ee3bfab8152d66adb678d7dc1e0087de4608b8c18275e1a58773430adffd91bb170f3b9c47768e6c2828"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x41a}}, {0x21, &(0x7f0000000d40)=ANY=[@ANYBLOB="21566e3a3d230b9a42a08e9e9f3603eca61021dc9740b9c17230d90d62366b8376"]}]}) [ 412.254520][ T35] audit: type=1326 audit(1621038883.570:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12309 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 412.371383][T12317] FAT-fs (loop3): bogus number of reserved sectors [ 412.379134][T12317] FAT-fs (loop3): Can't find a valid FAT filesystem [ 412.454135][T12317] FAT-fs (loop3): bogus number of reserved sectors [ 412.461284][T12317] FAT-fs (loop3): Can't find a valid FAT filesystem 00:34:43 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x101001) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='c', 0x1}, {&(0x7f0000000140)="c7", 0x20000041}, {&(0x7f0000000180)="e2", 0x1}], 0x3, 0x0, 0x0) 00:34:44 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x181601) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="b2", 0x1}], 0x1, 0x0, 0x0) 00:34:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x4d}, {0x6}]}) 00:34:44 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:34:44 executing program 3: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), 0xc) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x5421, &(0x7f0000000500)) [ 413.083719][ T35] audit: type=1326 audit(1621038884.400:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12335 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 413.160919][ T8460] usb 3-1: new high-speed USB device number 67 using dummy_hcd 00:34:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000340)=0x3, 0x4) 00:34:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:34:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x50}, {0x6}]}) 00:34:44 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:34:45 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 413.706280][ T8460] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 413.715860][ T8460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.724487][ T8460] usb 3-1: Product: syz [ 413.729032][ T8460] usb 3-1: Manufacturer: syz [ 413.733806][ T8460] usb 3-1: SerialNumber: syz [ 413.864289][ T8460] usb 3-1: config 0 descriptor?? [ 413.922318][ T8460] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 414.110478][T12331] udc-core: couldn't find an available UDC or it's busy [ 414.117876][T12331] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:34:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x54}, {0x6}]}) [ 414.233942][T12331] udc-core: couldn't find an available UDC or it's busy [ 414.242906][T12331] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 414.383163][T11534] Bluetooth: hci3: command 0x0406 tx timeout [ 414.387428][ T8460] usb 3-1: USB disconnect, device number 67 [ 414.396498][ T8460] keyspan 3-1:0.0: device disconnected [ 414.582546][ T35] audit: type=1326 audit(1621038885.900:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12375 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 415.179416][ T1977] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 415.756656][ T1977] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 415.766408][ T1977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.774769][ T1977] usb 3-1: Product: syz [ 415.779410][ T1977] usb 3-1: Manufacturer: syz [ 415.787550][ T1977] usb 3-1: SerialNumber: syz [ 415.800121][ T1977] usb 3-1: config 0 descriptor?? 00:34:47 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x5421, &(0x7f0000000500)) 00:34:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000001b00), 0x4) 00:34:47 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8916, 0x0) 00:34:47 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:34:47 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x5c}, {0x6}]}) 00:34:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000040)={r0, 0x0, 0x7, 0x1}) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000000c0)={0x1, 0x73, "7fd625f88699ee49ffc1eb5a67ab335a5e8e2dd0d4bc9fb632966fd80cae05b481a75511c2b842fb06b68fc28a918a20154adacbd139db0698bbc1d810647bb6300dc00e5d035e4e3ed69eadedf9e3046fbda2b93697eed9124b813a9486b75868a01a06868c4d3b6f83b665d2febb14fa13f0"}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xad) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xad) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[], 0x0) [ 415.907065][ T1977] usb 3-1: can't set config #0, error -71 [ 415.966111][ T1977] usb 3-1: USB disconnect, device number 68 [ 416.120147][ T35] audit: type=1326 audit(1621038887.440:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12395 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:34:47 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket(0x10, 0x3, 0x0) 00:34:47 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x1, &(0x7f0000000000), 0x34) 00:34:47 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x4, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:34:47 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x60}, {0x6}]}) 00:34:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000001b00), 0x4) [ 416.802749][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 416.880107][T12420] bridge1: port 1(syz_tun) entered blocking state [ 416.887319][T12420] bridge1: port 1(syz_tun) entered disabled state [ 416.897113][T12420] device syz_tun entered promiscuous mode [ 416.947307][T11534] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 417.022494][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:34:48 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x89a1, 0x0) [ 417.136306][T11534] usb 3-1: device descriptor read/64, error 18 00:34:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x61}, {0x6}]}) 00:34:48 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000d90af35aea"], 0x0) 00:34:48 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x12012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xfdef) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x20000080}) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200}) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) 00:34:48 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0xc0189436, 0x0) [ 417.406583][T11534] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 417.605915][T11534] usb 3-1: device descriptor read/64, error 18 [ 417.732716][T11534] usb usb3-port1: attempt power cycle 00:34:49 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0100000000000000140012800b000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x8c03, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) [ 418.282936][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 418.415486][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 418.448508][T11534] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 418.626642][T11534] usb 3-1: device descriptor read/8, error -61 [ 418.898259][T11534] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 419.077653][T11534] usb 3-1: device descriptor read/8, error -61 [ 419.197232][T11534] usb usb3-port1: unable to enumerate USB device 00:34:50 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x401c5820, 0x0) 00:34:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x64}, {0x6}]}) 00:34:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 00:34:50 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) 00:34:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000100)="1a10a7e1f1ff1a6d381d", 0xa) 00:34:50 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f00000014c0)={0x18, &(0x7f0000001280)={0x40, 0x5, 0xe9, {0xe9, 0xf, "6ff8e75ac916b0e5c57952b3f01d383236c44f36cc11296506cdaa1254a5154e02fbd339fc788b4b68f73bb5ca96ca81d752724b361e29d592016168704be8564fbb60dac0fc2aceed60a136ca6c0075fe9984ed6bb3eb4f206b52b07b027c9b1931309d94e2eacdd66e10d830b8257e6fc0ceb8c446f910a9bdda2093eade7fa4d52b437f4a58a495e93e3491fbd4a26dd8bb24d4f7a10b04e227ca6ce6fc8a8ecdbe07e532591074a844686135c81596396b2380ec3d48e10cea788041d4e92a392b2d5eb306d19c23f82f2d1d6017f65dd93f54b39cc361be8053dbad81d4b71caf94701214"}}, &(0x7f0000001380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}, &(0x7f00000013c0)={0x0, 0xf, 0x5d, {0x5, 0xf, 0x5d, 0x2, [@generic={0x4d, 0x10, 0x4, "5c6ee5622934c660e83e5f7e99c765da0b93feddf048c2c49c786375980a0dc41865f5055b96c611ab6a8602ecdd60d762eab023223ac84718b3e4bd5d0186d6358c8568fe9fbdae6157"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x43, 0x81, 0x92, 0x7, 0x6}]}}, &(0x7f0000001440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x4, 0x7f, 0x1, "199dd472", "bf51fd82"}}, &(0x7f0000001480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x8, 0x6, 0x6, 0x3, 0x2, 0xbe75}}}, &(0x7f0000001940)={0x44, &(0x7f0000001500)=ANY=[@ANYBLOB="401575000000010674f0e2679e335064ea77f6f429f604f481b02fcc4a5df1d8746b4727f3a15d43b15f2dfb1e42aa7007b40002c00aa318ffde36a2824a78dd348613c7ce016e7aa25d87414607e43c945c222ece420c48d4bf5062618149b4a05c7f772eae35588c5dee4d4f3d1e0000000000"], &(0x7f0000001580)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001600)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000001640)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf000]}}, &(0x7f0000001680)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000016c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001700)={0x40, 0xb, 0x2, "76b0"}, &(0x7f0000001740)={0x40, 0xf, 0x2, 0xff}, &(0x7f0000001780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000017c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001800)={0x40, 0x19, 0x2, "be09"}, &(0x7f0000001840)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001880)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000018c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001900)={0x40, 0x21, 0x1, 0x3f}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000200)={0x18, &(0x7f0000000000)={0x20, 0x22, 0x90, {0x90, 0x9, "cac7def64dd9cc546b2bab5bd1d4d85efb203a3a1520e10e27480ec5b8e366a2f2d348de3c15cf8694521f6ea487de677b7aa4478215e0fbee35dff5b926bd75cfbc2ab1d748754fb8e34f0a1a415571f43cb2c916cf6bc389afcd8555584b26118f09f03955b0c5a87c47f0b022abee4b9c40278e71910455e9715ed7c0676b1ddbc16b292f98983e68e89c497b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe0, 0x10, 0x9, 0x20, "f4aadc57", "436e1b34"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x4, 0x2, 0x5, 0x0, 0x58b9, 0xa7a0}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x87, "b230147573a2c467fd9a4f5d7d5ae8f029de5e48ca400d7cfa8f080ac24ca2b1d7177c72b9698b571db1c85855bf816c1c8457a513e3583179d0af0fb8b596e7d2ca9fdfed63385dce1420dc781749552551572b1fe4b522181a3ec262d5d0830a70f1900fec29ab6c6b1dac1b76a8f3f49913f4f49012200b683df0b3a5e9deedfc15b1c18d7f"}, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0xa10, 0x80}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4a57}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000480)={0x40, 0xb, 0x2, 'hN'}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000002200)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "8826"}, &(0x7f0000000500)={0x40, 0x1a, 0x2, 0x4e}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) syz_usb_control_io(r1, &(0x7f0000001d00)={0x18, &(0x7f0000001a80)={0x40, 0xf, 0x89, {0x89, 0x1, "3b0153e8b11d0d4345b29895ab1cde40f8fce2690bfe28711374a3ce8f10a15862aa9525d11a053da2f24fcea838a10fbd5d4c1ab53451f5a6729d6a7675071f9a7ef22183e366a77a807d4002fe03e8b1431f61f5347254655cc57ac352fb582c8a45dae14a89badb39869ac33bc0faf0fbc14133d9d135ac6df51b297afb6ced4b1e74432faa"}}, &(0x7f0000001b40)={0x0, 0x3, 0xc0, @string={0xc0, 0x3, "640deb9cb0cb3d3bd5ee6398b91ece8784b80a3d34ece35b2ac3b676f92cd2d8d0ed1d2f9356ab9395b14c15092d29bd9846e8ed404d871e117ef54966da2e5f661d3c759a283152c176f2ac5acb39a3406870265e0823dc0cdf2b943b6145d65531396d7df53bbb86b2dc5291885c7c31428637f2e38ca5db45f7922ebebfa44b32f0021df10916d466d90c4c2925a75cd0289efbe9eb7cdb78fdd32661f397f892b60dffe220455fac17da27e8df51f442f275641ab77b8d176f1cb3b0"}}, &(0x7f0000001c40)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x100, 0xff0f, 0x7, [0x3f00, 0xc000, 0x14000, 0xc1b0, 0x9563a8dfeb77ab54, 0xff3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "868bdde347c2acb88bd6830bfa535aaa"}]}}, &(0x7f0000000f00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x2, 0x7f, "d8d703be", "e80fd11f"}}, &(0x7f0000001cc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x84, 0xe1, 0x2, 0xa9, 0x2, 0x9}}}, &(0x7f0000002180)={0x44, &(0x7f0000001d40)={0x40, 0x0, 0x80, "b600e67c217a775279c17e078ca0c7d68028f1f240b80d017d9a73f20fe890b7033dffe711018fc48ebdd5ac6e48f0328a5b884c4c160a8b319bd649c2e796d4eb71a2e270830cd379d138bdc36e51caf441eacf0d0802a2b3dc8573e75d1e9b4f5e32707168aed82914d7a8e826b40cf9af5bf31f0717b410ce0ac7d932124c"}, &(0x7f0000001e00)={0x0, 0xa, 0x1, 0x7}, 0xffffffffffffffff, &(0x7f0000001e40)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001e80)={0x20, 0x0, 0x4, {0x40}}, &(0x7f0000001ec0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000001f00)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000001f40)={0x40, 0xb, 0x2, "89f6"}, &(0x7f0000001f80)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000001fc0)={0x40, 0x13, 0x6, @random="df4ca78b3e71"}, &(0x7f0000002000)={0x40, 0x17, 0x6, @local}, &(0x7f0000002040)={0x40, 0x19, 0x2, "a864"}, &(0x7f0000002080)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000020c0)={0x40, 0x1c, 0x1, 0xdb}, &(0x7f0000002100)={0x40, 0x1e, 0x1, 0x7e}, &(0x7f0000002140)={0x40, 0x21, 0x1, 0x7e}}) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x9, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd7, 0x90, 0x81, [{{0x9, 0x4, 0x0, 0xcf, 0x2, 0x3, 0x1, 0x1, 0x81, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x8ad}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xea, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x250, 0xfa, 0x3f, 0x3f, 0x20, 0x5}, 0x3d, &(0x7f00000007c0)={0x5, 0xf, 0x3d, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xfe, 0x1, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a9a0d679739b98993502be4b7d28ee63"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "5b82a608c2a9762cfafe2f1d5a064433"}]}, 0x6, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2001}}, {0x80, &(0x7f00000008c0)=@string={0x80, 0x3, "fe27d0286311f0df24620d6dd579e6e5debd0da8081dda7702c1d93ee737a426be62dc9d448548a65e5d25bbfa3c3151168b106f7d744df6051ce970a4ba4477dd38cbf3b1592bcbe49e72785ec5764c7a7dc130f88cf8b980e725dda0ad7b880aedea377a63bd66099ba4b0a41b790e3e347ed7641592e5a8552cf3a335"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x457}}, {0xd7, &(0x7f0000000a00)=@string={0xd7, 0x3, "d74ec3cd426b7cbb1e9434ce9bb380c3e55ae355f0939c700e3c3ecb38d5aa62548e7383f44c4e4bb4179005753367fc23d0377867e1f7a4827d88664fad28e9d7bceb9e3aea6e672babb9406bfc3b30cdd74127321deefb7a749a8cb41e4c1e1de289b85cdc2bbd14fdd42c58fcf3879a0f14e5954bd1f30baa5a3d489168b806a3d7ed0c94f370add43528b9284f396d5ebefa4abd600a8b40467fbfd900e0515e63ab12ff15bba5bf9ae6d7465d52e6836484c71aa9748f2eb9ffbb2e0c6ee37aaf7b3d06f318e815fc8336a40b46c145ce86ba"}}]}) syz_usb_control_io(r2, &(0x7f0000000d80)={0x18, &(0x7f0000000bc0)={0x0, 0x8, 0xd2, {0xd2, 0xf, "0bab78065594e9133b259cc2b681791dac60fbf129643fec2b2711707ca4888d006272468772ec37b29eb54777352b28a65c3a7c5b8cced4d74a6887dec2418b05add4c4156622cfcb8e496840c0a61f9d19e15c3df23defef93502d3db35fca7908ab18c5f640887aff75e225aa6b8076bdb1752c002b51fd35e5b5c8f2dc76984f5a9e5c913b7b847edb87ac8d2a0258c9d1f34af33b0806044c2ae026cf058eeab915f37cb0af44ae67802f8c09e2d6f47337503d9ca793c53884aa55782873a20265e2c289c78a5daa411d70c2ea"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}, &(0x7f0000000cc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x3f, 0x0, "10780d74", "532e1b48"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x8, 0x5, 0x0, 0xeb, 0x8, 0x5}}}, &(0x7f0000001200)={0x44, &(0x7f0000000dc0)={0x40, 0x7, 0x3f, "6c894eb46f7c3f598e3e2b26e46595781501c2f4f75b203354f4fc43b1ab7485c5f191ccac7905696b3aceb00bd373e60758a7753e7d84b2acc704931e3093"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000019c0)=ANY=[@ANYBLOB="215f775321a2273382af28a5529d288e8d12dea5a807e50ef31f1daebeef047c037ba9155daa7bb9ef7600b18a1a51d015e4b674e9dbca6ea7efb54ec0c5f8133dfc2874867b0be37f40f3cbc07fea4fedacc2846972bac749b925bf964d5b2df5131970e349928e9fa9cb96ba58b68262d11bed1b6fa02beb9f8ebf1e0a661529df61a366a3c76f5297feb72647f7608b02dfdcf56eb5eb9cf59e47236a4e8365e4ef050ea41554837f8d67fce60609b87966e3e9"], &(0x7f0000000f40)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000f80)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000fc0)={0x40, 0xb, 0x2, "39ef"}, &(0x7f0000001000)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000001040)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001080)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, &(0x7f00000010c0)={0x40, 0x19, 0x2, "e75a"}, &(0x7f0000001100)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001140)={0x40, 0x1c, 0x1, 0x34}, &(0x7f0000001180)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000011c0)={0x40, 0x21, 0x1, 0x9}}) syz_usb_connect$uac1(0x3, 0xb3, &(0x7f0000002240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0xee, 0x50, 0x3b, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x7}, [@mixer_unit={0x9, 0x24, 0x4, 0x5, 0x1, "5cc7ae12"}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x6, 0x6, "fb1f14f91a"}, @selector_unit={0x5, 0x24, 0x5, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x1, 0x9, {0x7, 0x25, 0x1, 0x2, 0x20, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x33d, 0x80, "56f3"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0xf001, 0x0, "0473"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x3, 0x5, 0x7f, "eed652"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x1, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3f, 0x5, 0x4, {0x7, 0x25, 0x1, 0x2, 0x81, 0xa1}}}}}}}]}}, &(0x7f0000002540)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x1f, 0x4, 0x1, 0x8, 0x1}, 0x5, &(0x7f0000002300)={0x5, 0xf, 0x5}, 0x7, [{0x20, &(0x7f0000002340)=@string={0x20, 0x3, "30cafcc2bcc695ec7fb250de2ae4991aed72f8c5459ed449a6023e965647"}}, {0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x45, &(0x7f0000002400)=@string={0x45, 0x3, "17e1c5624571163e9b11cbcbf5ca500240c1bd399a244d6c5f4f7893fca5092bea82b79cf97e833e566fc67a1764ff9c4bfcc92cf096bc6e2e1f6cf0a9ddfaf5f563dd"}}, {0x4, &(0x7f0000002480)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f00000024c0)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0x3409}}]}) [ 419.817444][ T35] audit: type=1326 audit(1621038891.130:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12469 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:34:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)=""/198, &(0x7f0000000000)=0xc6) 00:34:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x201}, 0x14}}, 0x0) 00:34:51 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x5450, 0x0) 00:34:51 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 00:34:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x6c}, {0x6}]}) [ 420.465994][ T8460] usb 3-1: new high-speed USB device number 73 using dummy_hcd 00:34:51 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0xd, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 420.728267][ T35] audit: type=1326 audit(1621038892.050:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12490 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:34:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0100000000000000140012800b000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x4c00, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 00:34:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000001b00), 0x4) 00:34:52 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 00:34:52 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x74}, {0x6}]}) [ 421.026917][ T8460] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 421.036517][ T8460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.045274][ T8460] usb 3-1: Product: syz [ 421.049872][ T8460] usb 3-1: Manufacturer: syz [ 421.054639][ T8460] usb 3-1: SerialNumber: syz [ 421.204727][ T8460] usb 3-1: config 0 descriptor?? 00:34:52 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x17, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 421.287077][ T8460] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 421.373977][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 421.452095][T12479] udc-core: couldn't find an available UDC or it's busy [ 421.459653][T12479] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 421.604181][T12507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 421.649365][ T35] audit: type=1326 audit(1621038892.970:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12511 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 421.880090][T12518] udc-core: couldn't find an available UDC or it's busy [ 421.888199][T12518] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 421.998297][T12518] udc-core: couldn't find an available UDC or it's busy [ 422.007193][T12518] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:34:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="24000000081ac27600"/18, @ANYRES32=r2, @ANYBLOB="08002700000000000800a000000000000800260099160000500033002080000008021100000008021100000050505050505000000000000000000000ffffffffffff000602020202020201002d1a00"/104], 0x84}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x7, 0x5]}, 0x8) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f00000001c0)={0x1, 0x10, [0x3, 0x9, 0x7fffffff, 0xfff], &(0x7f0000000180)=[0x0, 0x0]}) io_uring_setup(0x48b4, &(0x7f0000000080)={0x0, 0x62c7, 0x2, 0x2, 0xb6, 0x0, r3}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(r4, 0x8, 0x80000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e186f240cd0613014b140102060000001a104000ae05d22803ac524100"/44], 0x0) r5 = openat$vcs(0xffffff9c, &(0x7f0000000100), 0xb89001, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2cce, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffff) 00:34:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000001b00), 0x4) [ 423.226575][ T18] usb 3-1: USB disconnect, device number 73 [ 423.233384][ T18] keyspan 3-1:0.0: device disconnected 00:34:54 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000040)='d\xc4\x11\x81\xd2(\x00\xdb\x7f\xff(\x93\xd4\xba|\xfaG\x14)N\x02e\xe5', 0x17) 00:34:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000001b00), 0x4) 00:34:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, r1, 0x0, 0x77e6) 00:34:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x7c}, {0x6}]}) [ 423.694759][ T35] audit: type=1326 audit(1621038895.010:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12534 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:34:55 executing program 3: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x80000000}, 0x8) 00:34:55 executing program 5: socket(0x10, 0x2, 0x401) 00:34:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x84}, {0x6}]}) 00:34:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @empty}, {0x0, @local}, 0x4c, {0x2, 0x0, @broadcast}, 'ip6gretap0\x00'}) [ 424.855608][ T8460] usb 3-1: new high-speed USB device number 74 using dummy_hcd 00:34:56 executing program 1: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), 0xc) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0xc0189436, &(0x7f0000000500)) [ 425.023298][ T35] audit: type=1326 audit(1621038896.340:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12552 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 425.147704][ T8460] usb 3-1: no configurations [ 425.152579][ T8460] usb 3-1: can't read configurations, error -22 00:34:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x0, 0x0, 0x19f, 0x0, 0x1}, 0x40) [ 425.345977][ T8460] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 425.658260][ T8460] usb 3-1: no configurations [ 425.663040][ T8460] usb 3-1: can't read configurations, error -22 [ 425.702171][ T8460] usb usb3-port1: attempt power cycle [ 426.436750][ T8460] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 426.586767][ T8460] usb 3-1: no configurations [ 426.591554][ T8460] usb 3-1: can't read configurations, error -22 [ 426.756032][ T8460] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 426.896635][ T8460] usb 3-1: no configurations [ 426.901807][ T8460] usb 3-1: can't read configurations, error -22 [ 426.909531][ T8460] usb usb3-port1: unable to enumerate USB device 00:34:58 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, &(0x7f0000000000)={0x0, 0x1, 0x104, {0x100, 0x78b2d4638ab6e345, "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"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@global, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0xc, "1c99dbac"}, @global=@item_012={0x0, 0x1, 0x1, 'q'}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfbff, 0x5, 0x1, {0x22, 0xd1a}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000280)={0x40, 0x18, 0x61, "c1ae89df3c99d979cab0c367b34f6406bc63a78869d8e64467a63fd8da7bad0b8aeadcb753f12799d6a6a4c43f4acfaa28d9e3f1e7eb264b002eb4adebb2a6df7b85a1ad7d1b4ca5ab1457eec4b59db97737d81027d87cb60d2b975474bb39ec66"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x1, 0x78, "870210b2ab907bf114c710557a3b5bc3ea69378d2fb3fd3617d7cf9ebb091e85722c0c9dc7825e09aa45ba9af9eb3f54b59261d3dd7f6d07aa93e38874afc3ea379f74424b246a81c03a2ba0d3d50586668982051623876404f8a02d46c570579dc22cf0951ffa1eaee49de249a74dba91a2aa5190837569"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x3f}}) 00:34:58 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x800, 0x8, 0x1040, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000011c0)={r0, 0x0, 0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="4c00000010000104fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="2b460000000000001c0012800b00010067656e65766500000c000280060005000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000a0088cf6ea9554f8d34c1e0b95d1a343df8a1a64a57ec3a039ca11f9491a1c1a60f76beb61d7e499ff7b11850f26cac1b3728ede0e1779a6bde5aedc12d186818be741d0a0f6bfdd7a0b0ec269cab0151259035329b19164ad404ec583b27268886a39a7a4cf0c9a11314357c7b8cf00897ee5a7f4a1bbcff9b96c94053f7ccfe8d2d8a1d5629f03228bdffe86b799572a849c24404cba42f24f1ba7f03ece0684179edbb93e4d8a7fb55aaf4bab3dd324a9aa6fa746f5cf595f9593a52", @ANYRES32, @ANYBLOB], 0x4c}}, 0x0) 00:34:58 executing program 3: socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="7569edf9d67d2e5ffb5ef402bc6bf118", 0x10) 00:34:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x87}, {0x6}]}) 00:34:58 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0xa, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:34:58 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r0, 0x0, 0x0) [ 427.549972][T12578] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 47334 - 0 [ 427.562187][T12578] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 47334 - 0 [ 427.572356][T12578] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 47334 - 0 [ 427.581823][T12578] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 47334 - 0 [ 427.671766][ T35] audit: type=1326 audit(1621038898.990:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12571 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:34:59 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0xe, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:34:59 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x20) 00:34:59 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x80086601, 0x0) [ 428.008468][T12578] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 47334 - 0 [ 428.017865][T12578] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 47334 - 0 [ 428.027275][T12578] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 47334 - 0 [ 428.036625][T12578] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 47334 - 0 00:34:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x94}, {0x6}]}) [ 428.366138][ T1977] usb 3-1: new high-speed USB device number 78 using dummy_hcd 00:35:00 executing program 1: setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) 00:35:00 executing program 5: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x712, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcd95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'netpci0\x00'}}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x24008880) r0 = socket(0x3, 0x40000, 0x5) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r1 = socket(0x29, 0x800, 0xffff0001) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000001}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r3, 0x38c, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}]}, 0x38}}, 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x20, 0x1, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x12}}}}, [@NL80211_ATTR_STA_VLAN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4011008}, 0x1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0xb00, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x5}}}}, ["", "", "", "", "", "", ""]}, 0x20}}, 0x4800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x633215e6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x4840) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r4, 0x3, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffff, 0x39}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x76}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000e00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000900)={0x174, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_TX_RATES={0x3c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2, 0x16, 0x4, 0x55, 0x60, 0x5, 0x60, 0x36, 0x32, 0x1, 0x60, 0x1b, 0x0, 0x30, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x17, 0x9, 0x2, 0x6, 0x6, 0x0, 0x6]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x30, 0x24, 0x1]}]}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x1a, 0x24, [{0x12}, {0x4, 0x1}, {0x4}, {0x18}, {0x24}, {0x30}, {0x24, 0x1}, {0xc, 0x1}, {}, {0x36, 0x1}, {0x0, 0x1}, {0x6}, {0x36, 0x1}, {0x3}, {0x6c, 0x1}, {0x6}, {0x12, 0x1}, {0x18}, {0x6, 0x1}, {0x12}, {0x5cb85fdbe59b42d1}, {0x60, 0x1}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_MESH_SETUP={0xc4, 0x70, [@NL80211_MESH_SETUP_IE={0xb5, 0x3, "955a0aed78cfbae4493e8a027cc15da5776476362dace31e0b62c8ba7842a8a0d337c58e64c3f60f853efdbcfff47ed250896a0235b96cd332f8dab273ed1eca5ebf2af1acd65847309f39b65d7d62099efd60489670c96f4cc97a2d1f3f72b6c2c0bb5581ea023ec66af4c3f535b2dff4dd161f2f6473561d6a4d30486f4a0f699d9b0b90a79666f0ffd9d682d928879b7e4687fa30d1b5be0f4614a02985d4323ca3fc3973e308d7e0ac6f0a67f0b55f"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/user\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x20000010) [ 428.936549][ T1977] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 428.946648][ T1977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.954941][ T1977] usb 3-1: Product: syz [ 428.959547][ T1977] usb 3-1: Manufacturer: syz [ 428.964481][ T1977] usb 3-1: SerialNumber: syz [ 429.058150][ T1977] usb 3-1: config 0 descriptor?? [ 429.111678][ T1977] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 429.183219][T12593] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 36516 - 0 [ 429.192517][T12593] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 36516 - 0 [ 429.203994][T12593] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 36516 - 0 [ 429.213736][T12593] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 36516 - 0 [ 429.443332][T12593] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 36516 - 0 [ 429.453885][T12593] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 36516 - 0 [ 429.463503][T12593] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 36516 - 0 [ 429.472839][T12593] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 36516 - 0 00:35:02 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) syz_usb_connect(0x1, 0x70c, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x8, 0x3f, 0x9, 0x8, 0x4}, 0x23, &(0x7f0000000040)={0x5, 0xf, 0x23, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0x9, 0x3f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3, 0xc0, 0xc4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x81, 0x2d}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2401}}]}) 00:35:02 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x9c}, {0x6}]}) 00:35:02 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:35:02 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x3700, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xb0, &(0x7f00000000c0)=""/176, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440), 0x10}, 0x78) 00:35:02 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 00:35:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x20040011}, 0x4) [ 431.060887][ T8460] usb 3-1: USB disconnect, device number 78 [ 431.067985][ T8460] keyspan 3-1:0.0: device disconnected [ 431.369535][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 431.430220][T12644] device syz_tun left promiscuous mode [ 431.436971][T12644] bridge1: port 1(syz_tun) entered disabled state [ 431.512711][T12644] bridge2: port 1(syz_tun) entered blocking state [ 431.520627][T12644] bridge2: port 1(syz_tun) entered disabled state [ 431.531051][T12644] device syz_tun entered promiscuous mode 00:35:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000380)=0x2, 0x4) 00:35:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x500}, 0x1c) 00:35:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000040a0102"], 0x14}}, 0x0) 00:35:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0xa4}, {0x6}]}) [ 431.837381][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 432.054186][ T18] usb 3-1: new high-speed USB device number 79 using dummy_hcd 00:35:03 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 432.142333][ T35] audit: type=1326 audit(1621038903.460:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12653 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:03 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000280), 0x0, 0x0) [ 432.589085][ T18] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 432.599269][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.608940][ T18] usb 3-1: Product: syz [ 432.614649][ T18] usb 3-1: Manufacturer: syz [ 432.620239][ T18] usb 3-1: SerialNumber: syz [ 432.684324][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 432.772514][ T18] usb 3-1: config 0 descriptor?? [ 432.798518][T12666] device syz_tun left promiscuous mode [ 432.805428][T12666] bridge2: port 1(syz_tun) entered disabled state [ 432.836110][T12666] bridge3: port 1(syz_tun) entered blocking state [ 432.843045][T12666] bridge3: port 1(syz_tun) entered disabled state [ 432.852730][T12666] device syz_tun entered promiscuous mode [ 432.908118][ T18] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 433.024222][T12649] udc-core: couldn't find an available UDC or it's busy [ 433.031967][T12649] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 433.086784][ T18] usb 3-1: USB disconnect, device number 79 [ 433.123677][ T18] keyspan 3-1:0.0: device disconnected [ 433.865484][T11534] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 434.397046][T11534] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 434.407778][T11534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.417688][T11534] usb 3-1: Product: syz [ 434.423794][T11534] usb 3-1: Manufacturer: syz [ 434.429219][T11534] usb 3-1: SerialNumber: syz [ 434.492924][T11534] usb 3-1: config 0 descriptor?? [ 434.541075][T11534] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:35:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0xac}, {0x6}]}) 00:35:06 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) 00:35:06 executing program 5: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @empty, @val, {@ipv4}}, 0x0) 00:35:06 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) write$FUSE_GETXATTR(r0, 0x0, 0x0) 00:35:06 executing program 2: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000340), 0x84200, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x80, 0x8000, 0x4, 0x8, {{0x26, 0x4, 0x1, 0x1b, 0x98, 0x68, 0x0, 0x8, 0x4, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x34, 0x38, 0x1, 0x4, [{@broadcast, 0x3f}, {@remote, 0x7}, {@private=0xa010100, 0xffffffff}, {@multicast2, 0xffffffff}, {@multicast1, 0x401}, {@empty, 0x2}]}, @noop, @cipso={0x86, 0x37, 0xffffffffffffffff, [{0x6, 0xa, "1b839e2ba818d952"}, {0x1, 0x2}, {0x5, 0xf, "3e68b9b9f9bb1c32bb9e397e45"}, {0x2, 0x4, "540e"}, {0x7, 0xd, "5f159d195706b7078b302e"}, {0x7, 0x5, "fe1a23"}]}, @generic={0x82, 0x4, "913b"}, @timestamp={0x44, 0xc, 0x7a, 0x0, 0x7, [0x7ff, 0x10000]}, @generic={0x44, 0x3, '['}, @generic={0x83, 0x3, '.'}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=@ipv6_newaddr={0x5c, 0x14, 0x200, 0x70bd27, 0x25dfdbfd, {0xa, 0x78, 0x0, 0xfe, r1}, [@IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0xa4, 0x84, 0x55, 0x40, 0xb05, 0x173f, 0x8a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6c, 0x0, 0x0, 0xdc, 0x37, 0x39}}]}}]}}, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000580)={0xa, 0x4}, 0xc) syz_usb_connect$cdc_ncm(0x0, 0x150, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13e, 0x2, 0x1, 0x1, 0x20, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "7e75d93719"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4000, 0x4, 0x79}, {0x6, 0x24, 0x1a, 0x658, 0x8}, [@acm={0x4, 0x24, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x9, 0xa8, 0x2, 0x1ffc}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x80, 0x3f, 0x4}, @obex={0x5, 0x24, 0x15, 0x6}, @mdlm_detail={0xc1, 0x24, 0x13, 0x9, "e21cbc874a8395004338d42a1fc3d5a424eb55ccf152ca29f8fe3f1aa6a4aa9e12369639c6d6f1af496198dcd6e134edc812eb64fd2b665bb8c7881b7bacdd69c88ea5e25fd572f0dbeae694a8dba4b30f9984f4e6b2b4ebf63150fe9244ac6a142721f7ff1d0b96846b0b96d120416106dea381d95d9455353da651e9311203f7a78e68d63ce3b7d63194272b693d8e70d9a02bd0e94492696cb281ad3c5f64a513fcf675c27a0b9eefaebf67f0f236e49f8f214aa7d4a548eb82c913"}]}, {{0x9, 0x5, 0x81, 0x3, 0x270, 0x5, 0x8, 0xd0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x1, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x0, 0x4}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x7f, 0xe0, 0x7, 0x20, 0x5}, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x49}}]}) 00:35:06 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 434.689093][T11534] usb 3-1: USB disconnect, device number 80 [ 434.697112][T11534] keyspan 3-1:0.0: device disconnected [ 434.908159][ T35] audit: type=1326 audit(1621038906.230:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12706 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 435.011292][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 435.083189][T12719] device syz_tun left promiscuous mode [ 435.091551][T12719] bridge3: port 1(syz_tun) entered disabled state 00:35:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) 00:35:06 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) [ 435.219381][T12719] bridge4: port 1(syz_tun) entered blocking state [ 435.226941][T12719] bridge4: port 1(syz_tun) entered disabled state [ 435.236287][T12719] device syz_tun entered promiscuous mode 00:35:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0xb1}, {0x6}]}) 00:35:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000002500)={&(0x7f0000001e80), 0xc, &(0x7f00000024c0)={&(0x7f0000002380)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}}, 0x0) 00:35:07 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 435.765708][ T9236] usb 3-1: new full-speed USB device number 81 using dummy_hcd 00:35:07 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001fc0)={'sit0\x00', &(0x7f0000001f40)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @ipv4={'\x00', '\xff\xff', @dev}}}) 00:35:07 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:35:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0xe0a50eb30dece345}, 0x1c}}, 0x0) 00:35:07 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) [ 436.080598][T12723] udc-core: couldn't find an available UDC or it's busy [ 436.088746][T12723] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 436.164137][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 436.228858][T12742] device syz_tun left promiscuous mode [ 436.235421][ T9236] usb 3-1: unable to get BOS descriptor or descriptor too short [ 436.236175][T12742] bridge4: port 1(syz_tun) entered disabled state [ 436.375907][ T9236] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 436.384105][ T9236] usb 3-1: can't read configurations, error -71 [ 436.389524][T12742] bridge5: port 1(syz_tun) entered blocking state [ 436.398051][T12742] bridge5: port 1(syz_tun) entered disabled state [ 436.409886][T12742] device syz_tun entered promiscuous mode [ 436.514900][ T35] audit: type=1326 audit(1621038907.830:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12744 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 436.634822][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:35:08 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee00, 0x0) 00:35:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x2}, {0x6}]}) 00:35:08 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:35:08 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x240400, 0x0) 00:35:08 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)={0x0, "57c736976f157dee87c3a1398df168d85d1d45532dd97deb61c90b4ac926963b4d7f83ab6b3157960350d3d6c9d72db4fedc6e13ba8366b2e1d3c19082c11825"}, 0x48, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) 00:35:08 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio1(0xffffff9c, &(0x7f0000000140), 0x4a00, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x13, r2, 0xb2387000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x40000) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x1a) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xad) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xad) r6 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) r7 = syz_open_dev$admmidi(&(0x7f00000000c0), 0x1, 0x88000) fcntl$setpipe(r7, 0x8, 0xffffff7a) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$setpipe(r9, 0x8, 0xffffffff) ioctl$SG_GET_VERSION_NUM(r8, 0x2282, &(0x7f0000000000)) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000180)={0xe057, 0x101, 0x10000, 0x0, 0x17, "09ab1a7a99d1642f4314dd1046540614a3e74a"}) [ 437.452535][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 437.517665][T12781] device syz_tun left promiscuous mode [ 437.524433][T12781] bridge5: port 1(syz_tun) entered disabled state 00:35:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x55, 0x0, 0x0) [ 437.622657][T12781] bridge6: port 1(syz_tun) entered blocking state [ 437.629720][T12781] bridge6: port 1(syz_tun) entered disabled state [ 437.639371][T12781] device syz_tun entered promiscuous mode 00:35:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x4}, {0x6}]}) 00:35:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) 00:35:09 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10, 0x0}, 0x0) 00:35:09 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:35:09 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000140)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 00:35:09 executing program 2: syz_usb_connect(0x1, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) 00:35:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x6}, {0x6}]}) [ 438.547943][T12799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 438.603949][T12803] device syz_tun left promiscuous mode [ 438.610977][T12803] bridge6: port 1(syz_tun) entered disabled state 00:35:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) 00:35:10 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/rpc\x00') readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/93, 0x5d) [ 438.731970][T12803] bridge7: port 1(syz_tun) entered blocking state [ 438.739481][T12803] bridge7: port 1(syz_tun) entered disabled state [ 438.749189][T12803] device syz_tun entered promiscuous mode 00:35:10 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 439.125838][ T18] usb 3-1: new low-speed USB device number 83 using dummy_hcd 00:35:10 executing program 4: r0 = creat(&(0x7f00000027c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 00:35:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x8}, {0x6}]}) 00:35:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) [ 439.375360][ T18] usb 3-1: Invalid ep0 maxpacket: 64 00:35:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) signalfd(r0, &(0x7f0000001b40), 0x8) [ 439.536225][ T18] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 439.599843][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 439.695688][T12822] device syz_tun left promiscuous mode [ 439.702399][T12822] bridge7: port 1(syz_tun) entered disabled state [ 439.785208][ T18] usb 3-1: Invalid ep0 maxpacket: 64 [ 439.801144][ T18] usb usb3-port1: attempt power cycle [ 439.805409][T12822] bridge8: port 1(syz_tun) entered blocking state [ 439.814631][T12822] bridge8: port 1(syz_tun) entered disabled state [ 439.947984][T12822] device syz_tun entered promiscuous mode [ 439.975640][ T9236] Bluetooth: hci4: command 0x0406 tx timeout 00:35:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x9}, {0x6}]}) 00:35:11 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, 0x0) 00:35:11 executing program 3: socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) [ 440.566371][ T18] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 440.656445][ T18] usb 3-1: Invalid ep0 maxpacket: 64 [ 440.709789][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 440.775451][T12844] device syz_tun left promiscuous mode [ 440.781837][T12844] bridge8: port 1(syz_tun) entered disabled state [ 440.825399][ T18] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 440.874007][T12844] bridge9: port 1(syz_tun) entered blocking state [ 440.881679][T12844] bridge9: port 1(syz_tun) entered disabled state [ 440.891658][T12844] device syz_tun entered promiscuous mode [ 440.956105][ T18] usb 3-1: Invalid ep0 maxpacket: 64 [ 440.966948][ T18] usb usb3-port1: unable to enumerate USB device 00:35:13 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x20, 0x11, 0xa6, {0xa6, 0x22, "9efa132ddf86f2c1afed5276b1ee4fbb570ed0a8d9c9ca15fc9b2ff135d4c9bfdb05176de7787bd378f8a126367409e1c1266068ca241048527852f412c6048eec4b833e929b091093c2c36ce4b91a8bbd12ceea98180f8ea653479c9a7c5bfabe7fd352bf853bc23ff9707727ec753ac1276269727d3c5124b2c04161451d590a00772643bf8d8350fb9f4f6965d804daea2f2cf131615f728c442ef44220b72038cd07"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}, &(0x7f0000000100)={0x0, 0x22, 0x1d, {[@global=@item_4={0x3, 0x1, 0xf, "977d36b7"}, @local=@item_4={0x3, 0x2, 0x7, "1843c740"}, @global=@item_012={0x2, 0x1, 0x7, "810d"}, @main=@item_4={0x3, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x4, "8313e6df"}, @local=@item_4={0x3, 0x2, 0x9, "de61d545"}, @global=@item_012={0x0, 0x1, 0x6}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x64, 0x1, {0x22, 0xeb5}}}}, &(0x7f0000000480)={0x18, &(0x7f0000000200)={0x20, 0x0, 0xfa, "81fb85488de60ab75f407193365c0269cfec6b0871c5670676c24e3ab21a9c3d99bddfe793feb372fc7b026c1cfec1491908549ca9e543927fb8a803b17b417ab2e6285dbea1734c786fe578aec71c6a441de3575f35a1a59dc4f4887c22ee50d2bae7931e5f2c1935e483d18bbc441017b3bc3e4cc58e420174ea24665027ee696c4c7dc06f159f78b1cb7a4b24aa2b8e1270dad4aded37995fc5900590317e08e30129ea314424033aa6bb57080ea6d6f624e238a6bcce9e097816b535ea72b279c8b1c04e3490619d3b918b6d428b46964787e97de46760db6687bd3406c2ffd732366b93a742d5dbb20c2499f7dd747d50b14ec935f70352"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x1, 0x93, "57d57cffba98ad254c20b027004e92b6d4db3d05961da9b38b10681e7b1e22a03b5ea7bcee5f9c6e3138b8f2157385a634ac6954e3ceed10047117254483ae0da87b54d8f4e74f0a3a8eec3fcaa519ef20f167879fe43c264b054343bf2a59b2eeef3c477c8ee8f3dfbf056ad2b0fb3529c9a7463e6f765e9cd4c68a28e5dd9dd1a7c732c000cc82e828ec1fd07ff45161b8aa"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x1}}) 00:35:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) 00:35:13 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) getpeername(r0, 0x0, 0x0) 00:35:13 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffffffbe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:35:13 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:35:13 executing program 3: socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) [ 442.181289][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 442.222284][ T35] audit: type=1326 audit(1621038913.540:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12855 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 442.261472][T12869] device syz_tun left promiscuous mode [ 442.268319][T12869] bridge9: port 1(syz_tun) entered disabled state [ 442.411620][T12869] bridge10: port 1(syz_tun) entered blocking state [ 442.419115][T12869] bridge10: port 1(syz_tun) entered disabled state [ 442.428731][T12869] device syz_tun entered promiscuous mode 00:35:13 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) getpeername(r0, 0x0, 0x0) 00:35:13 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x2}, {0x6}]}) 00:35:13 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) msgget(0x0, 0x204) 00:35:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000580)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x101}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000003c0)=[{{&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001e80)=""/243, 0xf3}, 0x80000000}, {{0x0, 0x0, &(0x7f0000001d40)=[{0x0}, {&(0x7f0000001a80)=""/226, 0xe2}, {&(0x7f0000001b80)=""/83, 0x53}, {&(0x7f0000001c80)=""/138, 0x8a}], 0x4}, 0xffff}], 0x2, 0x40010000, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0xfffffd82) vmsplice(r2, &(0x7f0000000680)=[{&(0x7f0000000500), 0x3528a9ed}, {&(0x7f00000005c0)="f265c7f38272074ffd33cf479c1cbf4e9ba01687068a882ab3a1dedd72513981a02fbdbce1fc9b5a583a5d700d695fa75f474a8af724383961150852b86734a6d7e8941b78e3fe43c431e32d80719116a447da23498ce2e0371d03eb913e1542fce81ff3f762e45db92221e711f59600989a937c0a1b534ec7dd3470d713ddb5767a22f5297926e5a0ec46b8ec1c7f4ad6d5337550a69c45b071433cffe0dc424d624df3ad25092443bb394963ed2d"}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000008, 0x11, r1, 0x4de14000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x80) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4008054) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200), 0x175d900f) clone(0x1000000, 0x0, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000340)="827729ec36914224713dd9579c3efc5334f0c6d72c62d2c9e90c7d447f982f14e4345a6311194f025ee7939e088f5e0344df45d89a9ed6f97fbb9e8aae6b48278be669e77f48c2ee6a9bd55339d93fa743") 00:35:14 executing program 3: socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) 00:35:14 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) getpeername(r0, 0x0, 0x0) [ 442.958652][T11534] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 443.455529][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 443.496498][T11534] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 443.507200][T11534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.515801][T11534] usb 3-1: Product: syz [ 443.520302][T11534] usb 3-1: Manufacturer: syz [ 443.526056][T11534] usb 3-1: SerialNumber: syz [ 443.541601][T12895] device syz_tun left promiscuous mode [ 443.548535][T12895] bridge10: port 1(syz_tun) entered disabled state [ 443.594179][T12895] bridge11: port 1(syz_tun) entered blocking state [ 443.601727][T12895] bridge11: port 1(syz_tun) entered disabled state [ 443.611305][T12895] device syz_tun entered promiscuous mode [ 443.637327][T11534] usb 3-1: config 0 descriptor?? [ 443.695552][T11534] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:35:16 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x400, 0x9, 0xfff, 0x5e, 0x0], 0x5, 0x1800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xe7}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c0}, 0x24000040) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e186f240cd0613014b00010203016118cc81b0bea69969852309021200010000"], 0x0) 00:35:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x4}, {0x6}]}) 00:35:16 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f0000000500), 0xac000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:35:16 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000000c0)) [ 445.557567][ T8460] usb 3-1: USB disconnect, device number 87 [ 445.564374][ T8460] keyspan 3-1:0.0: device disconnected 00:35:16 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) getpeername(r0, 0x0, 0x0) 00:35:16 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) [ 445.796504][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 445.970400][T12930] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:35:17 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x4000}, 0x0, 0xffffffffffffffff, r0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @loopback}, &(0x7f0000000140)=0xc) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000340)={0x7fff, {{0x2, 0x4e22, @remote}}}, 0x88) r1 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000540)=""/151, 0x97}], 0x2, 0x0, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000740)={'broute\x00', 0x0, 0x4, 0xbc, [0x3, 0x3, 0xe8, 0x97, 0x4], 0x3, &(0x7f0000000640)=[{}, {}, {}], &(0x7f0000000680)=""/188}, &(0x7f00000007c0)=0x78) r2 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000280)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202030e2fc1e9fe6778a5a33a0f0e12cdf7b108c29fc0151371bd18b4a254461311c1537aae29d00428db8c9900b8a6a95f54f8d2a3ff0c7bc2e4648045430d49fce1ea5e5e7e893f5c09413d0944f5e9afbeeee4f7ae05c7cd12cf7d87618eadd1a02130d11d2e7163e6c481688f4", 0xb8, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="696f636861727365743d61736369692c73686f72746e616d653d6d697865642c0069b8e4e24aecaa3260"]) mkdirat(r2, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x5, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) sendfile(r3, r4, &(0x7f0000000400)=0x506454bb, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:35:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x6}, {0x6}]}) 00:35:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0) 00:35:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) poll(&(0x7f0000000440)=[{r0, 0x1280}], 0x1, 0x2) 00:35:17 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) [ 446.327462][ T18] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 446.785743][ T18] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 446.793534][ T18] usb 3-1: can't read configurations, error -61 [ 446.804341][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:35:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0) [ 446.998698][T12947] loop5: detected capacity change from 0 to 270 [ 447.031967][ T18] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 447.476022][ T18] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 447.484081][ T18] usb 3-1: can't read configurations, error -61 [ 447.638528][ T18] usb usb3-port1: attempt power cycle [ 448.149653][ T3123] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.158218][ T3123] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.395319][ T18] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 448.645488][ T18] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 448.656391][ T18] usb 3-1: can't read configurations, error -61 [ 448.815220][ T18] usb 3-1: new high-speed USB device number 91 using dummy_hcd 00:35:20 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) 00:35:20 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x8}, {0x6}]}) 00:35:20 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 00:35:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0) 00:35:20 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) r0 = syz_usb_connect$cdc_ecm(0x1, 0x57, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x7, 0x20, 0x20, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x3f, {{0x6, 0x24, 0x6, 0x0, 0x0, 'G'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xe5, 0x1, 0xfc66, 0x7b}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x40, 0x96}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x0, 0x4}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x40, 0x2, 0x7f, 0xff}, 0x105, &(0x7f0000000200)={0x5, 0xf, 0x105, 0x6, [@generic={0xb3, 0x10, 0x4, "39190dd221990602535cd27115edaede290bbacd692fdaf8dfbd11d66b05f2b6e6d7c8b88b32556c961bbb8d55d91c7bd68ad32bc66c2e1cf9184efe87feb968b1bb0cee2b57a41a801a923210bd017d16b4f21e7920d7a9539f61fd0cb40d55504f50da32ec5e27cecf3e4035295b808d66c46397dbb82ac4c21d90b397680e2978b3d4b270f05e72633179ad6d5960f21711f63a3d815b4af6fbd8ef8009639520f2f91fad55d2d5d7eed975a1b4ba"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xd7, 0x8, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "6fa7a60eebcea91f411f56218243601f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x73, 0x3, 0xdf, 0x37, 0xff}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "f7b17540bbe31ad827ae593b108be59c"}, @ssp_cap={0x10, 0x10, 0xa, 0x25, 0x1, 0x1de00, 0xf000, 0xc39, [0x0]}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x458}}, {0xbc, &(0x7f0000000340)=@string={0xbc, 0x3, "7d9ec924f600db237be51acf1274e4cf7625ad54627ee3c5b2718c4c48e06a36968cf6330c18e31926dbea1164550fa792fed6cc639b2722b762e909145ec9d0628389528fb82bd4f8f7765858918e0e5664be66dff4862bd8e6cb2fb2eb5b54c6e6da64c40dad1aa663be995c2f2dc954b4ac138198c6d686fc06a6587b7e71884412e77ee7df1a4e8ced02fab9b09244fd7f7263ce1153631255eb62bcbad5caf49b825b19d48d9eaf5a334eb3c1de7f6ec0f61fd8bc54001e"}}]}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc22e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x92, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x9a, 0x1f, 0x1, {0x22, 0x7ff}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x0, 0x1f}}}}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x110, 0x31, 0xf8, 0xff, 0x40, 0xcd}, 0x11, &(0x7f0000001280)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0xfb, 0x0, 0x7, 0xf00, 0x20}]}, 0x3, [{0x4a, &(0x7f00000012c0)=@string={0x4a, 0x3, "2a2aa8b507f2e08431d3d27df338db552b67ae95fd174a9fba1cf6a86a3c190de096d2a17dacb4de46f1deb2a63984a46bef75c399cc611c18aedf79f8d9d3650cd8bee5ea25a0e9"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x459}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000c80)={0x18, &(0x7f0000000b40)={0x40, 0x24, 0x1d, {0x1d, 0x24, "8af3cd06ecd27a09e45bb9e13210ed5e4b59aa95dc03c58f7aab55"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2}}, &(0x7f0000000bc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xca, 0x2, 0x1, 0x0, "d3958171", "20198e51"}}, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x2, 0x8, 0x1, 0x6b, 0x1ff, 0x8}}}, &(0x7f0000001180)={0x44, &(0x7f0000000cc0)={0x20, 0xe, 0xea, "5d9fc94b307f977fb50e89e866f9583a395e7b4aa8c36b676fd6229f064cad3a85d0ded86d23881845f8dfe3e87d9478891de882bd68ab3b683a9b3b0749bb6365c67b1bb94a44ac50224998753e35deddc2f97888ab173d464b867112f7345b8c99d1609d36dd125f1348a35c5ba0061fa3538e0851c087c44b338768135957d68a2c1803a7c4d96b3de1fc50d02f84693fb8816f511a55e90e3afcb4142a7c662f4bd781a342de89a71ee36f9556db2241d96a46d34517b25f30b7df8357e809d08eb4091434f2cc8aa6db608ae973b3f1ab80d1315a895f28069b3bf675717f4d8e19942bd82dd786"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000e80)={0x20, 0x0, 0x8, {0x160, 0x1, [0xf000]}}, &(0x7f0000000ec0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000f00)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000f40)={0x40, 0xb, 0x2, ':>'}, &(0x7f0000000f80)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000000fc0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000001000)={0x40, 0x17, 0x6}, &(0x7f0000001040)={0x40, 0x19, 0x2, "8dc2"}, &(0x7f0000001080)={0x40, 0x1a, 0x2, 0x81}, &(0x7f00000010c0)={0x40, 0x1c, 0x1, 0x1a}, &(0x7f0000001100)={0x40, 0x1e, 0x1, 0xe2}, &(0x7f0000001140)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io(r0, &(0x7f00000005c0)={0x18, &(0x7f0000000400)={0x0, 0xc, 0xe6, {0xe6, 0x2, "d3a227fdf1814cdb8021be64ed84e400f8568d90c79147ec861e5ce1de6eb5f06b942565a3654e63d15b5ab46bb1a17899c9bf9eba21063ca8728036f114a9e93508d5319d4b08f8feeee09934515020c2c85bbb972fb0dfa9ce15fe803fc66668c4b6f409c25362622812fc672463e9cbcd07cbb480292e717d1c41b5e973a70a92757ec381fdaa2a390bcb36f6042b65ade2de5e3197abc507c3566a181cf48a3379c219297db61deed26f38371655026a58a67d29661c04df0a2907ffaa74ffb96d96837f7e5068d931d516267b6e0b5e4ed1843d1d2dc835a3e9413c88f7a01d7abb"}}, &(0x7f0000001200)=ANY=[@ANYBLOB="0018ee6ebd4733c566e22b1c0000000000000000"], &(0x7f0000000500)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "436c392d97345c6a8a22dc14ea6e33c6"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x8, 0x0, 0x2}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x4, 0x0, "a4098bc1", "a6e9613a"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x22, 0x8, 0x910a, 0x8}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000600)={0x0, 0x16, 0xe0, "e36f507956b05722995b4b9cbed6b16f9c533075f31d8ca5f3aa065d87b050c5169f497c59030c85fa2aa8cc75c7f76564d5f469104f0f5d89ce0008f84b23497bab1112eba454f6c9b82b02c28cf108bed3c98ad01a0dd20e0894ae29cd8c7ed4009a6ca53643a4fd224e617cd00d6b3be2fb7141a29eca90399601bfda52285ffae8dd84adef80bac65e0ae36791c8359068e0bb0b88078144281842e1ee44d61b4c842754b038205119ac208dd460c973b8fc7cc9bf22cd00c50142b8fcd129198bf0980a2142c5c23905a9bf4d42a10e1db9b520196054e7ce500aba59d9"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x4, 0x20, [0xf00f]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000180)={0x40, 0xb, 0x2, "a4e2"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000900)={0x40, 0x13, 0x6}, &(0x7f0000000940)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "c93f"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0xfe00}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0xc0}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0xff}}) 00:35:20 executing program 5: semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x406f, 0x10d082) r1 = memfd_create(&(0x7f0000001840)='\xbb\x02\xb1\xed\x97\xcb\xb1,\x116\xe0\x89]\xad\x01\xc3r%;\x99\xbck\xe7=\xfa\xf6HB\x00\x9e\xc0\xa9\xc9\x88\xc7\x82\x9a\x94g\xda\xa6q\x15\xf5\xe1\x86\x8e\x1d\xdf\x9d+,\x00\xd7h\xa4\x06jtl\x00\x00\x00\x00!\xf8\xac\xdc\x00\x00\x00\xd5\\\x01g\xfd\x92\x06\xb9|\x9d\xec\xdb\x9d\x94i`8t\xbd\xe8\xbfj~NO\xb2\x1a\xfc\xff\xff\xff\xff\xff\xff\xff\x1a\xed\xaaqE\xa8\x01\x05\x00\x00\x00\x00\x00\x00\x00\x91l\x00\x00', 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x40ee1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x11, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xffffff0f) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) write(r0, &(0x7f0000000000), 0x52698b21) [ 449.128932][ T18] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 449.140328][ T18] usb 3-1: can't read configurations, error -71 [ 449.239910][ T18] usb usb3-port1: unable to enumerate USB device [ 449.394123][T12985] loop5: detected capacity change from 0 to 519 [ 449.483114][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:35:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a00)) 00:35:21 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x9}, {0x6}]}) 00:35:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0) 00:35:21 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) [ 449.915024][ T18] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 450.440615][ T18] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 450.452043][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.461151][ T18] usb 3-1: Product: syz [ 450.465612][ T18] usb 3-1: Manufacturer: syz [ 450.470419][ T18] usb 3-1: SerialNumber: syz 00:35:21 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x240400, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) 00:35:21 executing program 5: poll(0x0, 0x0, 0x2) 00:35:21 executing program 1: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{0x0, 0x28}], 0x1}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESOCT=r2, @ANYRESHEX], 0xffffffe3) fallocate(r0, 0x0, 0x0, 0x7) 00:35:21 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) [ 450.572959][T13009] device syz_tun left promiscuous mode [ 450.579897][T13009] bridge11: port 1(syz_tun) entered disabled state [ 450.647121][ T18] usb 3-1: config 0 descriptor?? [ 450.690665][ T18] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:35:22 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) [ 450.891101][T12999] udc-core: couldn't find an available UDC or it's busy [ 450.898450][T12999] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 451.032989][T12999] udc-core: couldn't find an available UDC or it's busy [ 451.040709][T12999] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 451.154079][ T35] audit: type=1326 audit(1621038922.471:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13020 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 451.220070][T11534] usb 3-1: USB disconnect, device number 92 [ 451.227149][T11534] keyspan 3-1:0.0: device disconnected 00:35:22 executing program 5: socket(0xa1b5310076c0d2ef, 0x0, 0x0) [ 451.995280][T11534] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 452.515264][T11534] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 452.524896][T11534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.533110][T11534] usb 3-1: Product: syz [ 452.538262][T11534] usb 3-1: Manufacturer: syz [ 452.543062][T11534] usb 3-1: SerialNumber: syz [ 452.570181][T11534] usb 3-1: config 0 descriptor?? 00:35:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x2}, {0x6}]}) 00:35:24 executing program 4: getgroups(0x1, &(0x7f0000000040)=[0xee01]) 00:35:24 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:35:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x24040841) 00:35:24 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0xc, &(0x7f0000000000)={0x40, 0xd, 0xa2, {0xa2, 0xe, "52e0e1be3da3a2301a950ab63887444dcba431ad638be9f0ccf60104cd2648bb256f360baa4a55f33fcce3b5d7b1af8b664484f049e2650505ea8837b3f77f05091979020767263593a3d945f6e2025ce4badcb8bf46fe57b9f648e2b810342388258f388cedc607f663edbe7a506d65e0c4259ae3d163396aef550e29e32f7c8f08b239fcf2e2843ee776e3a4ab942ded162f6e2cbdfc53e6f4f9ce9da65dbb"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x24, &(0x7f0000000140)={0x40, 0xf, 0x50, "acc50733f02dc5b558b8b44649f54e1b417dc2b31b803f0fa63eae9b3948179ff153d7d9e1886928ccba4ea372a28ac159c15368bf6ac0ed65b832c811feafafb439a2c2b889e31ddc182bec8d97d87f"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0x6, 0x9, 0x790, 0x5, 0xcb, 0x2, 0x800, 0x0, 0x4, 0x1, 0x1}}, &(0x7f00000002c0)={0x20, 0x85, 0x4}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x200}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) 00:35:24 executing program 1: creat(&(0x7f0000004780)='./file0\x00', 0x0) [ 452.696512][T11534] usb 3-1: can't set config #0, error -71 [ 452.771336][T11534] usb 3-1: USB disconnect, device number 93 [ 453.012292][ T35] audit: type=1326 audit(1621038924.331:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13052 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002380)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8004) 00:35:24 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='$\x00\x00\x00', 0x4) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xffeffffe}, {0x16}]}, 0x10) splice(r1, 0x0, r4, 0x0, 0x8000000004ffe0, 0x0) 00:35:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}, 0x0) 00:35:24 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:35:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x4}, {0x6}]}) [ 453.577085][T11534] usb 3-1: new high-speed USB device number 94 using dummy_hcd 00:35:25 executing program 5: openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f00000043c0)='./file0\x00', 0x0) [ 453.826701][T13075] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 453.863851][ T35] audit: type=1326 audit(1621038925.181:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:25 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x6}, {0x6}]}) [ 454.135781][T11534] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 454.145432][T11534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.153641][T11534] usb 3-1: Product: syz [ 454.158152][T11534] usb 3-1: Manufacturer: syz [ 454.163318][T11534] usb 3-1: SerialNumber: syz 00:35:25 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:35:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000001940)={'ip6gre0\x00', 0x0}) [ 454.352861][T11534] usb 3-1: config 0 descriptor?? [ 454.411042][T11534] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 454.601718][T13063] udc-core: couldn't find an available UDC or it's busy [ 454.609205][T13063] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 454.693299][ T18] usb 3-1: USB disconnect, device number 94 [ 454.702667][ T18] keyspan 3-1:0.0: device disconnected [ 454.725392][ T35] audit: type=1326 audit(1621038926.041:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13089 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:26 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @auto=[0x0, 0x6, 0x0, 0x63, 0x0, 0x62]}, &(0x7f0000000540)={0x0, "57c736976f157dee87c3a1398df168d85d1d45532dd97deb61c90b4ac926963b4d7f83ab6b3157960350d3d6c9d72db4fedc6e13ba8366b2e1d3c19082c11825"}, 0x48, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) [ 454.766252][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 455.474911][ T2056] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 455.996638][ T2056] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 456.006251][ T2056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.014965][ T2056] usb 3-1: Product: syz [ 456.020149][ T2056] usb 3-1: Manufacturer: syz [ 456.027333][ T2056] usb 3-1: SerialNumber: syz [ 456.065435][ T2056] usb 3-1: config 0 descriptor?? [ 456.109137][ T2056] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 456.237430][ T2056] usb 3-1: USB disconnect, device number 95 [ 456.244226][ T2056] keyspan 3-1:0.0: device disconnected 00:35:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 00:35:27 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:35:27 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f00000003c0)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202073e50000000000000000bf000000000000bf0000000000000000000089a702e37b8e1f09572d02fa165e000000000000000000000000000000000000000004", 0x82, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000140)="7f604e5ef1bc66b22891c56cedbbf15a18229cbd54f51f5532", 0x19, 0x1}], 0x0, &(0x7f0000000080)) 00:35:27 executing program 4: unshare(0x8000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:35:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x8}, {0x6}]}) 00:35:27 executing program 2: syz_usb_connect(0x2, 0x909, &(0x7f0000001500)={{0x12, 0x1, 0x201, 0x80, 0x1e, 0x79, 0x40, 0x8087, 0x7d6, 0x2117, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f7, 0x3, 0x0, 0x3f, 0x0, 0xf6, [{{0x9, 0x4, 0x9, 0x72, 0xc, 0xd0, 0xd4, 0x48, 0x5, [@generic={0x54, 0x6, "b4cb6ac1b0dc3a012783609b98a0868cba917cc0edc703727735454edf857c247df5fc401a8c2845badbb5fb96c9040f0f35cf60931f40155a5b65144a9b8ab1436de9c1336616e89b0987cd09412e3bbe60"}], [{{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x2, 0x7, 0xee, [@generic={0x7f, 0x22, "f762c3cb4eee3f93bf0d0c1592049ce8e4d5ecb6f6a977b4ef03583e971ddaef1a32e2b0198928f0e5a9ae78612f9e96a2946a436e0d2a68616065bfe6f41c1bc9bc937f2ea5509326e06dbd6d6c5fb0839e70196e9203b495c7a5afbbdb3833d5965e4d9526299901146ddc618741cc707cccc32b24b3ee7990ba95bc"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x14}]}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0x0, 0x3, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7ff}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x1, 0x56, 0xff}}, {{0x9, 0x5, 0x4, 0x1, 0x440, 0x4, 0x1, 0x1}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x35, 0x6, 0x3f, [@generic={0xa4, 0x21, "770fc056df5a2b9f36a8e61bee7a8cc7c880164427d2d5dbc946c04f98cc35eba2bceac7e01ecb388a8cd4e8f5a43f2c649a67238147cd61bbb86cfe5f46b07eb2ad2dcbb8bc407e795d24e634f1d8d25bb873fc2085616da6a89aa1f5932646e1f765301befd1634131f3270fcf13e61fd55d0d54c4fec5b5a974b11e30374c6cc6b2c27fd201a1060a5946e37989f5427e8e0e32bc517c9ab97f5d9a39404200c1"}]}}, {{0x9, 0x5, 0x7fef3535e89bb3a0, 0x0, 0x50, 0x2, 0x7, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x8, 0x80, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x7, 0x4, 0xb2, [@generic={0x4f, 0x23, "2eb715f184d31b5125149ca9f7eb7e460efce1d9838325525b7c420f74225fddc4652f7bcb21bfad6101c1f00eacf6dad8c0bd1b9450344cf67eb46dccf5d043f61f0ca18dca594d179d62961d"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x1}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0xff, 0x7, 0x1, [@generic={0x100, 0x3, "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"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x0, 0x1, 0x2, [@generic={0x51, 0x6, "8679bb1546acda0a33a9f7265177b5ef0afdf56bb85e46557dc36c3452f3b3df2c544b3f02b1c6d956d578c53d455945b36d57b26b8988fa25ff20a29bb9bd78f6e47cc67cbb28f9faa91929aa0977"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x10}]}}, {{0x9, 0x5, 0x729406dbb8aab0fb, 0x8, 0x400, 0x20, 0xb3, 0xff, [@generic={0x78, 0x11, "04ca92d75bc185471a8af601ac084d5ea2d4137a722976c85d7ef1ca97aad40b71d1c738732bc5cbe0c9cb3c80cb90ad5ea690c29e422f739e2e4eb9199f1f18910d3299f1623b9ef8ed0acf2d7dec812c1488c3e97fcf51143cb71ccb5d4e2059ed7149b15faf3b24c306ce87335bbf2694df32f219"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1}]}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x0, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x9}, @generic={0x13, 0x0, "5903132717744720817641faadbaecea48"}]}}]}}, {{0x9, 0x4, 0x1f, 0x7, 0xc, 0xc0, 0x3a, 0xc0, 0x7, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "05a35a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x400, 0x4}}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "2a7d1b5e86fe"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x9, 0xfff, 0xfe}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1b}, @country_functional={0xe, 0x24, 0x7, 0x7, 0x5, [0x1, 0x9, 0x6, 0x66]}]}], [{{0x9, 0x5, 0xe, 0x0, 0x10, 0x0, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x30}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x40, 0x4, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x94, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x40}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x5, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x78, 0x3}]}}, {{0x9, 0x5, 0x2, 0xc, 0x8, 0xfc, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x82, 0xa000}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x0, 0x2}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x7, 0xd6, 0x31, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xff}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x7f, 0x81, 0x1}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x6, 0xcd, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1}, @generic={0x9a, 0x22, "aceb848dce0746dc3dffd25e8ca7249aa50f18be70ff1338f78619551f804220b18fe9c6aaed806a74f4537a4dfce9933167fda8dfd943894cd892465ee95c1ed5e2e468fd0d671516c8d16a4766aa787192a4fd48600b35f66664b5589745c037eabbc0a0ada23ec4b4e4a554139dad9696c1097156707fad1a12fc3ccac9d282df53d841cb7c2a24c01b8c41d4a1a85ed869f58c8faf93"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x97, 0x81}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x9, 0x3, 0x81}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x1f, 0x7f}}]}}, {{0x9, 0x4, 0x67, 0x1, 0x9, 0x1, 0x1, 0x33, 0x4, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x43ea}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x8, 0x3c, 0x20}, {0x6, 0x24, 0x1a, 0x7, 0x23}, [@obex={0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @obex={0x5, 0x24, 0x15, 0x4ff8}]}], [{{0x9, 0x5, 0xd, 0xc, 0x40, 0x7, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa5, 0x1}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x8, 0x0, 0x83}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0xe6, 0xcf, 0x20}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x0, 0x80, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xff30}, @generic={0x10, 0x22, "7630b8ba0eb0311ff6b4f0f1bb7f"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0xec, 0x3f, 0x3, [@generic={0xfc, 0x6, "9507e632ee28d9211e6effc9fba7002f21d1380b4152a832331a44ff5aa83c7a12767b26b94e2c7f6a3a1608864fc0971814a4e422952edabfc3b6d6eeafb66c228dd21a7e42260a93ea5b8a0341048fac9c7776fdd0aa1f8c179c72013b977fa9aae390a76bbd458724d64ba5afb89c8c4113924b0d5fd16d1da074a36306186f2a9215907b00573122612c0e762f67f44774f64b7892176e1a3e84ebe41c7aa8b4a480a50fc329139c79f4a53ae530ff4c6bece5ec3196566cb4b7e2481f6f37e887842824336b7a65171232973d2816274c7012f05c66179bd502ce93b5be496f700302f0e910cb4353a7ac2dd776d827e14640231db514ee"}, @generic={0x6e, 0x10, "f7179108c49872bb9453804632bd3f9bf752d23c58f765479e60afe82b1b4872810f75b4550ca636f4facea42db0f75e87e91be98b289adedf33c78e9eadd1454632fef2b8e7cf5421727ba3e631ab30e154e487a2240a49ac0b041a0eb74675bd188f473d19760c07d0ba29"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x40, 0x0, 0x7, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x4, 0x9, 0x1f, [@generic={0xb8, 0x24, "4a9bad78a7298e76a8eec27b922fc9ea79c8c4f56c64810d6b4ee5f3fcdf2b092eabd0a4ac1560ca3ef7e0cb857eaff9ec908d66fa83608151fc3295b459a054721f5f80d4972624a578253181b0c3e7fc403881935d309fce3a11ae07a0b1c7486b08f7d407397c53806bc57276fa23affb1b6f412b2b11e6f936abd53b29c04a65a4bb7cd253c3df1ce0f6fe9d995afeadceb5cb31ddec2d1a3fcb0c410f9d6aa141946c0347686ecc305a6b1f2b7b389262d07cbd"}]}}, {{0x9, 0x5, 0x13c814c008903213, 0x10, 0x400, 0x7f, 0xd0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc8, 0x7}, @generic={0x3a, 0x1, "d001a48bac3af5efcfc7190fbe9b81de60cdd020a3afe0effe04911b2d2c55e3656f169a7e3a672a4bcb562b8c5a0f03cb36ef2b0cc28857"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x7f, 0x9, 0x9}}]}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0xf, 0x12, {0x12, 0x8, "f007e1182877570573275e625b46093b"}}, &(0x7f0000000040)={0x0, 0x3, 0x8f, @string={0x8f, 0x3, "cb1d3275e661392ac18a603aeab6e1136100734be6282cb21c7afb24956691aeffa2a9f53e4453487e62d7208e4c3fee97ddbad7e7a5bd8bd599d95e9dac2716f1f7ef46e6f09e0e8b30907306d82a0a89eed307c405df841d81612e64712114095da1b8d9d00cd65d0015bf9e9a57bd52b79b4e13c224091653678d5cad0bbc79f969867a3ae5e0f2f5bc12a1"}}, &(0x7f0000000100)={0x0, 0x22, 0x1c, {[@main=@item_4={0x3, 0x0, 0xa, "b2c35613"}, @local=@item_4={0x3, 0x2, 0x3, "c91cfb89"}, @global=@item_4={0x3, 0x1, 0x7, "95b98005"}, @global=@item_4={0x3, 0x1, 0x6, "04d1f11a"}, @global=@item_4={0x3, 0x1, 0x4, "b23b3a71"}, @main=@item_012={0x2, 0x0, 0xc, "8c57"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x9, 0x1, {0x22, 0x127}}}}, &(0x7f0000000380)={0x18, &(0x7f0000000200)={0x20, 0x1, 0x1a, "b61d823255f886c56d912bdcb63ce498bf3b30a188f4d109d454"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0x20, 0x1, 0x74, "6b99419f468ff2229ba16d6b7b3a6cf206ab11783866f6cd7a5bf787c20b988763534952959ccc83197a5dada4fc2b3ab7390540637fe5aabd780cea3b8c3e1f7326e3e9dfe822ecbf3f852448aad40bfac414eb4e9e7817faa396702af14a360ec109bad55904bc43f6be1b581c32791a797521"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x8}}) [ 456.519128][T13128] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 456.553207][ T35] audit: type=1326 audit(1621038927.871:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13127 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 456.584279][T13130] loop5: detected capacity change from 0 to 16 [ 456.673813][T13136] loop1: detected capacity change from 0 to 136 00:35:28 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 456.896819][T13130] attempt to access beyond end of device [ 456.896819][T13130] loop5: rw=2049, want=17, limit=16 00:35:28 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0) [ 456.981493][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:35:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x9}, {0x6}]}) 00:35:28 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f00000003c0)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202073e50000000000000000bf000000000000bf0000000000000000000089a702e37b8e1f09572d02fa165e000000000000000000000000000000000000000004", 0x82, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000140)="7f604e5ef1bc66b22891c56cedbbf15a18229cbd54f51f5532", 0x19, 0x1}], 0x0, &(0x7f0000000080)) [ 457.226824][ T18] usb 3-1: new full-speed USB device number 96 using dummy_hcd 00:35:28 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:35:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) [ 457.539481][T13146] udc-core: couldn't find an available UDC or it's busy [ 457.547248][T13146] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 457.593917][ T35] audit: type=1326 audit(1621038928.911:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13155 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 457.708561][ T18] usb 3-1: unable to get BOS descriptor or descriptor too short [ 457.754237][T13164] loop1: detected capacity change from 0 to 136 00:35:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x10}, {0x6}]}) 00:35:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) [ 457.835668][ T18] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 457.844170][ T18] usb 3-1: can't read configurations, error -71 [ 457.947376][T13167] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 458.015777][ T35] audit: type=1326 audit(1621038929.331:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13168 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:29 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f00000003c0)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202073e50000000000000000bf000000000000bf0000000000000000000089a702e37b8e1f09572d02fa165e000000000000000000000000000000000000000004", 0x82, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000140)="7f604e5ef1bc66b22891c56cedbbf15a18229cbd54f51f5532", 0x19, 0x1}], 0x0, &(0x7f0000000080)) [ 458.166807][T13175] loop5: detected capacity change from 0 to 16 00:35:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x1b0}, {0x6}]}) [ 458.333231][T13182] loop4: detected capacity change from 0 to 16 [ 458.432121][T13186] loop1: detected capacity change from 0 to 136 00:35:29 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 458.555335][ T18] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 458.869277][T13146] udc-core: couldn't find an available UDC or it's busy [ 458.876712][T13146] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 458.975016][ T18] usb 3-1: unable to get BOS descriptor or descriptor too short [ 459.104729][ T18] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 459.112601][ T18] usb 3-1: can't read configurations, error -71 00:35:30 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) syz_usb_connect$uac1(0x3, 0xb1, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0xe8, 0x20, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x28, 0x80}, [@selector_unit={0xb, 0x24, 0x5, 0x6, 0x40, "309cba24021f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x8, 0x2}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xc8, 0x1, 0x9, 0x1f, "a013dec8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x80, 0x6, 0x1f, {0x7, 0x25, 0x1, 0x2, 0x6, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x3, 0xd6, 0x80, "25c671507b7964246a"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x6, 0x1}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x80, 0xc5, '5Q'}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xd0, 0x80, 0x2, {0x7, 0x25, 0x1, 0x1, 0x2, 0x40}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x5, 0x8, 0x9, 0x8, 0x6}, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="050f057f0e"], 0x9, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x418}}, {0x98, &(0x7f0000000200)=@string={0x98, 0x3, "ae03588ddad6acef3b8fc891279cc18d66329f266038e69b073edd3ffeb99f6af747c60bc90884243c8720b4789f00a54812742e5951c6d75cb5fed95e46640bb4205d9bfba18a63b7a7650f4eb44b82e8cf8b279adf07881401e06a44582e0f8d10cd4363438baeffe889ec60aea8f67c83767b0326a8d18bba64806053443c1f65d9c9476b89dbe27f062e3e71ae2ad27213c93a59"}}, {0x6e, &(0x7f00000002c0)=@string={0x6e, 0x3, "3dbeefc937eb64474c9d54f3b644bc5b32e5a7f45e4b100c72ad9d34a9e763eac54bc68b7de6e6086065b9dffd6b9879cef2cbbd640054e29449b30fc052cfb178cd01b0e9eb29b041f34b8fbd71c0fecb803328e8843293cad6ff0c4aa805f6cfac1eaaf077e0d8ce4b6091"}}, {0xa7, &(0x7f0000000340)=@string={0xa7, 0x3, "293d46e11f9e3474964e8a8e5bce2d2541c5ad0c8ad25fffc4f17b935704431dcaf82ccf2461ef7272ad278b570014448a8c1182843c224c173f43a07b5642aa4265885f6c6ef3fbcb985cae66d75806ad2c1f62b2cd0598fc4fed0eba7ec4704964ead11a1c088204a86332d7b5c38e920849ecb5deabe955ae681e0458d79b47006723044e5d34ea3c5601e686af8efe88c71ce67d4f49102f65c41223bde33c44fd5805"}}, {0xa, &(0x7f0000000180)=@string={0xa, 0x3, "98d0ddb82565f5a4"}}, {0xbc, &(0x7f0000000400)=@string={0xbc, 0x3, "8a832c8f98653fd0fc7005e9f6ee462059c7576aab1eb1be4040424736c824be3ac59772529ea1bed828f42e79ae5966376489ec9c38b4a7a12dc3510d9f137ac1e9e46835cd4305f104fe7836e9d5795bbe1dbf6786b00eb36d597cd961943b7bf06800355191e74932e9514ee4ed3910c0e4d4bb73a9b4a2fda965bf5e5e9f2e44fc36bfb7bc45512c479cc43ce5c38f56a0f5708cce586f0874b43663c5fcced17887973e2e687fa26fb9869452f366d0e2ebf54c98bec22a"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x4ff}}, {0xf7, &(0x7f0000000540)=@string={0xf7, 0x3, "ad91fe290c043b1c86c5d4023136e1ab0b1c4362e959d6759f0ea84c95fd42490aafeb72a4e92817b779c6f28e023c6a548b69d206f253f3c698b866a486139d9b26efc0f596b02bfe1a52c9c03050b541095bc81067c450324c2b24dffcb2ef6c19a9dbeef8949b71ded072df7dc7f12c1adef5a5038c5840315893e78d4922219d1eab86275f1e8d5099b80950b7907b5f1cf236df149e1b2bff007f007e2abd7d2d4329842fff285305030ab44be2d33c78942e2d5b4fa2457b717435d52692e9f1f129762e5147dfc4ae8cf270d73814a414b40fefe7352e906c1881ad4f55d3d49739921c5c07e2656b54aa45507b4458f451"}}]}) 00:35:30 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f00000003c0)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202073e50000000000000000bf000000000000bf0000000000000000000089a702e37b8e1f09572d02fa165e000000000000000000000000000000000000000004", 0x82, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000140)="7f604e5ef1bc66b22891c56cedbbf15a18229cbd54f51f5532", 0x19, 0x1}], 0x0, &(0x7f0000000080)) 00:35:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 00:35:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) [ 459.154773][ T35] audit: type=1326 audit(1621038930.471:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13196 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 459.180109][ T18] usb usb3-port1: attempt power cycle [ 459.283025][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:35:30 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x248}, {0x6}]}) [ 459.427235][T13208] loop1: detected capacity change from 0 to 136 [ 459.670166][T13216] loop4: detected capacity change from 0 to 16 00:35:31 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) [ 459.925258][ T18] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 459.935356][T13222] loop5: detected capacity change from 0 to 16 00:35:31 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x1, 0x0) [ 460.113778][ T35] audit: type=1326 audit(1621038931.431:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13221 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 460.137024][T13222] attempt to access beyond end of device [ 460.137024][T13222] loop5: rw=2049, want=17, limit=16 00:35:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 00:35:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x2c0}, {0x6}]}) [ 460.345121][ T18] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 460.354758][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.362944][ T18] usb 3-1: Product: syz [ 460.368049][ T18] usb 3-1: Manufacturer: syz [ 460.372990][ T18] usb 3-1: SerialNumber: syz 00:35:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) [ 460.542514][ T18] usb 3-1: config 0 descriptor?? [ 460.548454][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 460.675826][ T18] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 460.800821][T13213] udc-core: couldn't find an available UDC or it's busy [ 460.808287][T13213] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:35:32 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) [ 460.871019][ T35] audit: type=1326 audit(1621038932.191:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13241 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:32 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f00000015c0), 0x101400, 0x0) [ 460.926148][ T18] usb 3-1: USB disconnect, device number 98 [ 460.933393][ T18] keyspan 3-1:0.0: device disconnected [ 460.950451][T13243] loop4: detected capacity change from 0 to 16 [ 461.139481][T13256] loop5: detected capacity change from 0 to 16 [ 461.675939][T13267] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 461.685874][ T18] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 462.206866][ T18] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 462.216502][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.225814][ T18] usb 3-1: Product: syz [ 462.231214][ T18] usb 3-1: Manufacturer: syz [ 462.236623][ T18] usb 3-1: SerialNumber: syz [ 462.305522][ T18] usb 3-1: config 0 descriptor?? [ 462.348963][ T18] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:35:33 executing program 2: r0 = syz_usb_connect(0x6, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xb3, 0x49, 0x64, 0x8, 0x1234, 0x5678, 0x945e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0xfd, 0x0, 0x6}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, &(0x7f0000000040)={0x20, 0x2, 0x53, {0x53, 0x22, "9a0c1f6d1ff10d045c8896bb21066b3297f751e851b729a146488a81aadef0d594f3828254ee0e3a1e197dcd61e818f0cfaa785919428c8867c70fb1de0aa1f960ab96e15d6cc7a0d6348451c768a0cb42"}}, &(0x7f00000000c0)={0x0, 0x3, 0xce, @string={0xce, 0x3, "032bfe3fdc98f141ad0841231fba5dadb672695630387954863bfa93d1c73309d983d5c8f3c1d66c90bb4975a8cef5f6f72f4f9d33fa494a0d13bcdfe7a97a4618e29cd9176953823407cb073bfa24e28ed72c4c33d23c0fb333a5c9a15e417d24557a659ec161924965b57850c3428e7538db66f3b2d3d4c35f2cd7ab52c2124e0d129da77854d947ef40a590980fbdcda56a9c4e737bb29cc76a5275740768af452732cd68c29d45fe30d4e1e8a5bb2228f8d5076be8d03d79ddefa6077348f8ced2f239606e07da111d16"}}, &(0x7f00000001c0)={0x0, 0xf, 0xfe, {0x5, 0xf, 0xfe, 0x2, [@generic={0xee, 0x10, 0x1, "d7b5b63bb4cee91b721b6148eb8be92fb5ace1da29d99d11203dca638f09511b57e9790d96307c7754235c94341b52032deff3ac0ba8e74c52affedbad0d413d3fc9598d7561b5a709b57a7d695bb405c2822247d7dd2392ac4b79f8bb97409e459bc8e1d173c61876b36918965622221864a7d84c6d95d1f9f9c991d5ccd59923e51c0a0d1abc7aaeb91dd9105d51ccc9c40cd712b3fe9138fada9fb1d8733412508dbb593b4e724aa37ee4774a2a251ed25085b904d56f5a18534298221df03895c91d48e8173fb473c21c49c1aac6ecaedf64f45bb4275c74feaeb3634505f32d3767e155a9b4f5dd4c"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x2, 0x6, 0xb9b, 0x8}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x4, 0x7, "2c0f4474", "ae3c1419"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x0, 0xe0, 0x89, 0x5c, 0x4, 0x19}}}, &(0x7f0000000880)={0x44, &(0x7f00000003c0)={0x20, 0x5, 0xd8, "d3e1c0cb481ea8e794298d685523853d54404c1aa8ea8bb82fea207285a6f3fd24c7d1b264c7dbd1ee5d2e2cd41a28642c86304195cb2050ff076be47a329a117eaf68a4994aa1a20cd6310209446941d3cd82ab4474702be50c65a1ad50b572fbf01bb08b70726c9c952483e23c22424bee687c94e6d59fe1842e95b9f5a480ca78135224a7973d92ecdf3119eb436b16279fe46a9856bc83ac1eda03164ef53285f30a6683ac42ed49b883f211850b1d3b5123cd2f6896e426f122881aa6dd6d9b6e5423dc6ffef2b4adfea0047fee6725e54be0954693"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x4}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x60, 0x40, [0xfff0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x600}, &(0x7f0000000600)={0x40, 0x9, 0x1}, &(0x7f0000000640)={0x40, 0xb, 0x2, "07bf"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "d4de"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xf9}}) 00:35:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x600}, {0x6}]}) [ 462.600207][ T18] usb 3-1: USB disconnect, device number 99 [ 462.607198][ T18] keyspan 3-1:0.0: device disconnected 00:35:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x70}}, 0x50) 00:35:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003fc0)=[{{&(0x7f0000001680)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1}, 0x1c, 0x0}}], 0x2, 0x0) 00:35:34 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:35:34 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) [ 462.901321][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 462.923665][ T35] audit: type=1326 audit(1621038934.241:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13286 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:34 executing program 4: r0 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) 00:35:34 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000002700), 0x1, 0x0) read$char_raw(r0, &(0x7f0000002800)={""/20370}, 0x5000) 00:35:34 executing program 5: getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000b00)) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='net/sctp\x00') syz_io_uring_setup(0x33f5, &(0x7f00000022c0)={0x0, 0x602b, 0x1, 0x3, 0x111, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000002340), &(0x7f0000002380)) 00:35:34 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:35:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x900}, {0x6}]}) [ 463.625910][ T35] audit: type=1326 audit(1621038934.941:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13301 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:35 executing program 4: r0 = socket(0xf, 0x0, 0x7) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000d00)={'filter\x00', 0x0, [0x0, 0x5526]}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, 0x0, 0x1) socket(0x3, 0x0, 0x0) io_uring_setup(0x3a85, &(0x7f00000017c0)={0x0, 0xafda, 0x2, 0x3}) 00:35:35 executing program 2: ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000100)={0xfff, 0x5, 0x3f0, 0xf9, 0x65500000, 0x81, 0x10f4}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e186f240cd0613014b140102030109021200010000000009040000001a000000007f03d1bcf449af568e77a9afe1fe90f6401b5c4bba495eaae277f4372c26f2f07f207c50878636f824f8ec282ea4638fc24f8d71c909896ba7423cb0f4495d2fa237caa711fb9f19765f3531d0c2a784482866fdfceab9de48fbd882a649e48fa48b21feb45a1709a665d40a57b395e1cb2757ddaacdd9b8c6da56cb58fd653657b893e9da29264384f69c9aa47376059f93ee64f846c7825c721867d0"], 0x0) r0 = openat$vsock(0xffffff9c, &(0x7f0000000200), 0x400400, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000000240)={0x6, 0x4, 0x4, 0x1, 0x81, {0x77359400}, {0x1, 0x1, 0x0, 0x3, 0x0, 0xac, "cc296d3b"}, 0x40, 0x2, @offset=0x6, 0x2, 0x0, r0}) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @bt={0x3693, 0x7ff, 0x3, 0x3e, 0x10000, 0x10001, 0x10, 0x2}}) 00:35:35 executing program 1: syz_open_procfs(0x0, &(0x7f00000021c0)='net/sctp\x00') 00:35:35 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:35:35 executing program 5: sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001c00)={0x48, 0x0, 0x4, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x48}}, 0x14) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='net/sctp\x00') ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000002200)=0x7) bind$isdn(0xffffffffffffffff, &(0x7f0000002280)={0x22, 0x4b, 0x8, 0x7, 0x2}, 0x6) syz_io_uring_setup(0x33f5, &(0x7f00000022c0)={0x0, 0x602b, 0x1, 0x3, 0x111, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000002340)=0x0, &(0x7f0000002380)) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 00:35:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x2000}, {0x6}]}) [ 464.725121][ T35] audit: type=1326 audit(1621038936.041:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13326 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="01"], 0x98}}, 0x0) 00:35:36 executing program 1: perf_event_open$cgroup(&(0x7f0000000840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:35:36 executing program 5: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001580), 0x0, &(0x7f0000001680)) 00:35:36 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:35:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x4802}, {0x6}]}) [ 465.244754][ T8461] usb 3-1: new high-speed USB device number 100 using dummy_hcd 00:35:37 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 465.756376][T13348] Mount JFS Failure: -22 [ 465.761143][T13348] jfs_mount failed w/return code = -22 [ 465.777123][ T8461] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 465.787149][ T8461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.795544][ T8461] usb 3-1: Product: syz [ 465.799927][ T8461] usb 3-1: Manufacturer: syz [ 465.805039][ T8461] usb 3-1: SerialNumber: syz [ 465.818188][ T8461] usb 3-1: config 0 descriptor?? [ 465.876374][ T8461] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 465.902704][ T35] audit: type=1326 audit(1621038937.221:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13347 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:37 executing program 1: perf_event_open$cgroup(&(0x7f0000000840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 466.056786][T13348] Mount JFS Failure: -22 [ 466.064850][T13348] jfs_mount failed w/return code = -22 [ 466.074797][ T9236] usb 3-1: USB disconnect, device number 100 [ 466.082302][ T9236] keyspan 3-1:0.0: device disconnected 00:35:38 executing program 2: modify_ldt$read(0x0, &(0x7f0000000000)=""/174, 0xae) syz_usb_connect(0x4, 0x50a, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x7f, 0x35, 0xa1, 0x40, 0x15c2, 0x40, 0xc116, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f8, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x28, 0x0, 0xd, 0x9b, 0x23, 0xe0, 0x80, [], [{{0x9, 0x5, 0xf, 0x0, 0x8, 0x2, 0x69, 0x4c, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x5}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x45, 0x0, 0x6, [@generic={0xb3, 0xe, "f7567d421be773c54859dfa9ac89ab62ccc9d7b8a930e43ad3ad4782cf704ed9dcd40ea8753064c9b6925ee146210ab16be100cbb47606131691b8832fa250068f7ed3fb4e44c4e2d9fc835fba65b7a40225052b824b2cf18da2d0b40456942d8c6d86d66d25fa5a54164d88bb73aa87d2b85085659145d0adccd87823ed7a2c9fee933384be99ef774cc965ff7ee2343a41a988d9e1fceb06f75a3f050a84d47bf3a90f345796d02368339a05ad868b10"}]}}, {{0x9, 0x5, 0x83, 0x0, 0x400, 0xee, 0xc5, 0xd4, [@generic={0x49, 0xd, "cb87e6bf6d55d21b7e29a25acb0f63e384dcba6d282c9e8b7b4c7fe57f9a787cbe06507715578d055235b62b196e93e3d1aaeb3b99392dc9d9ad04f7509030266f26e63daa6fb8"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x2, 0x95, 0x3}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x0, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5}, @generic={0x93, 0x6, "138ac71e0a773a6b6cc4bc45c6c384ad41a6733ad510488357b38824bffb79a029f07c8b07920d92f18120272106a3fdf9031a61aabd106fa47e450eebe2b2d3620720c8da8b196e499b82feb480b493da9c41cf68e4387aecb9103186ff0290a55a3fd70ab72e0b45a42ff8f173809c28f04917923d60c4a919ead8269f9038ad6c7cca99510508244a855ddafc5c0976"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x0, 0x1, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x13, 0x1}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x2, 0x0, 0x0, [@generic={0x78, 0x23, "98c42fe5513d82b022a689c0f7cfc5cf2b729b19037e8c12b2d5b88dec2336f985975d525f157ac7db426f32e0c0ab7d6e7db1089e7147b6ec4ab0c235dc8cf89ed8c22fec00992a907726a208f5de42ce0893f591d850e130b5974261726265fb6b35a17959f385be18ae17347978188f10bcdd7865"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x2b, 0x8, [@generic={0x5c, 0x10, "f4242cfff56878dbc49781ae33e60dfc27c53a0eeb5d059d2d62edc9159f1057ee6d6b1d15702018c2aed9a4195df949b88672487db80648be32d01b293ee376b734da97a48d607572cfbdc000cfe428f7f8baacc3134caec70c"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0xd8, 0xf9, 0x6, [@generic={0xdb, 0x23, "77443f275cfe38eca6c35012b251b1d874ff5d562efd8aecc8067e9098a12d7dcfa3d5659fe560b1e9bfa3d302ddf77efe4a136d98472e6d80f0adc2f1226c89dc8cfb0f108e23e9256ef5bb7db54cd8adced1bf277a673cdda1c6648be8ec44c2fb704399e19c73dec12ea093bc72712af452ee27feabc947ba97188390dbe88bd136fe795dc0e08dadd7e97fbdfeb71964b2135dc34b0163c7c0a93df62e1e466549bead5ee9eccba5456b97c578234b21b5c448ba9f4c25b585ea93d018b0a84161203396586fac62ec50f381ce2b9dacb1aafacfa9b91d"}, @generic={0xaf, 0x10, "11dcef97e364270aa499a9dff700a29dd0ea48fc0bffb4ee8aab6f75590c99f2c243a10a5dfd660e233ae7a2675dff9d0737746c9f40018157a4f13f59c38f6ef6adfcfb71e54548ece10e21c2e2d08e0efff61353779a09824143259c0af77c970f4252ea85b01da3963683e8f2315807ff9628130db0fbd744ad4869d882d233662e128790e204b8e336976ca998c13078214b3852e42acb0cde62c998ff6ac8cc151e13fe45f4d832bdbb8c"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x2, 0x2a, 0x35, [@generic={0x14, 0x8, "0bf17bbc76d676e3d985b8288c4e0b5e5cea"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xb6, 0x6, 0x81}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x0, 0xf7, 0x9, [@generic={0x46, 0x7, "63f5e8a18a51f90b02d3db7927a5f29af21c7dfe028dfd7ca9430a6041d066809ce9f90586a2bba4740932979ea9904b55d7e1961707ace93ca3ce9e0fbc5a47b7fd21a4"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x5}]}}, {{0x9, 0x5, 0x0, 0xc, 0x0, 0xf0, 0x36, 0x3f}}]}}]}}]}}, 0x0) 00:35:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0xb001}, {0x6}]}) 00:35:38 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32, @ANYBLOB="000000000400000008000a00", @ANYRES32=r4], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) 00:35:38 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) 00:35:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000440)="f9"}) 00:35:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='net/sctp\x00') ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 467.119139][ T35] audit: type=1326 audit(1621038938.441:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13377 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 467.204026][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:35:38 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @loopback}], 0x10) 00:35:38 executing program 4: syz_open_dev$vcsn(&(0x7f00000001c0), 0x0, 0x40000) 00:35:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0xc002}, {0x6}]}) 00:35:39 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32, @ANYBLOB="000000000400000008000a00", @ANYRES32=r4], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) 00:35:39 executing program 1: r0 = getpgid(0x0) r1 = fork() kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, 0xffffffffffffffff, 0x0) 00:35:39 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) close(r0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000000c0)={0x77359400}, 0x8) r1 = mq_open(&(0x7f0000000040)='\xcb^\x00', 0x800, 0x20, &(0x7f0000000080)={0x9274, 0x5, 0x6, 0x1}) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xad) syz_usb_connect(0x1, 0x1b, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x0) [ 468.224956][ T35] audit: type=1326 audit(1621038939.541:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13398 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:39 executing program 5: syz_mount_image$qnx6(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/69, 0x45) 00:35:39 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) [ 468.348061][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:35:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0xff7f}, {0x6}]}) 00:35:40 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32, @ANYBLOB="000000000400000008000a00", @ANYRES32=r4], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) 00:35:40 executing program 1: request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0) 00:35:40 executing program 5: openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 469.050988][ T35] audit: type=1326 audit(1621038940.371:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13421 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:40 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000020c0)={{}, 0x0, 0x0, @unused, @name="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"}) [ 469.118250][ T18] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 469.272372][T13425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 469.322469][ T18] usb 3-1: device descriptor read/64, error 18 00:35:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x100000}, {0x6}]}) [ 469.594539][ T18] usb 3-1: new low-speed USB device number 102 using dummy_hcd 00:35:41 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:35:41 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) 00:35:41 executing program 5: add_key(&(0x7f0000000180)='encrypted\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) [ 469.791602][ T18] usb 3-1: device descriptor read/64, error 18 [ 469.871851][ T35] audit: type=1326 audit(1621038941.191:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13438 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 469.917913][ T18] usb usb3-port1: attempt power cycle [ 470.203872][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 470.635173][ T18] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 470.805254][ T18] usb 3-1: device descriptor read/8, error -61 [ 471.081475][ T18] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 471.255370][ T18] usb 3-1: device descriptor read/8, error -61 [ 471.375243][ T18] usb usb3-port1: unable to enumerate USB device 00:35:43 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e186f240cd0613014b140002030109021200010000000009040000001a104000441f91e1319761cd47ab0f13b813d89a1c703bd3e2a259c7d6e8851af1d3e69a0fd22e55d979cb68"], 0x0) 00:35:43 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x40402, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x5) 00:35:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x12945c}, {0x6}]}) 00:35:43 executing program 5: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000a80), 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x33f5, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x3, 0x111}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000002340), &(0x7f0000002380)) 00:35:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:35:43 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) [ 471.919416][ T35] audit: type=1326 audit(1621038943.241:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13464 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 471.984814][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:35:43 executing program 5: syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x33f5, &(0x7f00000022c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000002340), &(0x7f0000002380)) 00:35:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x200000}, {0x6}]}) 00:35:43 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:35:43 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) [ 472.574772][ T18] usb 3-1: new high-speed USB device number 105 using dummy_hcd 00:35:44 executing program 4: creat(&(0x7f0000000d80)='./file0\x00', 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x48400, 0x1c1) [ 472.799952][ T35] audit: type=1326 audit(1621038944.121:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13491 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:44 executing program 5: removexattr(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)=ANY=[]) [ 473.004570][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 473.075368][ T18] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 473.085297][ T18] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 473.093671][ T18] usb 3-1: Product: syz [ 473.098876][ T18] usb 3-1: SerialNumber: syz [ 473.229433][ T18] usb 3-1: config 0 descriptor?? [ 473.270868][ T35] audit: type=1804 audit(1621038944.591:106): pid=13505 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir534584114/syzkaller.ULyHMT/103/file0" dev="sda1" ino=14761 res=1 errno=0 [ 473.302022][ T18] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 473.506137][ T18] usb 3-1: USB disconnect, device number 105 [ 473.513332][ T18] keyspan 3-1:0.0: device disconnected [ 474.274653][ T8461] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 474.774745][ T8461] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 474.784197][ T8461] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 474.792672][ T8461] usb 3-1: Product: syz [ 474.797270][ T8461] usb 3-1: SerialNumber: syz [ 474.821845][ T8461] usb 3-1: config 0 descriptor?? [ 474.876494][ T8461] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 475.097668][ T7] usb 3-1: USB disconnect, device number 106 [ 475.105140][ T7] keyspan 3-1:0.0: device disconnected 00:35:46 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x1000000}, {0x6}]}) 00:35:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000480)) 00:35:46 executing program 3: r0 = socket(0x1, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:35:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 00:35:46 executing program 5: ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x0, 0x0, [{{}, 0x1ff}, {}]}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b67, &(0x7f00000005c0)={0x1f00, 0x0, 0x0}) 00:35:46 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000001200)={0x14, &(0x7f0000001000)={0x0, 0x9, 0xfd, {0xfd, 0xa, "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"}}, &(0x7f0000001140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcd0}}, &(0x7f0000001180)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x2, "2762c4d4"}, @local=@item_4={0x3, 0x2, 0x3, 'g$\bB'}]}}, &(0x7f00000011c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x81, 0x1, {0x22, 0xf24}}}}, &(0x7f00000013c0)={0x18, &(0x7f0000001240)={0x20, 0x13, 0x24, "0f81524d254d67c5ec8b4f335eba819b77668248fd50e23124097823407262949e69327e"}, &(0x7f0000001280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000012c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000001300)={0x20, 0x1, 0x40, "4abea82b15f7146191e0a0c144a1ccb59be7ac2c4aaeab16f7cf900255251f83ce4653017bfc7044466b1d11a3c0509476505ff851a2eaef0ce93ab1f9a78b88"}, &(0x7f0000001380)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x18, &(0x7f0000000740)={0x40, 0x30, 0x94, {0x94, 0x9, "b3d776b3b6e49a81d9c30c314e0a9d1eb3557a213847ecc6e72f239f065a8e477b6804b18c467e9447ecf8445df7dbc8aa5df9dd9d84983af3d3268d0f21e65be0daceb32a9745c00fc6b22a2237ce420d3d68530893eb40c78a831d1259a057d948b1aeaf4f395f8e75bc1debccbff32cd3a096712eee93af7522d3b5128eb9a14371368e66e680f601ae3f6a756f00969f"}}, &(0x7f0000000800)=ANY=[@ANYBLOB="0003fd000000fd03d668411cbca3d1b53b3527ec181cad2be990d6a9d69a6b9f4560cdf9276d653d71a96ca86c1b36c182cc08755f9debfc3d73812cf5f2f6330afb8ac36932812ebede20dee6bdeaccc63e1157296ba17988d990a4048a26746fb51601ec0ce7da36a0fb8e210052b952889d57995befcaa6cd83b64e2e461cc35e3931f60ec6d91eb66c2b0e9f5731448ddf7b7667650b06d4fe5c8a11c81069f0ebc5b81a812475243536db7c4a918fef12be86fdd2534257575fd03c3f973e2778a1af627a7f37ef311eada57836edfa2448f31a4a9808087e070c36f5515115c47e4b95fc4b410dd8059713d867b8cfdf2b0b"], &(0x7f0000000940)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x3f, 0x2, 0x2}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x7, 0x1}]}}, &(0x7f0000000980)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0xf5, 0x6, "03ebe6b7", "7c97a33b"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x7, 0x5, 0x8, 0x1, 0x5}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000a80)={0x0, 0x16, 0xc7, "96e903ba77a9cb85ceb2131f7a5b2ade0bacd023fec8f425792f752a5c2b285776119cfd92ece9c0ee19487dda25bc602de1db55b4a08f7a6ba86c8b959b2b305a2bf3723463eddfd7e29e63386d796b018b4a355ddacd1bd19ac26cfdd661414cabd2c434758c4da4a791169c506b005193ec2c19bf2177283380e47b00ac2c2422f94d14b0bafabe46d7623b7dc1dca48d0ab345e2adf688ae6d20f08081a5e06289ccaf7aca65b757d82b2cbe75fb756d1ddc37fc5f1c23692250203fce2cbd140bd32f4844"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x6, 0x1}}, &(0x7f0000000c80)={0x20, 0x0, 0x8, {0x20, 0x7a, [0x77]}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0xd6e}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "e714"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0xa362}, &(0x7f0000000dc0)={0x40, 0x13, 0x6}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "81ee"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x20, 0x10, 0xd6, {0xd6, 0x22, "9dbda86261586ebedb28e36a14e9b3a4726a515923895c4950c75ed308b108a6b81228aaaf3ddab402c3e9fdb2e537c2034630a3097c39da2fb360af0ca167563f257949c7e76a694531b474865a8892c2c0b55e2f047cf253e759b693c376083a14db20a32e43f9f57bd45193237e1d2c0c60e905bfe670ab935d35e567a243f1dcb7cfad942d2986a179b1b52267eac9a9ff8f0d5fc09aa6fcf1ff0cf40094dfc37e7ecafebb429d0011ad2a9fd2be1f690942967aa691d1ed7ac4e170838112716183ec3b801c099449d348fb46e508a6b979"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x90ec}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc2, 0x60, 0x7, 0x6, "8fee49e2", "b4276861"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc5, 0x18, 0x20, 0x2, 0x7f, 0xff34, 0x1f}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000280)={0x40, 0xf, 0x69, "39336648058a1ec25bb5d0dee972e89db69402bd517269d9cfe7ec0714a9836924a5985e008e9e06d0014215a44b5a0f126fb4d0cc77d3809cd9b081d455c7aba646a965ec352c2bfc3a1f291b9940f351d95a713ff4433b7e8cca633e38372f6193dff371c4397828"}, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x160}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000480)={0x40, 0xb, 0x2, "8d2b"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, '\f\''}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0xd51}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 475.759479][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 475.821866][ T35] audit: type=1326 audit(1621038947.141:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13543 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:47 executing program 5: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_pktinfo(r0, 0x0, 0x16, 0x0, 0x0) 00:35:47 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x2000000}, {0x6}]}) 00:35:47 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000002140)='./file0\x00', 0x80400, 0x8) 00:35:48 executing program 3: r0 = socket(0x1, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:35:48 executing program 4: mknod(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file1\x00', 0x40400, 0x2) [ 476.784715][ T7] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 477.244970][ T35] audit: type=1326 audit(1621038948.561:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13572 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 477.269174][ T35] audit: type=1804 audit(1621038948.571:109): pid=13579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir209955543/syzkaller.y5CTun/184/file0" dev="sda1" ino=14807 res=1 errno=0 00:35:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f00000001c0)=0xe9) [ 477.364338][ T7] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 477.373764][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.382496][ T7] usb 3-1: Product: syz [ 477.387105][ T7] usb 3-1: Manufacturer: syz [ 477.391958][ T7] usb 3-1: SerialNumber: syz [ 477.481906][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:35:49 executing program 1: mknod(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x60200, 0x51) [ 477.777859][ T7] usb 3-1: config 0 descriptor?? [ 477.849913][ T7] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:35:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x4000000}, {0x6}]}) 00:35:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') write$P9_RLINK(r0, 0x0, 0x0) [ 478.020630][T13569] udc-core: couldn't find an available UDC or it's busy [ 478.027891][T13569] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:35:49 executing program 3: r0 = socket(0x1, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) [ 478.174751][T13569] udc-core: couldn't find an available UDC or it's busy [ 478.182105][T13569] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:35:49 executing program 5: r0 = creat(&(0x7f0000000d80)='./file0\x00', 0x0) write$cgroup_int(r0, 0x0, 0x0) [ 478.510098][ T35] audit: type=1326 audit(1621038949.831:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13598 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 478.704220][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:35:51 executing program 4: mknod(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file1\x00', 0x4e00, 0x0) 00:35:51 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x42, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[], 0x9b) 00:35:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x6000000}, {0x6}]}) 00:35:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:35:51 executing program 5: mknod(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x2a4400, 0x0) [ 479.748465][ T9236] usb 3-1: USB disconnect, device number 107 [ 479.756816][ T9236] keyspan 3-1:0.0: device disconnected [ 480.097759][ T35] audit: type=1326 audit(1621038951.421:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13621 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 480.156327][T13630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 480.216348][T13635] bridge27: port 1(syz_tun) entered blocking state [ 480.223457][T13635] bridge27: port 1(syz_tun) entered disabled state [ 480.233794][T13635] device syz_tun entered promiscuous mode [ 480.264799][ T35] audit: type=1800 audit(1621038951.581:112): pid=13636 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=14827 res=0 errno=0 00:35:51 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x101540, 0x28) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 00:35:51 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000005040), 0x100, 0x0) 00:35:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x8000000}, {0x6}]}) 00:35:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 00:35:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) [ 480.934419][ T9236] Bluetooth: hci5: command 0x0406 tx timeout [ 481.148462][ T35] audit: type=1326 audit(1621038952.472:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13640 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:52 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x6}]}}, &(0x7f0000000040)=""/231, 0x26, 0xe7, 0x1}, 0x20) [ 481.391343][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 481.449792][T13654] device syz_tun left promiscuous mode [ 481.456776][T13654] bridge27: port 1(syz_tun) entered disabled state 00:35:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x541b, &(0x7f00000000c0)={'bridge_slave_0\x00', @ifru_map}) 00:35:52 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x9000000}, {0x6}]}) [ 481.527051][T13654] bridge28: port 1(syz_tun) entered blocking state [ 481.536560][T13654] bridge28: port 1(syz_tun) entered disabled state [ 481.548021][T13654] device syz_tun entered promiscuous mode 00:35:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001bc0)={&(0x7f0000001ac0), 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x61}}, 0x0) 00:35:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) [ 482.123162][ T35] audit: type=1326 audit(1621038953.442:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13660 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:53 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x0, 0x61, 0x2e]}}, &(0x7f0000000040)=""/231, 0x29, 0xe7, 0x1}, 0x20) 00:35:53 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) 00:35:53 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RCLUNK(r0, 0x0, 0xfffffffffffffefa) 00:35:53 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x48020000}, {0x6}]}) [ 482.480484][T13666] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:35:53 executing program 2: r0 = openat$bsg(0xffffff9c, &(0x7f0000000000), 0x4240, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000140)=r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000180), 0x34000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x3, 0x2, 0x2000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xad) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={r1, 0x0, r2, 0x7fffffff}) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) [ 482.561607][T13670] device syz_tun left promiscuous mode [ 482.568368][T13670] bridge28: port 1(syz_tun) entered disabled state [ 482.714720][T13670] bridge29: port 1(syz_tun) entered blocking state [ 482.721806][T13670] bridge29: port 1(syz_tun) entered disabled state [ 482.731935][T13670] device syz_tun entered promiscuous mode 00:35:54 executing program 5: r0 = socket$inet(0x2, 0x6, 0x80000) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000002ec0)={{0x2, 0x0, @empty}, {0x1, @link_local}, 0x4, {0x2, 0x0, @local}, 'veth0_macvtap\x00'}) unshare(0x62020000) 00:35:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001f80)={'ip6_vti0\x00', 0x0}) 00:35:54 executing program 3: r0 = socket(0x0, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:35:54 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) [ 483.162800][ T9236] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 483.171927][ T35] audit: type=1326 audit(1621038954.482:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13681 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 483.292298][T13685] IPVS: ftp: loaded support on port[0] = 21 00:35:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@abs, 0x6e) 00:35:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x5c941200}, {0x6}]}) [ 483.695142][ T9236] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 483.706950][ T9236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.718653][ T9236] usb 3-1: Product: syz [ 483.723430][ T9236] usb 3-1: Manufacturer: syz [ 483.730715][ T9236] usb 3-1: SerialNumber: syz [ 483.741753][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 483.799864][T13717] device syz_tun left promiscuous mode [ 483.807896][T13717] bridge29: port 1(syz_tun) entered disabled state [ 483.895527][T13717] bridge30: port 1(syz_tun) entered blocking state [ 483.905350][T13717] bridge30: port 1(syz_tun) entered disabled state [ 483.919140][T13717] device syz_tun entered promiscuous mode [ 483.965085][T13719] IPVS: ftp: loaded support on port[0] = 21 [ 484.013237][ T9236] usb 3-1: config 0 descriptor?? [ 484.105516][ T9236] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 484.304548][ T8460] usb 3-1: USB disconnect, device number 108 [ 484.314495][ T8460] keyspan 3-1:0.0: device disconnected 00:35:55 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x4, 0x39dd}]}]}}, &(0x7f0000000040)=""/231, 0x32, 0xe7, 0x1}, 0x20) [ 484.530250][ T35] audit: type=1326 audit(1621038955.852:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13741 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:35:55 executing program 3: r0 = socket(0x0, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:35:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "908a98e6c7b798931422fea4306617a5ea17bdfd6cc7d1c106cfb2467d66"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) 00:35:56 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000000)=@raw=[@alu], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x7fff0000}, {0x6}]}) [ 485.124040][ T7] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 485.385179][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 485.456269][T13769] device syz_tun left promiscuous mode [ 485.464693][T13769] bridge30: port 1(syz_tun) entered disabled state [ 485.586252][T13769] bridge31: port 1(syz_tun) entered blocking state [ 485.594102][T13769] bridge31: port 1(syz_tun) entered disabled state [ 485.604512][T13769] device syz_tun entered promiscuous mode [ 485.758855][ T7] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 485.773840][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.785143][ T7] usb 3-1: Product: syz [ 485.791452][ T7] usb 3-1: Manufacturer: syz [ 485.797393][ T7] usb 3-1: SerialNumber: syz [ 485.854227][ T35] audit: type=1326 audit(1621038957.172:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13771 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 486.092430][ T7] usb 3-1: config 0 descriptor?? 00:35:57 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e186f240cd0613014b140102030109021200010000000009040000001a1040000efff1cbe8588aefbcce76ea2c46f51ec87e6ca20524f161922e8fc6066fe7ce83ab8b255427a1192918f7df6e8ae422aa895296e56b85304ffeca970693ec9f59443ce14e0650d5f1f0eb617427820106737230b64b064bc78cb79355c9f527c4ae46bffc38cd8297848f242a922bbae595c7ba852670ace20f3574603fe7af1fb55d6ea370fc8cac1cf4177d6ff33711b6cc9b9124138fdc429507deb41051f95681c55d7cf9e2d9b7f3584ccaa791d8919b3d"], 0x0) 00:35:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x0, 0x4}, 0x40) 00:35:57 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x3, &(0x7f0000000900)=@framed, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 486.184738][ T7] usb 3-1: can't set config #0, error -71 00:35:57 executing program 3: r0 = socket(0x0, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:35:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0xb0010000}, {0x6}]}) [ 486.272287][ T7] usb 3-1: USB disconnect, device number 109 00:35:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000006140)={&(0x7f0000004c00)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000006100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11}}], 0x30}, 0x0) 00:35:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2, 0x0, 0x0, 0xc}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000040)=""/231, 0x28, 0xe7, 0x1}, 0x20) [ 486.866493][T13796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 486.931076][T13799] device syz_tun left promiscuous mode [ 486.953048][T13799] bridge31: port 1(syz_tun) entered disabled state [ 487.043817][ T35] audit: type=1326 audit(1621038958.362:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13790 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 487.099796][ T7] usb 3-1: new high-speed USB device number 110 using dummy_hcd 00:35:58 executing program 5: socket$inet(0x2, 0x6, 0x80000) unshare(0x62020000) [ 487.280126][T13799] bridge32: port 1(syz_tun) entered blocking state [ 487.289781][T13799] bridge32: port 1(syz_tun) entered disabled state [ 487.303360][T13799] device syz_tun entered promiscuous mode [ 487.672149][ T7] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 487.693973][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.703809][ T7] usb 3-1: Product: syz [ 487.711184][ T7] usb 3-1: Manufacturer: syz [ 487.723865][ T7] usb 3-1: SerialNumber: syz 00:35:59 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000002ec0)={{0x2, 0x0, @empty}, {0x1, @link_local}, 0x4, {0x2, 0x0, @local}, 'veth0_macvtap\x00'}) 00:35:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0xc0020000}, {0x6}]}) 00:35:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x6, 0x0, 0x4}]}}, &(0x7f0000000040)=""/231, 0x26, 0xe7, 0x1}, 0x20) [ 488.005387][ T7] usb 3-1: config 0 descriptor?? [ 488.048412][ T7] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 488.084576][T13814] IPVS: ftp: loaded support on port[0] = 21 [ 488.250261][ T1977] usb 3-1: USB disconnect, device number 110 [ 488.257720][ T1977] keyspan 3-1:0.0: device disconnected [ 488.650468][ T35] audit: type=1326 audit(1621038959.972:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13822 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 488.707211][T13809] IPVS: ftp: loaded support on port[0] = 21 [ 489.043836][ T7] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 489.584163][ T7] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 489.593541][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.602456][ T7] usb 3-1: Product: syz [ 489.606992][ T7] usb 3-1: Manufacturer: syz [ 489.611942][ T7] usb 3-1: SerialNumber: syz [ 489.640707][ T7] usb 3-1: config 0 descriptor?? 00:36:01 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000800000040cd0613014b140102030109021200010000000009040000001a104000"], 0x0) 00:36:01 executing program 3: r0 = socket(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:36:01 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)) socketpair(0xa, 0x1, 0x8, &(0x7f00000002c0)) 00:36:01 executing program 1: r0 = socket$inet(0x2, 0x6, 0x80000) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000002ec0)={{0x2, 0x0, @empty}, {0x1, @link_local}, 0x0, {0x2, 0x0, @local}, 'veth0_macvtap\x00'}) unshare(0x58000000) unshare(0x62020000) 00:36:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x2}]}) 00:36:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000001a80)=""/4096, 0x26, 0x1000, 0x1}, 0x20) [ 489.758376][ T7] usb 3-1: can't set config #0, error -71 [ 489.821326][ T7] usb 3-1: USB disconnect, device number 111 [ 490.111530][T13886] IPVS: ftp: loaded support on port[0] = 21 [ 490.118111][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 490.151884][T13891] device syz_tun left promiscuous mode [ 490.159329][T13891] bridge32: port 1(syz_tun) entered disabled state [ 490.237807][T13891] bridge33: port 1(syz_tun) entered blocking state [ 490.244968][T13891] bridge33: port 1(syz_tun) entered disabled state [ 490.254464][T13891] device syz_tun entered promiscuous mode 00:36:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x3}]}) 00:36:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@dev, @mcast2, [], [], 'veth1_macvtap\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) [ 490.715611][ T7] usb 3-1: new high-speed USB device number 112 using dummy_hcd 00:36:02 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000005304"], 0x24}}, 0x0) 00:36:02 executing program 3: r0 = socket(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 491.104239][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 491.164231][ T7] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 491.172192][ T7] usb 3-1: can't read configurations, error -71 00:36:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6c7, 0x0, &(0x7f0000000100)) 00:36:02 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000800), 0xffffffffffffffff) [ 491.431186][ T35] audit: type=1107 audit(1621038962.752:120): pid=13925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='' [ 491.491463][T13928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 491.602807][T13931] device syz_tun left promiscuous mode [ 491.609665][T13931] bridge33: port 1(syz_tun) entered disabled state [ 491.680156][T13931] bridge34: port 1(syz_tun) entered blocking state [ 491.687759][T13931] bridge34: port 1(syz_tun) entered disabled state [ 491.699079][T13931] device syz_tun entered promiscuous mode [ 491.963897][ T7] usb 3-1: new high-speed USB device number 113 using dummy_hcd 00:36:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8927, &(0x7f00000000c0)={'bridge_slave_0\x00', @ifru_map}) 00:36:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x4}]}) 00:36:03 executing program 3: r0 = socket(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:36:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x0, 0x8, 0x400}, 0x40) [ 492.348525][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short 00:36:03 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) 00:36:03 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(r0, 0x8, 0x80000000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xad) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xad) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000000c0)=0x1, 0x4) fcntl$setpipe(r3, 0x8, 0x80000000) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(r4, 0x8, 0x80000000) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000100)={'bridge0\x00', {0x2, 0x0, @empty}}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='wg1\x00') syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) [ 492.445013][ T7] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 492.452983][ T7] usb 3-1: can't read configurations, error -71 [ 492.540359][ T7] usb usb3-port1: attempt power cycle [ 492.651358][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 492.718844][T13951] device syz_tun left promiscuous mode [ 492.726043][T13951] bridge34: port 1(syz_tun) entered disabled state [ 492.804761][T13951] bridge35: port 1(syz_tun) entered blocking state [ 492.811673][T13951] bridge35: port 1(syz_tun) entered disabled state [ 492.821207][T13951] device syz_tun entered promiscuous mode 00:36:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6b1, 0x0, &(0x7f0000000100)) 00:36:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x2000016e) 00:36:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f00000000c0)={'bridge_slave_0\x00', @ifru_map}) 00:36:04 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x5}]}) 00:36:04 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 493.634434][ T7] usb 3-1: new high-speed USB device number 114 using dummy_hcd 00:36:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x3, &(0x7f0000000900)=@framed, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00), 0x10}, 0x78) 00:36:05 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x51]}}, &(0x7f0000000040)=""/231, 0x2a, 0xe7, 0x1}, 0x20) [ 494.044860][ T7] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 494.054282][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.064066][ T7] usb 3-1: Product: syz [ 494.068541][ T7] usb 3-1: Manufacturer: syz [ 494.073112][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 494.073343][ T7] usb 3-1: SerialNumber: syz 00:36:05 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'veth1_to_hsr\x00', @ifru_map}) 00:36:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x7}]}) [ 494.275837][ T7] usb 3-1: config 0 descriptor?? [ 494.354238][ T7] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 494.522141][ T1977] usb 3-1: USB disconnect, device number 114 [ 494.531589][ T1977] keyspan 3-1:0.0: device disconnected 00:36:05 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:36:06 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x2, 0x0, 0x0, 0xc}]}, {0x0, [0x0]}}, &(0x7f0000000040)=""/231, 0x27, 0xe7, 0x1}, 0x20) [ 495.269594][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:06 executing program 2: getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000740), 0x2, 0x44200) getsockname(r1, &(0x7f0000000780)=@xdp, &(0x7f0000000800)=0x80) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000000)={0x0, 0x4, 0x81, {0x81, 0x3, "84b3372ff4f368fc4bd34da2b25ee28b7f87e589968a553ac95329a10f2dc8a6051bbac8f2c70ebcfa9a1b7b79d3c87cc6c37a479928425a550b22c4e4371b95cb27c554e8b3d3c05962bfc217889704536e04a7bc8b4e1e7ea2ef22b6c6936f9e0d29f7f69abbb0b1ea44e7f40a41ef8654eef148ec87bee1ac81df1f7292"}}, &(0x7f00000000c0)={0x0, 0x3, 0x3a, @string={0x3a, 0x3, "dcf8eb017348932c8b017fd9661c8ae41576bc2f8edab330cf9702a71c69aec405cd214bdeaf7de5686cda99ce93b06395443a8147915dca"}}, &(0x7f0000000100)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x1, [@generic={0x1b, 0x10, 0x0, "4761ceec2a3eb358b12cf701b08d06c6420e8b369f0b74c3"}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x0, 0x2, "5e01647a", "30743499"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0x8, 0x40, 0x5, 0xf9, 0xe8}}}, &(0x7f0000000640)={0x44, &(0x7f0000000240)={0x0, 0x12, 0x32, "9bb8f906aa049fe13572b7f80b6d7ec7215be56255a587ae19301ca093ae3ece816fc5521acaf935eb01a1f3af66550c7516"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1, 0x5958259e5175b1b2}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x340, 0x20, [0xf000]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0xa5e}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000400)={0x40, 0xb, 0x2, ';\b'}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000480)={0x40, 0x13, 0x6}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x19, 0x2, "7513"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0xbc}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x7}}) 00:36:06 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 00:36:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0xa}]}) 00:36:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x7) 00:36:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5421, &(0x7f0000000cc0)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) 00:36:06 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:36:07 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0xc}]}) [ 496.088995][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 496.113805][ T18] usb 3-1: new high-speed USB device number 115 using dummy_hcd 00:36:07 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000009080)={0x0, @phonet, @generic={0x0, "17e2f4cbca0a303c5c2a6de4d9bc"}, @l2tp}) 00:36:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0xfffffff9, 0x0, 0x400}, 0x40) 00:36:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x17, 0x0, 0x880c, 0x5}, 0x40) 00:36:07 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:36:07 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x14}]}) [ 496.636627][ T18] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 496.646601][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.655295][ T18] usb 3-1: Product: syz [ 496.659588][ T18] usb 3-1: Manufacturer: syz [ 496.664538][ T18] usb 3-1: SerialNumber: syz [ 496.832878][ T18] usb 3-1: config 0 descriptor?? [ 496.903212][ T18] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 497.003771][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:10 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="6594df612ef238724811f885b3c163339b0cd4b7edec6988bff629cab5dbfaea5c2b8cc3b73616e5783df1c66d2152a6f39df16aff2b570370212aa905831987d5b8c450b539d1d2f6e41b89e5a12db3e01c1e68f702a1f8c5ff97342377dc10b79e09156af8e1e03d8737cfedec43f94682a2271b0523b7dacf341d3cd4d5cbe4b66cd1a01405427c06d19e0946216d3e76c7b8e00b3f67", 0x98, 0x10000}, {&(0x7f0000000200)="6ea6b70632e1e226bdb3b09a47984217c8aac9d565cc58357377aa00060fcfd9ee9d1add1cddaf7afbbc9ffcb49a598d54826a0379e2f9b3c988c37d1a13c29e24ca19466fe36e702356", 0x4a}], 0xb18000, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@noquota}], [{@audit}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_lt}, {@smackfsroot={'smackfsroot', 0x3d, '/'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@obj_type}]}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x10, @time={0x4076, 0x5}, 0xf6, {0x40, 0x8}, 0x2, 0x0, 0x4}) syz_usb_connect(0x4, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x23, 0xab, 0x18, 0xff, 0x4b4, 0x3610, 0x2631, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x2d, 0xbf, 0x3, 0x65, 0x99, 0x2f, 0x0, [], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0x80, 0x3f, 0x50, [@generic={0x2c, 0x31, "8ac8e0ab10e63ae4808d781c1b98a23e44aa8f04365c083a9e862551effc3f44e1b7ccf0ae525027b500"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0xf6, 0xeb, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0xfd, 0xef1b}]}}, {{0x9, 0x5, 0x84, 0x10, 0x8, 0x7, 0x4, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x20}]}}]}}]}}]}}, 0x0) [ 498.812966][ T8461] usb 3-1: USB disconnect, device number 115 [ 498.820140][ T8461] keyspan 3-1:0.0: device disconnected 00:36:10 executing program 1: socketpair(0x11, 0x2, 0x1000, &(0x7f0000000080)) 00:36:10 executing program 5: socketpair(0x26, 0x0, 0x0, &(0x7f0000004b40)) 00:36:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x4}, 0x40) 00:36:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x15}]}) 00:36:10 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) [ 499.187906][T14072] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:10 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f00000000c0)={'vlan1\x00', @ifru_map}) 00:36:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000002c0)=""/182, 0x1000000, 0xb6, 0x1}, 0x20) 00:36:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x16}]}) [ 499.558752][T14080] loop2: detected capacity change from 0 to 32768 00:36:10 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:36:11 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1401, 0x19e91e6178b3ce9f, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) [ 500.038193][ T35] audit: type=1326 audit(1621038971.362:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14088 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 500.107202][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:11 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f00000002c0)=[@rights, @rights], 0x28}, 0x0) [ 500.190297][T14080] loop2: detected capacity change from 0 to 32768 00:36:11 executing program 2: syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) 00:36:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x1c}]}) 00:36:11 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:36:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x0, 0x0, 0xc86, 0x808}, 0x40) 00:36:12 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000001a80)=""/4096, 0x26, 0x1000, 0x1}, 0x20) [ 501.179267][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x1d}]}) 00:36:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast2}, 0x4c}) [ 501.443951][ T8462] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 501.966693][ T8462] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 501.976490][ T8462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.984917][ T8462] usb 3-1: Product: syz [ 501.989389][ T8462] usb 3-1: Manufacturer: syz [ 501.994449][ T8462] usb 3-1: SerialNumber: syz [ 502.081146][ T8462] usb 3-1: config 0 descriptor?? [ 502.149121][ T8462] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:36:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'lo\x00', @ifru_map}) 00:36:13 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:36:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) accept4(r0, 0x0, 0x0, 0x40000) 00:36:13 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x21}]}) 00:36:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x40) [ 502.344068][ T8461] usb 3-1: USB disconnect, device number 116 [ 502.351238][ T8461] keyspan 3-1:0.0: device disconnected [ 502.527167][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 503.613738][ T9236] usb 3-1: new full-speed USB device number 117 using dummy_hcd 00:36:15 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000180)={0x18, &(0x7f0000000000)={0x20, 0x5, 0x3, {0x3, 0xe, '$'}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f0000000080)={0x0, 0xf, 0x6d, {0x5, 0xf, 0x6d, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7f, 0x5b, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x81, 0x6, 0x7fffff7, 0xff00, 0x7, [0x3f00, 0x15fb0, 0xff00, 0x0, 0xff003f, 0x30]}, @ssp_cap={0x14, 0x10, 0xa, 0x27, 0x2, 0x8000, 0xf, 0x2, [0xff3ff0, 0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x91, "1e5702ef4f9a7bc312514fc518e75f3c"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x3, 0x1f, 0x101, 0xfe}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x80, 0x1, 0x9, "2d5cf677", "595f5de3"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x3, 0x40, 0xfb, 0x3, 0x898, 0x5015}}}, &(0x7f0000000600)={0x44, &(0x7f0000000200)={0x40, 0x7, 0x31, "6006c2d0428175510c43d43044195b8a90f5351351b1b3576adf3b2645485811318e42b00e9ae39bcd7e41dc9b51beaba0"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000300)={0x20, 0x0, 0x8, {0xc0, 0x84, [0x7800]}}, &(0x7f0000000340)={0x40, 0x7, 0x2, 0x7ff}, &(0x7f0000000380)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000003c0)={0x40, 0xb, 0x2, "bf78"}, &(0x7f0000000400)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000440)={0x40, 0x13, 0x6}, &(0x7f0000000480)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000004c0)={0x40, 0x19, 0x2, "a54b"}, &(0x7f0000000500)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000540)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000580)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000005c0)={0x40, 0x21, 0x1, 0x4}}) 00:36:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x101) ioctl$sock_ifreq(r0, 0x5411, 0x0) 00:36:15 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:36:15 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x24}]}) 00:36:15 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, 0x0) 00:36:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000006f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000006ec0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}, 0x0) [ 504.073833][ T9236] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 504.081646][ T9236] usb 3-1: can't read configurations, error -71 [ 504.330834][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000100)) 00:36:15 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x541b, &(0x7f0000002ec0)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x0, {0x2, 0x0, @local}, 'veth0_macvtap\x00'}) 00:36:15 executing program 4: socketpair(0x28, 0x0, 0x8, &(0x7f0000000080)) 00:36:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x25}]}) 00:36:16 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) [ 505.023440][ T9236] usb 3-1: new high-speed USB device number 118 using dummy_hcd 00:36:16 executing program 1: bpf$MAP_CREATE(0x3, &(0x7f0000000000), 0x99) [ 505.328485][T14195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 505.544414][ T9236] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 505.553832][ T9236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.562121][ T9236] usb 3-1: Product: syz [ 505.566786][ T9236] usb 3-1: Manufacturer: syz [ 505.571545][ T9236] usb 3-1: SerialNumber: syz [ 505.732353][ T9236] usb 3-1: config 0 descriptor?? [ 505.784182][ T9236] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 505.981443][T14183] udc-core: couldn't find an available UDC or it's busy [ 505.989124][T14183] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 506.025451][ T9236] usb 3-1: USB disconnect, device number 118 [ 506.032840][ T9236] keyspan 3-1:0.0: device disconnected [ 506.804308][ T9236] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 507.339540][ T9236] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 507.349479][ T9236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.357967][ T9236] usb 3-1: Product: syz [ 507.362915][ T9236] usb 3-1: Manufacturer: syz [ 507.368482][ T9236] usb 3-1: SerialNumber: syz [ 507.610165][ T9236] usb 3-1: config 0 descriptor?? [ 507.713542][ T9236] usb 3-1: can't set config #0, error -71 00:36:19 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, &(0x7f0000000700)={0x0, 0x5, 0x8a, {0x8a, 0x23, "33dd421fa9fab8555026ffffc783c2739bfb3caa9752be89d3b781628fb067bc7ee80056293c4020a01bda21b3a9df3b9b7bc795feb1238a2d984335d867ed545176777aaa8176156fa36de210951b4e7351adc3d2bf18849c9705286a640a920a9984bae6f02b3a498cc6c2fc5efc598b5fcf65832274bdf2caf4d008901531211e782c4bacb9ee"}}, &(0x7f0000000080)={0x0, 0x3, 0xb8, @string={0xb8, 0x3, "1fa20d5bb0040cf1778c5b660aa5c78e404d9af1d9abc849bcd15c277ffa40b2c14d07fb2d7bd656b3493e172e74fc4ad8d4b0f1728855b61789479e460ec6af338bdce565c70b4cfe3c50d58ae21738eeb1f60a928cb44355c3ed4b303dfe15071e927ebff9bfe3371cb939eb0beca6c9cccd03b75554c08528b3feadc890ae30e9b9c5d6886664bff447234a6bdd7529faf4b24b83004724908293877bb6add9c563581faf716bb092bd497d3033e0288e2feccfa4"}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0xfc, 0x1f, "97967e88", '~?bL'}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x9, 0xc0, 0x1, 0x100}}}, &(0x7f0000000680)={0x44, &(0x7f0000000280)={0x40, 0x3, 0x2e, "3c8f3a43963ea91593933b9cdc14b59deae219cd72046359cefeabfdcc5f21fb2f9478b604cd73d144d739690493"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000340)={0x20, 0x0, 0x4}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x2, 0x8, [0xf00]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000440)={0x40, 0xb, 0x2, "07b7"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, &(0x7f0000000500)={0x40, 0x17, 0x6, @random="c3d67158ac5a"}, &(0x7f0000000540)={0x40, 0x19, 0x2, ',!'}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000600)={0x40, 0x1e, 0x1}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x4a}}) 00:36:19 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x0, 0x8, 0x400, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40) 00:36:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'vlan1\x00', &(0x7f0000000040)=@ethtool_per_queue_op}) 00:36:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x28}]}) 00:36:19 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:36:19 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getpeername$inet6(r0, 0x0, 0x0) [ 507.791233][ T9236] usb 3-1: USB disconnect, device number 119 [ 508.217627][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x2c}]}) 00:36:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x25, 0x0, &(0x7f0000000100)) 00:36:20 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000200)=""/178, 0x36, 0xb2, 0x1}, 0x20) 00:36:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}}, 0x0) 00:36:20 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) [ 509.163534][ T18] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 509.594127][ T3123] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.600761][ T3123] ieee802154 phy1 wpan1: encryption failed: -22 00:36:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000580)={@dev, 0x0, 0x0, 0xff}, 0x20) [ 509.714227][ T18] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 509.724238][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.732482][ T18] usb 3-1: Product: syz [ 509.737364][ T18] usb 3-1: Manufacturer: syz [ 509.742317][ T18] usb 3-1: SerialNumber: syz [ 509.796991][T14250] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 509.920966][ T18] usb 3-1: config 0 descriptor?? [ 509.986040][ T18] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:36:23 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) 00:36:23 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x2d}]}) 00:36:23 executing program 1: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x40, &(0x7f0000000080)={[0xfd09]}, 0x8) 00:36:23 executing program 5: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2) 00:36:23 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:36:23 executing program 4: open$dir(&(0x7f0000000040)='./file0\x00', 0x121840, 0x4c) [ 511.775145][ T1977] usb 3-1: USB disconnect, device number 120 [ 511.782066][ T1977] keyspan 3-1:0.0: device disconnected [ 512.268004][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 512.360932][T14284] device syz_tun left promiscuous mode [ 512.367686][T14284] bridge35: port 1(syz_tun) entered disabled state 00:36:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) 00:36:23 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x80, &(0x7f0000000080)) 00:36:23 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x30}]}) 00:36:23 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x301a00, 0x0) 00:36:24 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 512.773544][ T8461] usb 3-1: new high-speed USB device number 121 using dummy_hcd 00:36:24 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x121840, 0x3) [ 513.334585][ T8461] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 513.344069][ T8461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.352267][ T8461] usb 3-1: Product: syz [ 513.357099][ T8461] usb 3-1: Manufacturer: syz [ 513.361863][ T8461] usb 3-1: SerialNumber: syz [ 513.532212][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 513.556678][ T8461] usb 3-1: config 0 descriptor?? [ 513.614823][ T8461] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 513.808215][ T8461] usb 3-1: USB disconnect, device number 121 [ 513.815308][ T8461] keyspan 3-1:0.0: device disconnected [ 514.625714][ T8461] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 515.217221][ T8461] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 515.228222][ T8461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.236516][ T8461] usb 3-1: Product: syz [ 515.241086][ T8461] usb 3-1: Manufacturer: syz [ 515.246114][ T8461] usb 3-1: SerialNumber: syz [ 515.260707][ T8461] usb 3-1: config 0 descriptor?? [ 515.307429][ T8461] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:36:26 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e186f240cd0613014b140102030109021200010014000009040000001a104000"], 0x0) [ 515.387847][ T2056] usb 3-1: USB disconnect, device number 122 [ 515.395184][ T2056] keyspan 3-1:0.0: device disconnected 00:36:26 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) 00:36:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x34}]}) 00:36:26 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CHAR_RAW_SECDISCARD(r0, 0x127d, 0x0) 00:36:26 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:36:26 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) [ 515.810544][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:27 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) 00:36:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 00:36:27 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) 00:36:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x35}]}) 00:36:27 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 516.330159][ T8461] usb 3-1: new high-speed USB device number 123 using dummy_hcd 00:36:28 executing program 5: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) [ 516.667775][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 516.883970][ T8461] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 516.894556][ T8461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.903072][ T8461] usb 3-1: Product: syz [ 516.909015][ T8461] usb 3-1: Manufacturer: syz [ 516.914715][ T8461] usb 3-1: SerialNumber: syz [ 517.034692][ T8461] usb 3-1: config 0 descriptor?? [ 517.317436][ T8461] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 517.345599][ T8461] usb 3-1: USB disconnect, device number 123 [ 517.364875][ T8461] keyspan 3-1:0.0: device disconnected [ 518.063077][ T9236] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 518.594813][ T9236] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 518.604807][ T9236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.613330][ T9236] usb 3-1: Product: syz [ 518.618368][ T9236] usb 3-1: Manufacturer: syz [ 518.623455][ T9236] usb 3-1: SerialNumber: syz [ 518.633427][ T9236] usb 3-1: config 0 descriptor?? 00:36:30 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, &(0x7f0000000000)={0x20, 0xa, 0xb9, {0xb9, 0x22, "ee93d5c5d2eacd05d9cf54bacc388d00c2f2f07a49a2ca421a1ca9eff01312768fcee90d4441f4b6637587ab8d832d8f1fee346e56b054c454982f7d3b29e17336bf76e4190f891d34e592f3cb0f023fb4d1c50ca899b5b1300113f93d367228a62f19f9516040ed1b22c33a3901f02e828a02852be0db72e2da27430b1fe74577d875fcdc91f79960ad36c5f93b6aca0715b51b854dcd388c3e6f4c2496d79cc95410817215ac7fe03cfadd4896f9f313e821c9bc2ec5"}}, &(0x7f00000000c0)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "c4e59292e6a1c4b547bf7dd6520627db706f51bd079e05542597b2c9fb750b80f4f00d0d433874eb701d39140e368ea7ecdfcfa16bac95370b9fb3d6b61f84be9f5933c3000c425df2b22fbd802d59a212e688658d0c0fe47f621f8517827d3449636a3aa2da8100edd7f3ab038129f005d49474bdaf76ff7eda9520f803585b71b6fcd7505d4f2cb664d9edd83f569649b87bf9806693af8e93bb623f38dffc2c4969d78c6d1fd53ea87ef9f3329dd6943c4b96903d5eec4a9ae2a5dfab61d3161b5d0ca3d85c1712e4"}}, &(0x7f0000000200)={0x0, 0xf, 0x57, {0x5, 0xf, 0x57, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "cc30b63af83303dfce5820ba68698ab8"}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "4a85a0d410ba0909b726ec14d61b8997"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x40, 0x1, 0x6000}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0xa7, 0xf, 0x7f, [0xf, 0xff3fc0, 0xff000f, 0xff000f, 0xff000f]}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0x1f, 0x3f, "ce77f929", "186a8d55"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x1, 0x9, 0x3f, 0x5}}}, &(0x7f0000000800)={0x44, &(0x7f0000000340)={0x20, 0x5, 0xca, "7cfad846b2c867a9723459616bbd6c6dd17e4214cf49815138c4614bebca6aa83e8933ada9f5bcf3dec8cf6887bb12fdb6e9230208872c01f13d4dd1a3bef208b4d4b670656ecc2e8fc65eac91cc8c8b1fac532e487345088a83a10006f65bb1a2ce118f2fd634bee2b7277bab9b6076e03ef9f44a52dac88151445032eba8342a7e0c4edb7868e9800e175a92913793984814d57e44b1e6b9e7d3dcfb0fe23df175e781a9cf02658a4af3d641ac70e6b45b5f63736580a8be66fb8cb11866808bacdcd40d253ef9620a"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x200, 0x40, [0x7800]}}, &(0x7f0000000540)={0x40, 0x7, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "da49"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "9071"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xff}}) 00:36:30 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x3c}]}) 00:36:30 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x3000) 00:36:30 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:36:30 executing program 4: r0 = socket(0x1, 0x2, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:36:30 executing program 5: openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x347ec1, 0x0) [ 518.944975][ T9236] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 519.043629][ T9236] usb 3-1: USB disconnect, device number 124 [ 519.050927][ T9236] keyspan 3-1:0.0: device disconnected [ 519.326518][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:30 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(0xee00, r1, 0x0) 00:36:30 executing program 5: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb) 00:36:30 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x3d}]}) 00:36:31 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 519.833132][ T8460] usb 3-1: new high-speed USB device number 125 using dummy_hcd 00:36:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x44}]}) 00:36:31 executing program 5: mq_open(&(0x7f0000000000)='($\x00', 0x0, 0x0, 0x0) [ 520.364655][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 520.473775][ T8460] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 520.484735][ T8460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.493251][ T8460] usb 3-1: Product: syz [ 520.497680][ T8460] usb 3-1: Manufacturer: syz [ 520.502435][ T8460] usb 3-1: SerialNumber: syz [ 520.636849][ T8460] usb 3-1: config 0 descriptor?? [ 520.697184][ T8460] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:36:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xad) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0), &(0x7f0000000080), 0x2, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) 00:36:33 executing program 1: syz_mount_image$qnx6(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000940)) 00:36:33 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x40402, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x5) 00:36:33 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:36:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x45}]}) 00:36:33 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x85, &(0x7f0000000140)=""/133, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 522.418095][ T1977] usb 3-1: USB disconnect, device number 125 [ 522.425113][ T1977] keyspan 3-1:0.0: device disconnected [ 522.796597][T14459] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 522.814661][T14462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 522.914288][T14459] qnx6: wrong signature (magic) in superblock #1. [ 522.921338][T14459] qnx6: unable to read the first superblock 00:36:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x48}]}) [ 523.079978][T14459] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 523.181140][T14459] qnx6: wrong signature (magic) in superblock #1. [ 523.187994][T14459] qnx6: unable to read the first superblock 00:36:34 executing program 5: mlock(&(0x7f0000004000/0x4000)=nil, 0x4000) msync(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x5) 00:36:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x14, 0x972a973babf02aff, 0x0, 0x0, {0x2}, [@generic="97"]}, 0x18}}, 0x0) 00:36:34 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:36:35 executing program 4: socket(0x29, 0x2, 0x20000000) 00:36:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x4c}]}) [ 523.823671][ T1977] usb 3-1: new low-speed USB device number 126 using dummy_hcd [ 523.930142][T14490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 524.022898][ T1977] usb 3-1: device descriptor read/64, error 18 [ 524.296321][ T1977] usb 3-1: new low-speed USB device number 127 using dummy_hcd [ 524.496733][ T1977] usb 3-1: device descriptor read/64, error 18 [ 524.636691][ T1977] usb usb3-port1: attempt power cycle [ 525.352726][ T1977] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 525.542989][ T1977] usb 3-1: device descriptor read/8, error -61 [ 525.822809][ T1977] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 526.013072][ T1977] usb 3-1: device descriptor read/8, error -61 00:36:37 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8fdfffe79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec88317"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f00000000c0)="b9ff0a0000ffffff7f9e14f005051fffffff10144000630677fbac141433e000000162079f4b4d2f87e5feca6aab840413f2325f1a390101051a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) socket$kcm(0x11, 0x0, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, r1}, 0x10) 00:36:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0x0, 0xfffff801}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:36:37 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:36:37 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x4d}]}) [ 526.162987][ T1977] usb usb3-port1: unable to enumerate USB device 00:36:37 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x15, &(0x7f0000000000)="487997c6", 0x4) 00:36:37 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x14, &(0x7f0000000740)={0x20, 0x1, 0x89, {0x89, 0x5, "0ab203900ee3f8baccc43f90f0d6a6f1824fd25f88b3221b7b865e58ea015ca0d9bedcd4b5e05f44fc669a52c2c7e025bff6d6b59ca2ad0e3512ecbf037d1ab6e87d0ef4ecd013df28fce91a42f85bee33028708ac3d3d29c1a827936cda3a2e22f23172340ec2e952106fb38d5f19d539c855cd343f945616ba3d913dabdea32ee00af2308f6a"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000840)={0x0, 0x22, 0x3, {[@global=@item_012={0x0, 0x1, 0x7}, @local, @global=@item_012={0x0, 0x1, 0xb}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0xe4}}}}, &(0x7f0000000b00)={0x18, &(0x7f0000000900)={0x0, 0xb58919f68f808bd1, 0x50, "335b8fb9ffc4fd26e761af7a5a60f596da67a2070dd9d3e794ed4c103f88924b5df4ad01eb85f2fe871cc4e4fbfd26ffa5819467071b5f9952dd06a9ad8899b89291073f6db5a6399301c5d41e52d859"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x1, 0x6b, "3c6a132b85b5f110deb492802794282bf0adceed561f07dc2bb88586c207442d0ced2a306a796dabeaad6164121fe62e9a5e4334895294e82f158f678087038207b4df4f3218b709e013e00dfb22ed307a170c48f8c194fabf777f2a93374434aeae0314283a360a96676c"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x8}}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x40, 0x21, 0x5d, {0x5d, 0x6, "239516f48aed5f2bafb5240436160c0d4fd1a90f5671412e6cf1358664f284d9b6202da93f1bff81d27e71f09f7a68673ccca16921717ce2d474e4fb1dba18b2eedc784e4231200b736ca338961a3e4517c7231a22cfcb2a8eda86"}}, &(0x7f0000000080)=ANY=[@ANYBLOB="0003a7000000a7038b36e0e6c3917dfad3aa40b4428065b2d8bdf3fcef29e4c805d6561df8088dc5ee9bf18a15ed77e4cce70c31719428baa583b85d521cbd60199234f18cf10ae2dba5ae8682f05db7e8e749a8be99804ef7ea878340971c77cc6d1fadd40fc51fb01b1a4f9b27a11486f28db440e5cecc9fbcf4967cf2ce3384f340bfb1abbeeba9585441ffca7a46766cffedf2cf74fa3ef8da3b12e39afd819616b5e14531e11ed11d8d1d"], &(0x7f0000000140)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "2724cdcc72f9bbfa58cc0f37f56a668a"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x7, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0xc, 0x18}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x9, 0xf0b}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1f, 0x18, 0x4, 0x9, "af0d6ba1", "1843aa76"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x2, 0x7f, 0x80, 0x1, 0x0, 0xb73b}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000280)={0x40, 0x19, 0x5a, "04a0579749d797fd8a2bf2388cb680aa3770f80f5f1db53fad7f97abf45556df19ea8e121de250a69fb29a56bc4255c9a53c60ed6eaefdbae92c2d2b20b9a1c8627957c3700b22ae98641824fd0a76e46d7ea26a0df7862ac992"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x200, 0x10}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000480)={0x40, 0xb, 0x2, "c3e6"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000500)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @local}, &(0x7f0000000580)={0x40, 0x19, 0x2, "91f1"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0xdc}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x8d}}) [ 526.431782][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x50}]}) 00:36:38 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) read$dsp(r0, &(0x7f0000000040)=""/109, 0x6d) 00:36:38 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 527.213765][ T8461] usb 3-1: new high-speed USB device number 4 using dummy_hcd 00:36:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0xb, 0x0, 0x0) [ 527.517176][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x54}]}) 00:36:39 executing program 5: perf_event_open$cgroup(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 527.774789][ T8461] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 527.784510][ T8461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.792979][ T8461] usb 3-1: Product: syz [ 527.797667][ T8461] usb 3-1: Manufacturer: syz [ 527.808133][ T8461] usb 3-1: SerialNumber: syz 00:36:39 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:36:39 executing program 4: perf_event_open$cgroup(&(0x7f0000000780)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 527.962256][ T8461] usb 3-1: config 0 descriptor?? 00:36:39 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000000780)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0x40042409, 0x0) [ 528.065112][ T8461] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 528.224924][T14527] udc-core: couldn't find an available UDC or it's busy [ 528.232691][T14527] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:36:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x5c}]}) 00:36:39 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x5, 0x400, 0x100, 0x2, 0x0, 0x1}, 0x40) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}], 0x2}, 0x10000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000), 0x0, &(0x7f0000000180), &(0x7f0000000240)="4a35b246352d98277f400421ca5df4c4c89937e2a8397ba94971aa9c98b962b0d34bb5f358bd676a2af3e73e11136a69d750f11a32312d0220ee208bd03c01c92dc9be7094af514bef2a", 0x7fff, r0}, 0x38) [ 528.468853][T14554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:41 executing program 2: ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x5) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) 00:36:41 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:36:41 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000000780)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 00:36:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x60}]}) 00:36:41 executing program 4: r0 = perf_event_open$cgroup(&(0x7f0000000780)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x2400, 0xffffffffffffffff) 00:36:41 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000780)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) [ 529.843505][ T9236] usb 3-1: USB disconnect, device number 4 [ 529.850322][ T9236] keyspan 3-1:0.0: device disconnected [ 530.176036][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a000f0000003f8000001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000002780)={&(0x7f0000000040)=@xdp={0x2c, 0x3, 0x0, 0x3c}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000200)="c4daa45aa6a4fe07e724155110b31e92311ef82a686602686b81a8cd44a354d405886e28120f46e85a350021e6a4e7317a604624a76edc783eb5c3827a430d3e6a0caeeefc400a479a2e8a7983e8f143dbc6418a8f54f5375cbf4801c9cbdd109425b82e47f1bd67250567f715e64ffa448a04ceed7a37b694d515daf44dcf56607e5c3bbc713d977fd33302d0678cafb999b57e5854a9cb3b4eaa50a4", 0x9d}, {&(0x7f00000002c0)="481de61e49206b2bacd5f9077c41e6aded2cf0730036de8b8f8dda9bd55a2703b6a92cee7ddbebb70d0388940d93c0de63d8afd3f928e7b446603ad09e0b4de217557a5bef8545a812b5410295f76d4a45e52e2a196e5edb70cd907caa7239d95725cc632bc1403d6678550683fca8b2d400099b183a34e2e76758da638f8e7c1a053b7d2049afeff17a633302394200482527631f379dbc22b55eca9a45c1ac089a9c2612be133da4bae3122c8effbc9262e5a01fa02f5f31eca908f3e42a96548ba434224175a893f3f712745cabf946d31436d15ef4502689f2c4c9dd9ff25a436d257ee9e63d", 0xe8}, {&(0x7f0000001400)="af91ce2bf426a974a6001031cfb888f8a3a5b244ccd55caeb38aefded5307d8efbc790d4e5d45323ac8a32b5aabc6f42ec", 0x31}], 0x4, &(0x7f0000001480)=[{0x1010, 0x10a, 0xb733, "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"}, {0x78, 0x110, 0x200, "03a6b3f06b6a7300e969da52436cc576f02b4b030ea6629e7e0e8d57779c48a543559bc04347935cfa321e496ce136ff6f258ca359e045f62a6faa2b79040043f7d368fc58a0c16bdaf5724cf0da1458de031bacee19aa86a90cc8886b2a162650bde970"}, {0x100, 0x117, 0xfffffffe, "2582cb8b6f7453fae110417e05ecf3c991db98b93eeea27f3cecbfb02e20427a3ecf6f15214dc73cc6b3495f5fa4171a70d27fa1fb3e066ca124ec1866ce1f07b2c8e7c21c24af8e84f2a04983fd2c9b278ff4f584a65df200df340201db47db2cb3d49a1bf634185f0c63e9a734d1bbddbc9de786e46b5ac8cb892799127564dc6086319c15b55fcf570c01615421f99e8630ab7c1634a373eff1e83b2594079c8126412631a952ee4a5ae9c680fa8454c4f0b3e3f5826c6b923f4544e5248ad9a46c3c14e1581b7303e17610c46ed05c216116f3220cd3a1d3431a713c0aafd539f3610d67f746b8ddb0c65b414a1b"}, {0xb0, 0x110, 0xfffffffd, "ae5d43a18896c5df1635602eedc78fca11645b81fd17c2bb27cd0f0cb657b419fcfd86d6a0d0c86d1d372aa5496657e942a49ed522282ee72ad85d0bbe46a3cb7dc9a04d26e2323ca905fdbfac2392f3c91705824652fa0a290787d1137ddab4db904e30a9a62f4084b93b89fc31122a5deea720f2da1b156ed8c791f7963e6794cc406264c5fd763f878bbc21250897b6e889de64439d5f90e67e"}, {0xb0, 0x10c, 0xb10, "7e7c4a706081d331222d3213b65bb80f59eee528e05c8540efc59604dafc589b8a58824ab0bcf38ef64f20e8472a83bc801bc1f6f72d8f6e96055444bb837e29569688e2644494134eb43c9a6fb37bece3cd78daf83022b7020ac807c10c9778cbb1f32a103ae5a5f326f98b46cbeb60a05a7df38be8faae147d4592816d3d4e5e81ad5503e1c65e447602871998a4316975d8ec11235bca36337eb22d"}, {0x10, 0x114, 0x9}], 0x12f8}, 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) sendmsg(r0, &(0x7f0000002e00)={&(0x7f00000027c0)=@l2={0x1f, 0x100, @none, 0x0, 0x4d5377f2e6fdcb4}, 0x80, 0x0, 0x0, &(0x7f0000002980)=[{0xf0, 0x101, 0x2, "673dbb57419e24e88af25b20aa19a5211dd23367f853534b8da9740994c75e4afa775d6767860a3c0573eea36f3d3a1aef39dc3804074ee48b3854670386a98a25fdc455ede89b4ded4f690a5caed66d836a13c3db1e67e95c7f9e2bf1e11b94c654543b2885fc18df0dd9c7ac2be5021b13fd03b1e729c96207419bd75c2668416af456db82a73f3edf32a6f0dd2cac288558aa8287fe9ff0ff33acf93d57274d8279d11587de48b42087a3de0be41c8930707a0ac191ade8a7b9433678a9c5f7fd6177131ea7996ccc25eaca63f2c58bea73940c1bf066d8"}, {0xe8, 0x118, 0x0, "2cee7f3fa6b6d394808a869ae9c34ff628c223d048389af710cf003fab9e2d64e55344bd124ab7e3c700dfadf39fc681325ac9b8bd8dbb5bd1f9962ac97de70866e6aa815476d63d8dfb9c59c69e66cb465c1dfb81dc212073784b2dbf71999096dffaae170211b2f2c38539cd4a7eb88bd905a9208cd6cedc651774bf5f46c491f4fd7d2a338cb65acbf539c673651c8d1f8258335d7e7f5755a3892b143c11820b427856f4c283f531e4a76f510508ac478241b6248f0057802c4e6b62feb8571f90c869ce432a84cff7c544e7bc6b9d68676975e1f4"}, {0x90, 0x6, 0x3, "3f9085395e9eff5014563ef8ff89cc4c9e6201e94d967291b6f6b946fb0739e6dd5053e0409653854a8274a7dad2245a313adac4a3012f54b4ea1c3d63ee39cf724589bb81610f79c36768ce750fec3ed169325fe19ef9645581d683187f9702b30c260b4a93fa2d3e193b189da00d80e480c9dc1d466d9918aa"}, {0xa8, 0x11, 0xff, "732d283beead10d8a743d28408179b48643d9cd55fa10a06d6f929fdee3312e7f778f50b38919193aebce548480ad4a8954b21293f333dd1cc841429bf5da74b21ee9590be7964f07416895a26038f492a867cdb6fcc6c155bf594e2d02e068e995d06579ad1d676c29375877a24e86d6e1b65ea8b8c993cf89323647f4983bbbbee214cbd3a7360a90a626859e8419f39d7ac"}, {0xd8, 0x1, 0x80000000, "7f3d626fe2a2e2cc54b2bb6ddcef43e074424cc2a2aac22a53a43ae110838fe42aa40e609807a56ed468449004f372623aa545f16c2d60cbd686005c78029f2c0689c4c84746616d8b14a31ea373ff4cba67b2d8a36902be74cdfbff232780b0b2c6f71fb3933f53c0c8f286a121a3cecfa4422e68e68cda75bdfa878f9753cf7f0f641c4ac9fe678c3830c3e1bb7bef6db8f00f20d4b5789af99467669cbfe1113691e87befde9a091728a10faa9b7fc7bf9a39c2502f12f586541037712914423bed0cb6a9b94b"}, {0x90, 0x10d, 0x1d0, "16f9189a08b691f3b1adb09fc73a109eb1fff1b6ca17157b98ddc702121192ab77d27685e2b44ddabf4eabc4956bbb53aa10856b9f272b10fcc6cfc9d7bd8ebd4e05e084abd24c3545be860af8124387e7917e95f10da14b85658326200bca7ef86a4bc74ea8d5163e5210628ab99b30652de9982325635d624f"}], 0x478}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a0313", 0x30}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) 00:36:41 executing program 5: perf_event_open$cgroup(&(0x7f0000000780)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:36:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x61}]}) 00:36:41 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="b5", 0x1}], 0x1, &(0x7f0000000500)=ANY=[], 0x1b0}, 0x0) recvmsg(r0, &(0x7f0000008d40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f000001ae00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="83", 0x1}], 0x1}, 0x0) 00:36:41 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 530.743851][ T2056] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 530.859280][T14602] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 00:36:42 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x64}]}) [ 531.275736][ T2056] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 531.285367][ T2056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.295674][ T2056] usb 3-1: Product: syz [ 531.300021][ T2056] usb 3-1: Manufacturer: syz [ 531.305318][ T2056] usb 3-1: SerialNumber: syz [ 531.382640][ T2056] usb 3-1: config 0 descriptor?? [ 531.427228][ T2056] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 531.633276][ T1977] usb 3-1: USB disconnect, device number 5 [ 531.640357][ T1977] keyspan 3-1:0.0: device disconnected [ 532.012646][T14602] team0: Port device team_slave_0 removed [ 532.028493][T14602] bond0: (slave team_slave_0): Enslaving as an active interface with an up link [ 532.038701][T14606] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 532.078503][T14606] bond0: (slave team_slave_0): Releasing backup interface 00:36:43 executing program 2: r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='&', 0x1, r0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="3ab6e303bd50", 0x6, r1) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000500)="52c931d1b37f71ef605a64462ca53fb7ad3d5accc95a52d922eea052ff7c3610c755148a4b4e13e801841529e2b517403ab6def28fcfd45ebd8303c8173e51cf290a82730eee8701ad88d91ca8d5518d751d9f04341ad581c6a8fa4d918cb65783a420b98d70161728c52d0c02691b26a910613c721390e98278c1004b00bb6b290e02bc726ea8b5f1c830995f5b1ec8dff804c6fa066c2a1349171d04ab0e1b7350e7af7a40d06f258113c0638df0549fd5bfb00c4645ff0582b8a0169a4d57", 0xc0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) syz_usb_connect$uac1(0x6, 0x96, &(0x7f0000000580)=ANY=[@ANYBLOB="12010102000000ff6b1d010140000102030109028400030101003f0904000000000000000000017409070201020b240706030000b0f8e5860904010000010200000904010101010200000724010939050009050109ff03077f06072501010600080904020000010200000904020101010200000a2402018002b8090b24020181020500ce53f1090582092000be50b23f74a90566228f8c7f40cc3304010607250102570200"], &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xf, 0x2, 0x5, 0xff, 0x2}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1b, 0x3, 0x1f, 0x100}]}, 0x9, [{0x4f, &(0x7f0000000140)=@string={0x4f, 0x3, "a3a913329e704821693f6153310ad1b3421b401bc3f4ab1c088e3d06c372097bb2b6e3a74683b02ec4e01ae19b2a0675382ef9d68535211a3de03ef997aee0bc93359514622240bd6bdfeb55c8"}}, {0x14, &(0x7f0000000200)=@string={0x14, 0x3, "3f10cb890a70f893d8ff7b609247c789d19c"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x180c}}, {0x12, &(0x7f00000002c0)=@string={0x12, 0x3, "11251ecf46dfe91c91917f42a096465b"}}, {0xb2, &(0x7f0000000300)=@string={0xb2, 0x3, "57986402c0ed17b6120b761cee23116e526771cad980ffeedaccea096e7877b5554d193be024f8225597f0043eb9d36c17a2d00d5cd94d39728a4cad81c23556aad8b97f5b33aeb5528189077aaa9cb51af841b61c3eb79a6acd9998b1cb576cf9c5308fcecda1c38487d1283f5e56f005a367763284861c18269ed6d48e8f05071137ebac8f8483a35959dbe1c14f8bf29fcd9a233ab2fe832f6547aa678a35b6e17e4db0f53cf18836469c808aa519"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc1a}}, {0xa9, &(0x7f0000000440)=@string={0xa9, 0x3, "6ae86f17888b0fa98cbd86582a9403afd9a37a04e30777b3b0d268f9a5dec6ea7bf0ff58b3951ff8adaf61c69f988fcddf83ec5f31a715770db8ab23c611a18e872452a536fe828099af104c30f7e1acd175de95c52a3a2fb1774afa56b694774cc8095a5079532aa92f3c4d4611680f5a570b081fe05c52747daf995eec91de012f72e39bdb281fedbf42888f351901a7e8aea5d4bbf016fbb56748485f2fd6220f29f2293886"}}]}) 00:36:43 executing program 5: perf_event_open$cgroup(&(0x7f0000000780)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:36:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6c}]}) 00:36:43 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000000780)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 532.567847][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 532.630203][T14623] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 532.647279][T14623] bond0: (slave team_slave_0): Enslaving as an active interface with an up link 00:36:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x1e, 0x972a973babf02aff, 0x0, 0x0, {}, [@generic="42f42d4a6e"]}, 0x1c}}, 0x0) 00:36:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) 00:36:44 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, 0x0) 00:36:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x74}]}) 00:36:44 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 533.156005][ T1977] usb 3-1: new high-speed USB device number 6 using dummy_hcd 00:36:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x2, 0x201}, 0x14}}, 0x0) [ 533.380416][T14650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:44 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f00000001c0)) 00:36:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x7c}]}) [ 533.734186][ T1977] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 533.749426][ T1977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.759193][ T1977] usb 3-1: Product: syz [ 533.765148][ T1977] usb 3-1: Manufacturer: syz [ 533.770826][ T1977] usb 3-1: SerialNumber: syz [ 533.994215][ T1977] usb 3-1: config 0 descriptor?? [ 534.036904][ T1977] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 534.240307][ T1977] usb 3-1: USB disconnect, device number 6 [ 534.248850][ T1977] keyspan 3-1:0.0: device disconnected [ 535.025940][T11534] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 535.553582][T11534] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 535.565969][T11534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.577427][T11534] usb 3-1: Product: syz [ 535.585557][T11534] usb 3-1: Manufacturer: syz [ 535.594287][T11534] usb 3-1: SerialNumber: syz 00:36:47 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:36:47 executing program 4: openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 00:36:47 executing program 1: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, r1, 0x709}, 0x14}}, 0x0) 00:36:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0xff}]}}}]}, 0x44}}, 0x0) [ 535.844317][T11534] usb 3-1: config 0 descriptor?? 00:36:47 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x84}]}) 00:36:47 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x14, &(0x7f0000000480)={0x0, 0x9, 0x8e, {0x8e, 0xa, "349a1ee2c078d5c1749c027f0e45e7c09430e92cec660a83ed3267330f47925a42acc6643e2658fc56fbbf39108c726e9f50432e6c897d2b48f78199e2005bbdd0774ae48e6bbd80afc7a02c8274fd053d7730f3baac0873dd7c9c7fed756e3958980e6b040474b709553d1827110db4824fce642e1cb9082d68ae58c93ea9a01d7ecc91262c98f462100ad1"}}, &(0x7f0000000540)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "f0aee73e8af34d0c580efc3f7dc4bba065287d1b21ebcc7e467c291b8fcbf35603ee74afb75b2ba71d4bee1746ca20901dac3200f5f7db4525c69480ff64fd0abcb7c470b2c61ad787112c359bbcedd3bc2f80bb20cb0b13bfa738792e94d23ccdc7b4e23fde56fd045ccb1c58080a01080f035f7e7d24dbbfb13bd14f8547c2c395f3340a5cbed1c1eaf000a57ee32e17cce400667a45321e9a2830cae35e51aba8c283f3d318dd2be1a4b1cf38f09aa8c237d5c4db8b5814ed1362b2dd4fe4158dbfbe089d50a0c1ec21f9b65438fce0f04cc0d427e3a92f7b2424d4c83d5aa469a0f243a5290b94f760e159fea199ce3b618b2ade"}}, &(0x7f0000000640)={0x0, 0x22, 0x1c, {[@main=@item_4={0x3, 0x0, 0x4, "d0c63a6a"}, @local=@item_4={0x3, 0x2, 0x1, "ba666958"}, @local=@item_4={0x3, 0x2, 0x2, "5333ee5a"}, @main=@item_012={0x2, 0x0, 0xb, "0476"}, @global=@item_4={0x3, 0x1, 0x5, "88ddfd4c"}, @global=@item_4={0x3, 0x1, 0x8, "8b6f2857"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x40c}}}}, &(0x7f0000000900)={0x18, &(0x7f0000000700)={0x40, 0x7, 0x1, "d4"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000780)={0x0, 0x8, 0x1}, &(0x7f00000007c0)={0x20, 0x1, 0xd3, "47053e02f3f52ae38eccfac80770791318afb91c5cdc6a5a4f7af7365dc87b3d6d724a662971c29537de266293c929414a0fde897bf5dc67bcd955e63287cbb696d4f67dfa56c2bfda2b97e6fd6fb60a53d7ac11e903f74e3893c911eca240fb67e077e869e50cdcb3cb57141610628a6cb62f0be92009a8c64b3ffc24cacd08ed53c89df1ddfda7ea085626e577d380668c153ed5b36883f6ca2f702071f2bcde58c50b9dd429e7ec552e43e6f593e5c42ad5e89b993257376311c63f0716e999199b275444622d2ac18b326d3b51521ca7ed"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x40, 0xf, 0xf9, {0xf9, 0x1, "a756990582b0f213ef98faf29a86e6d873bb54dd7e772a03c552a52a3d884a2669dbdc367d009ba653571643f360c264b8f09f3ed1feeb547b2c9d622d05c21505adf0f6bb6b2126da57824980e5ac6b062d0c748667034ee9b45446a1ca3b52352da8566b84cbf57ffd9d50410f9f307e5d64188069f50b900033d55eed2ac866ab5a1e441695143da29e36c532f3fc9f8ea82bf4d1eeddcffbd1519704d0c31361505df6abd9d02480f4e8dea1765371bd9b3d98b537e4a8a9b9970605590a16c6db5cd21c9f63da1a96e4fb0aef4c06b919296c9e339914be6894cadc9807edbad015b79a22c5c9f8713e3d74eb1beabe12594dca25"}}, &(0x7f0000000100)={0x0, 0x3, 0x13, @string={0x13, 0x3, "d48b925bebc796c3d9578648ea36378628"}}, &(0x7f0000000140)={0x0, 0x22, 0x11, {[@main=@item_4={0x3, 0x0, 0x9, "7777a16e"}, @main=@item_4={0x3, 0x0, 0x8, "7e737f6c"}, @main=@item_012={0x1, 0x0, 0xc, '?'}, @global=@item_4={0x3, 0x1, 0xa, "f9ce20a8"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x5f, 0x1, {0x22, 0x781}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000240)={0x40, 0x12, 0x80, "3e322055eac54f80cad12f0e25418446646e31d47c6bfd129545d8fd464c9a850469f094bbbe60f54bf5c0078a7a105b336d5adcb95a4759320e0621349396f837e84f16d02550ca60f920be9b2a7d5d7ff5aec95cad084e9d72327be88160a087bd62c37091f7edcb676f5803b5bbcef862b224be55a4380b33f3d83626538f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xe2}, &(0x7f0000000380)={0x20, 0x1, 0x4a, "ac51bddba9fedf886389a610992f2b8dc8d0a4e994adabb9052f39b858e4e30ac05b4fb98b2f3d8267580acbef07d9c3ec11e4162b514c0fdfada8ecf186141ea0a5fbe07d049b85ecbf"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x9}}) [ 535.915316][T11534] usb 3-1: can't set config #0, error -71 [ 536.010375][T11534] usb 3-1: USB disconnect, device number 7 [ 536.459488][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) 00:36:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x87}]}) 00:36:48 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup2(r0, r1) 00:36:48 executing program 5: r0 = socket$phonet(0x23, 0x2, 0x1) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40000103) 00:36:48 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 537.112485][ T1977] usb 3-1: new high-speed USB device number 8 using dummy_hcd 00:36:48 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x2) r1 = dup(r0) r2 = creat(&(0x7f0000000140)='./file1\x00', 0x0) close(r2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 00:36:48 executing program 1: syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff81"], 0x0) [ 537.507973][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x94}]}) [ 537.643823][ T1977] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 537.660737][ T1977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.675496][ T1977] usb 3-1: Product: syz [ 537.684992][ T1977] usb 3-1: Manufacturer: syz 00:36:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x39) [ 537.691888][ T1977] usb 3-1: SerialNumber: syz 00:36:49 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 538.080434][ T1977] usb 3-1: config 0 descriptor?? [ 538.159431][ T1977] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 538.346675][T14707] udc-core: couldn't find an available UDC or it's busy [ 538.357533][T14707] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 538.497611][T14707] udc-core: couldn't find an available UDC or it's busy [ 538.506081][T14707] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 538.529657][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x9c}]}) [ 538.675486][T11534] usb 3-1: USB disconnect, device number 8 [ 538.684729][T11534] keyspan 3-1:0.0: device disconnected [ 539.452493][ T9236] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 539.983321][ T9236] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 539.996432][ T9236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.005889][ T9236] usb 3-1: Product: syz [ 540.010232][ T9236] usb 3-1: Manufacturer: syz [ 540.015646][ T9236] usb 3-1: SerialNumber: syz [ 540.042688][ T9236] usb 3-1: config 0 descriptor?? [ 540.087808][ T9236] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:36:51 executing program 2: recvfrom$netrom(0xffffffffffffffff, &(0x7f0000001080)=""/4096, 0x1000, 0x20001042, &(0x7f0000002080)={{0x3, @bcast, 0x5}, [@default, @null, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, &(0x7f0000000000)={0x20, 0x23, 0xf7, {0xf7, 0x1, "f627b8481dfd77253370f9cf3a15a3ff6804437e424596fe1126cf1fa0282bd886a73fedce05fa127dadc4d814a1db0d1595cfbe6ef5b0d92a601e2358f17db603ea3a223b01a370dfe21b5742a9bfa79a2f53eb8f52e70e9edef886095a223d584f73a5afab8759d91e6fd57ff62c5895529bd2d79341a1e6c3a6ff35c90c422d108932b13993544f1580b692e38c9c9a641d28066e7ed825446246b415d26bc693ae3ad28b353243dcfa536372278b931acf320d93eb733291c1ec8e20e9bb1339d772611ab7b98d682f8d0539259add8c1d5a3767f84298bb35f68fa6ed5808af826c0ba183aa890556332430297ace0c4a27d6"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="0003d7000000d703d82f20fcdcb48e30fa2858d013c1f48a977d81d717a702e0f1b609a6095fca37e6f6ce0000000000008d6d2043e390c3ff5bdd804316684587dab02480ba6c93b2742f151f082aa455b701eff2dcca567dfcd8f0048b0e7dd1691f12ab2dbc4b8bb69843fb26aa6a4699ed4da1d2edb1ece9ee382057e41fc2c33613f57b4b3fd945a650ccb0644e1400b3ec4ded17c2cb00eb6990a4535bf383a332d9907593f99f66f18096a5f3bc0553cfa33eb90873effe03ac911df1dddf0cdf54c5fd4bb1aabb55a407727208faccea1bfaa6f86ad3000000"], &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x0, 0x1f, 0x8, "4c0a36ad", "91f6ae2f"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x10, 0x4, 0xfa, 0x81, 0x192d, 0xff00}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000340)={0x40, 0x15, 0x7e, "f28c2b58fc72dfb237dbcc8f5a3cead03ff2a5788f8df72a38ae90639cd6a1e61e7377fb8dda3bd12a808a82cab93e0da52080f2a3c3f200a94ca90cf5f69d900c7a68d1ee8a1e9d877a69f00144ab131cc17215dcc56f96780d25e919d540e3d8ce8fed1be65b3c1f8a1e59ffee2a140b7045083f8104d5a3b2e055fe63"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x28}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x80, 0x1, [0xfff]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000580)={0x40, 0xb, 0x2, ':O'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x5c94}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "a6c6"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000700)={0x40, 0x1c, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000780)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, &(0x7f0000000840)={0x40, 0x30, 0xdd, {0xdd, 0xf, "0249b0ee148f8c2ec5818933e5d56f127785f3598d9c81ace053adc4cafac09e446242624afb7a444a2f731100dd1df0d5c6c30418720860b230b1bf1e760eb20a7c5ed5eae436bdf0d66c91c8184504b5da35fc19e968a55a72038cae4baea69a691e391e5a0cbd55c5f20668962d7da8ddfb71f016926af0b6f4a50c72af15dfe2ddd3893c1b6b9df5745bfae61dcf2685d417c4a5041b7a5b4564829e9fb2b768f0277e885e15ebe44249d2f11039430e84a0f6d525bba11a6390e2e1bbf81601da6a454ec6b9be4a95b4113f0f8b42db52623c02aa232ee374"}}, &(0x7f0000000940)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "300ebefb96b39b3132791835678f1d1a6ba69b5d09243a81bc0f17efd4228beed4d27b6785058ef1ea2d4990394fb461a15b4522cdc7c668fb54dbc51eb61461b8ef158151b8d4303c44ef8365b01834153fef1c9d1c26facecdfa2c4f0d833e71c86a86f7191b550abf26a85cae82891adb6be9f3876cb026e0d8b13d"}}, &(0x7f0000000a00)={0x0, 0xf, 0x50, {0x5, 0xf, 0x50, 0x4, [@wireless={0xb, 0x10, 0x1, 0x0, 0x40, 0x80, 0x4, 0x5, 0x7b}, @ss_container_id={0x14, 0x10, 0x4, 0xb0, "b4580891c0e0e8fe357e0d1f82879095"}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "5e121c575c44d37c1dadedc9f7abe0fa"}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x100, 0xf00, 0x5, [0xff00c0, 0xff0000, 0x0]}]}}, &(0x7f0000000a80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x8, 0x0, 0x12, "e9a500", "e85e5b75"}}, &(0x7f0000000ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x40, 0x3, 0x2, 0x4, 0x8}}}, &(0x7f0000000fc0)={0x44, &(0x7f0000000b40)={0x20, 0xa, 0xa1, "911edd552e34b5b0fda277f56f66c88a17318509e979d4296386da17b1a6e1c8d2b64cc90a7bab59d57a6a312485d2cac97f7880b63132af14bd86aceeac8d69244497ed5c42c9780856d28e2f67df78e9cf010f9fc5c64fc1c5bf4e6d776586b635ef7d266c75fc05d3cf1644ca5d47d3206243dd725dfd279958452f63204c36ca6fc6b776c95fd081c7cc53873316e4ff55734ad09be6f7008458e02a086525"}, &(0x7f0000000c00)={0x0, 0xa, 0xfffffffffffffe5e, 0x7}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x31}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000cc0)={0x20, 0x0, 0x8, {0x100, 0x0, [0xf0]}}, &(0x7f0000000d00)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000001040)={0x40, 0x9, 0x1, 0x13}, &(0x7f0000000d80)={0x40, 0xb, 0x2, "5110"}, &(0x7f0000000dc0)={0x40, 0xf, 0x2, 0x627f}, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="65f0cd73fff7"}, &(0x7f0000000e40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000e80)={0x40, 0x19, 0x2, "fcde"}, &(0x7f0000000ec0)={0x40, 0x1a, 0x2}, &(0x7f0000000f00)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000f40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000f80)={0x40, 0x21, 0x1}}) 00:36:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) 00:36:51 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24008881}, 0x8010) 00:36:51 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:36:51 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x2) r1 = dup(r0) r2 = creat(&(0x7f0000000140)='./file1\x00', 0x0) close(r2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 00:36:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0xa4}]}) [ 540.167426][ T9236] usb 3-1: USB disconnect, device number 9 [ 540.175815][ T9236] keyspan 3-1:0.0: device disconnected [ 540.450195][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 540.679359][T14790] 9pnet: Insufficient options for proto=fd 00:36:52 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0xac}]}) 00:36:52 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000140)={{}, 'port1\x00'}) 00:36:52 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:36:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) 00:36:52 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x2) r1 = dup(r0) r2 = creat(&(0x7f0000000140)='./file1\x00', 0x0) close(r2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 541.324223][T11534] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 541.581364][T14808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:53 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @empty}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}}}, 0x0) [ 541.863718][T11534] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 541.874969][T11534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.887440][T11534] usb 3-1: Product: syz [ 541.894803][T11534] usb 3-1: Manufacturer: syz [ 541.900271][T11534] usb 3-1: SerialNumber: syz [ 541.996341][T14817] 9pnet: Insufficient options for proto=fd [ 542.137260][T11534] usb 3-1: config 0 descriptor?? [ 542.213571][T11534] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:36:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)="ed8b2ea66b04922b1ac38fa4fc5c0adda7f7a09a25c7e6ba67293fcdfe85f4e22ced100b5ec94412f6c24396333e846c0bfa2ab3925b20c5204c84e5978b03409c72522749bb0f3983b28af442a9381cecee0141502287342ec1c8cb2aa0d249845a736376528bcfbeff1990d4a0dd96f548562985e96ea71285597659867e8a01160e94a6d772296f48a8475e0026b366f335106339da10521bdf90d71406fbc3ab0b2d43532801f8861c88f995", 0xae}], 0x1, &(0x7f0000000340)=[@cred={{0x18, 0x1, 0x2, {r1, 0xee00, r2}}}], 0x18, 0x4000}, 0x4000) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000440)="cf8b6aa29e1eda1f7a183e1654ad805e4d86d6ccdaf682caff5c5cdce28eb7a453881676a3ad7efe4bebcf0bfdebd5f7c4c8b3d8e1c371ebf8279153146f0d8a9e2c3287e13fa131cbcc0b34de0f614fd2736cf8fcfb77941d1c5eb8bebe569241538a4ea02fe88d0873505fefb7df55d91b7a28c9af2ef1bc2f0b", 0x7b}], 0x1, &(0x7f0000000500)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10, 0x20004000}, 0x44881) accept4$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80800) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 00:36:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) 00:36:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0xb1}]}) 00:36:55 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:36:55 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x2) r1 = dup(r0) r2 = creat(&(0x7f0000000140)='./file1\x00', 0x0) close(r2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 00:36:55 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x41, 0x0, 0x0) [ 543.859249][ T2056] usb 3-1: USB disconnect, device number 10 [ 543.866439][ T2056] keyspan 3-1:0.0: device disconnected [ 544.193875][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 544.346576][T14851] 9pnet: Insufficient options for proto=fd 00:36:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:36:55 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:36:56 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)="12", 0x1, 0x20080, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c) 00:36:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) 00:36:56 executing program 4: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) [ 545.004655][ T35] audit: type=1326 audit(1621039016.333:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14858 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 545.096966][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x2}]}) 00:36:56 executing program 2: r0 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x801) r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, ')]$+#'}}, {@access_any}, {@version_L}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@hash}, {@euid_lt={'euid<', r2}}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, '*!/./.[/*@:{/%}'}}]}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xad) write$binfmt_misc(r3, &(0x7f0000000300)={'syz1', "70afc23dac50102c3e7c06660a899e0f546b920f4f46"}, 0x1a) write$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="76697287407d32340000000000b123ac1aceeacaad90e94292985e77a1e432c48ef2610da04bd99c8df81563c3f410262d0a8929163ed1d9c994993c371f003fa43391b136f462e7"], 0xd) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc4, 0x45, 0x1d, 0x40, 0xbfd, 0xb, 0x1063, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x6a, 0x0, 0x0, 0xdc, 0xc4, 0xec}}]}}]}}, 0x0) 00:36:56 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:36:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 00:36:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) 00:36:57 executing program 4: socketpair(0x1c, 0x2, 0x0, 0x0) [ 545.860090][ T35] audit: type=1326 audit(1621039017.183:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14880 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:36:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x4}]}) [ 546.180378][T14889] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x5, &(0x7f0000000080)={@loopback, @loopback}, 0xc) [ 546.412749][T11534] usb 3-1: new high-speed USB device number 11 using dummy_hcd 00:36:57 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in={0x10, 0x2}, 0x10) 00:36:57 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:36:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) [ 546.703905][ T35] audit: type=1326 audit(1621039018.023:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14899 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 546.783866][T11534] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 546.793911][T11534] usb 3-1: config 0 has no interface number 0 [ 546.918634][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 546.963069][T11534] usb 3-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=10.63 [ 546.973979][T11534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.983271][T11534] usb 3-1: Product: syz [ 546.987913][T11534] usb 3-1: Manufacturer: syz [ 546.993173][T11534] usb 3-1: SerialNumber: syz 00:36:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x6}]}) 00:36:58 executing program 1: open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x20}, {}], 0x2129, 0x0, 0x0, 0x0) [ 547.189633][T11534] usb 3-1: config 0 descriptor?? [ 547.264499][T11534] kvaser_usb 3-1:0.106: Cannot get usb endpoint(s) [ 547.446540][ T2056] usb 3-1: USB disconnect, device number 11 [ 547.631216][ T35] audit: type=1326 audit(1621039018.953:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14924 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 548.263157][ T2056] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 548.623831][ T2056] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 548.632327][ T2056] usb 3-1: config 0 has no interface number 0 [ 548.794280][ T2056] usb 3-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=10.63 [ 548.811848][ T2056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.823137][ T2056] usb 3-1: Product: syz [ 548.829233][ T2056] usb 3-1: Manufacturer: syz [ 548.834614][ T2056] usb 3-1: SerialNumber: syz [ 548.959512][ T2056] usb 3-1: config 0 descriptor?? 00:37:00 executing program 2: mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='binder\x00', 0x2008005, &(0x7f00000000c0)='$\xe6(+*-)/)\x1b$%,@%%\x00') syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) 00:37:00 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:00 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x9, 0x4) 00:37:00 executing program 1: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) 00:37:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) 00:37:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x8}]}) [ 549.013327][ T2056] usb 3-1: can't set config #0, error -71 [ 549.114166][ T2056] usb 3-1: USB disconnect, device number 12 [ 549.410669][ T35] audit: type=1326 audit(1621039020.733:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14948 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 549.473384][T14955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:01 executing program 1: fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 00:37:01 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) 00:37:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x9}]}) 00:37:01 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:37:01 executing program 4: munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 550.228143][ T8460] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 550.346669][ T35] audit: type=1326 audit(1621039021.673:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14973 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:01 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) [ 550.853816][ T8460] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 550.866466][ T8460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.874936][ T8460] usb 3-1: Product: syz [ 550.879365][ T8460] usb 3-1: Manufacturer: syz [ 550.884576][ T8460] usb 3-1: SerialNumber: syz [ 551.000868][ T8460] usb 3-1: config 0 descriptor?? [ 551.055037][ T8460] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 551.252067][ T8460] usb 3-1: USB disconnect, device number 13 [ 551.261911][ T8460] keyspan 3-1:0.0: device disconnected 00:37:03 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x45e, 0x730, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x50, 0x80, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x2, 0xa4, {0x9, 0x21, 0x1, 0x80, 0x1, {0x22, 0x465}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xfc, 0xe1, 0x6}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xcc, 0x80, 0xc2, 0x10, 0x20}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xb4, &(0x7f0000000100)=@string={0xb4, 0x3, "f0f65b37c6441918c388c26cb10dd7a9aa381e2fd30f3e19b65587d1c8a88183b10ef024e8beecb19a564c210b0791c398e81f13551f0b4b496c740d608aa57e1a21b410481b5bfc451ca98d8aeef562ffdd501561527edae3035fe4be4155bc912de207af8bb09f9ef43b1472f8b010167ad301c18aa994219cceeb583204a07dc64da378d2188dd8ec84d1a44aa7afa941bc2715f1c2b2d739b31593d000a23d1fa3f8279554ac14c9ced8896a32695df1"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x457}}, {0xac, &(0x7f0000000240)=@string={0xac, 0x3, "7ceb78ce836038fb19b47c32a9181fa76c9765979444425726ae457df12ae09c82ee45dfe643949638d91847620ef186470c8457bb61c19ef5c53f541c0735c78e23e9b2ba8abc15f90859df5c3e3da501ced5557121ca355b1f6db9a9d5feb86909a5fb6aa493241fd0f494d036d91a780ab7f3cc377690ad01771a82e9eaa15bb46ece5f8cae3236f5b9052b404be83f78c6cf29af2d19f65ed8db04ccab2db8b810efdce6d2dd0378"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) 00:37:03 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) 00:37:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:37:03 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:37:03 executing program 1: open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) getgroups(0x3, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff]) chown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, r0) 00:37:03 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) [ 552.174806][ T35] audit: type=1326 audit(1621039023.503:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15004 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:03 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x1}, 0x1c) 00:37:03 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) 00:37:03 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 00:37:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x2}]}) 00:37:03 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000000)=""/28, &(0x7f0000000040)=0x1c) [ 552.803026][ T8460] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 553.185798][ T35] audit: type=1326 audit(1621039024.513:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15026 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:04 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) [ 553.363908][ T8460] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 553.374223][ T8460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.382412][ T8460] usb 3-1: Product: syz [ 553.387053][ T8460] usb 3-1: Manufacturer: syz [ 553.391823][ T8460] usb 3-1: SerialNumber: syz [ 553.461920][ T8460] usb 3-1: config 0 descriptor?? [ 553.526019][ T8460] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 553.725113][T15016] udc-core: couldn't find an available UDC or it's busy [ 553.732344][T15016] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 553.787357][ T8460] usb 3-1: USB disconnect, device number 14 [ 553.794301][ T8460] keyspan 3-1:0.0: device disconnected [ 554.562971][ T8460] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 555.133775][ T8460] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 555.143268][ T8460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.152904][ T8460] usb 3-1: Product: syz [ 555.157229][ T8460] usb 3-1: Manufacturer: syz [ 555.162326][ T8460] usb 3-1: SerialNumber: syz [ 555.173888][ T8460] usb 3-1: config 0 descriptor?? [ 555.227239][ T8460] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:37:06 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) 00:37:06 executing program 1: madvise(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4) 00:37:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x4}]}) 00:37:06 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:06 executing program 4: open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) 00:37:06 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) [ 555.320665][ T2056] usb 3-1: USB disconnect, device number 15 [ 555.328071][ T2056] keyspan 3-1:0.0: device disconnected [ 555.595682][ T35] audit: type=1326 audit(1621039026.923:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15071 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:07 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000), 0x4) 00:37:07 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) 00:37:07 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x6}]}) 00:37:07 executing program 4: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) open$dir(0x0, 0x0, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) [ 556.195059][ T7] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 556.290689][ T35] audit: type=1326 audit(1621039027.613:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15085 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) [ 556.764056][ T7] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 556.773877][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.782209][ T7] usb 3-1: Product: syz [ 556.789278][ T7] usb 3-1: Manufacturer: syz [ 556.794689][ T7] usb 3-1: SerialNumber: syz [ 556.955646][ T7] usb 3-1: config 0 descriptor?? [ 556.997291][ T7] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 557.202898][ T7] usb 3-1: USB disconnect, device number 16 [ 557.209896][ T7] keyspan 3-1:0.0: device disconnected [ 557.995052][ T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 558.613379][ T7] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 558.623489][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.633833][ T7] usb 3-1: Product: syz [ 558.638224][ T7] usb 3-1: Manufacturer: syz [ 558.643739][ T7] usb 3-1: SerialNumber: syz [ 558.658970][ T7] usb 3-1: config 0 descriptor?? [ 558.711159][ T7] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:37:10 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x80000000}}}, 0xd) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e186f240cd86a7014b140102030109021200010000000009040000001a104000"], 0x0) 00:37:10 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@init={0x14}], 0x14}, 0x0) 00:37:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x8}]}) 00:37:10 executing program 1: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7269825d1e44c194) 00:37:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) [ 558.805571][ T7] usb 3-1: USB disconnect, device number 17 [ 558.812436][ T7] keyspan 3-1:0.0: device disconnected [ 559.060590][ T35] audit: type=1326 audit(1621039030.383:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15133 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f0000000100)=0xb) 00:37:10 executing program 4: open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 00:37:10 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) 00:37:10 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x9}]}) [ 559.817178][ T7] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 559.942420][ T35] audit: type=1326 audit(1621039031.263:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15151 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x9, 0x0, &(0x7f0000000040)) [ 560.414689][ T7] usb 3-1: New USB device found, idVendor=86cd, idProduct=01a7, bcdDevice=14.4b [ 560.424260][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.432549][ T7] usb 3-1: Product: syz [ 560.438107][ T7] usb 3-1: Manufacturer: syz [ 560.443016][ T7] usb 3-1: SerialNumber: syz [ 560.569103][ T7] usb 3-1: config 0 descriptor?? [ 560.821296][T11534] usb 3-1: USB disconnect, device number 18 00:37:12 executing program 2: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20040081) openat$full(0xffffff9c, &(0x7f0000000140), 0x101402, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x8, 0x80000000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7d60}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x20000000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5a}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c0}, 0x4084) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc01cf509, &(0x7f0000000340)={r0, 0x8, 0x100000000, 0xfffffffeffffffff}) connect$pptp(r4, &(0x7f0000000380)={0x18, 0x2, {0x3, @private=0xa010102}}, 0x1e) 00:37:12 executing program 4: open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x400004, 0x0) 00:37:12 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) 00:37:12 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) 00:37:12 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000180)) [ 561.616152][ T35] audit: type=1326 audit(1621039032.942:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15175 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:13 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) 00:37:13 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:13 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x2}]}) 00:37:13 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 00:37:13 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) [ 562.264022][T11534] usb 3-1: new high-speed USB device number 19 using dummy_hcd 00:37:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) [ 562.680420][ T35] audit: type=1326 audit(1621039034.002:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 562.804265][T11534] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 562.813809][T11534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.821997][T11534] usb 3-1: Product: syz [ 562.828981][T11534] usb 3-1: Manufacturer: syz [ 562.834301][T11534] usb 3-1: SerialNumber: syz [ 562.991181][T11534] usb 3-1: config 0 descriptor?? [ 563.058514][T11534] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 563.247817][T11534] usb 3-1: USB disconnect, device number 19 [ 563.255273][T11534] keyspan 3-1:0.0: device disconnected [ 564.098290][ T8461] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 564.643516][ T8461] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 564.652913][ T8461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.662243][ T8461] usb 3-1: Product: syz [ 564.666810][ T8461] usb 3-1: Manufacturer: syz [ 564.674597][ T8461] usb 3-1: SerialNumber: syz [ 564.687640][ T8461] usb 3-1: config 0 descriptor?? 00:37:16 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x8, 0xd0, 0x81, 0x40, 0x2020, 0x2033, 0x2e61, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xfd, [{{0x9, 0x4, 0x4, 0x0, 0x0, 0x1, 0x50, 0xeb}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x531, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x36, 0x55, 0x16, 0x20, 0x45e, 0x435, 0x6b51, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51f, 0x2, 0x9, 0x3, 0x10, 0x3f, [{{0x9, 0x4, 0x6c, 0x6, 0xf, 0x35, 0xad, 0x1f, 0x20, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "3d77653bacaa"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6f1, 0x0, 0x2, 0x20}, {0x6, 0x24, 0x1a, 0x2, 0x2}, [@mdlm_detail={0x98, 0x24, 0x13, 0x50, "1443a284b12607447d4dca81e19a767189d95ae3813a51378bab953560646ffab84e7e4a8a1d0c9299c2711d74cccd6a82911fc66ef10d9aa56d77dd3f9538ad198af199d915c9359ca361837add5423f0279c4838fec08ffbf842cb2f059a2c97372d6a3eb8ee744810295ab0e450360ae14f196e3938a43376c7371f14bb831756cc3168ba3a253e4cb4d761ce62596ee58e95"}, @mdlm_detail={0x6d, 0x24, 0x13, 0x20, "75dcd2973bc892756f4582ad1f1e2b8db4e304db0fa845bd2be55de162a66bd324a8b0007515cf911d4e9c7469859b6839429cb0af41a04a179931fb037b9d8f8b3d3c5cfe93cc502d46c96e82149d3003b78c4b7d9d82317d5f4a77667ea7b92579c87db634f18ab8"}, @country_functional={0x6, 0x24, 0x7, 0x9, 0x1}]}], [{{0x9, 0x5, 0xe, 0x1, 0x10, 0x4, 0x9, 0x46, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x9}, @generic={0xb5, 0x24, "6da94f7afe8f739a017efaec0eac6c56aab8afd4fc150c055fc29cba790e789c47d94e08ab2ca76a3ee66c70a99aa3d03f32993d71d8d754c176e6c5fd4618853d3fa24dd4679395980eef391b5dae72832b9ea94a5217d32c1136c3a567480838ec336d42d2ddb82c6cf7be7429a83bb77b7a682ce089869f64fad129a801b181817766baf22922eedcd0412f4c1a3b2b4cb92845cea4078debdf025d54c354f1fcf055a41269b23de1c161d7452400ffe6d3"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x1, 0x2, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x3300}]}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0x3, 0x81, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x5, 0x9, 0x2, [@generic={0xe9, 0x21, "803545b08e3aea2533a1b79b9422002974c7c61a92636c153ec66adb5b5a393e141d35ef06a08a4a0b7e45cb9fb67cfeab60a376d719b716090437f71b89cd8e3e4ed50ecc639c69da4e0f15f7413c5dd1fe8035a22aec5cb71aeee2871ddb0fab33898bd1e9b3a0d113ff4ed6830e8dadbf587db2ea32a1e03175d7c63d9ea388bbffcac1a422bf89697fa43f283f773a265b90b98f66c4ea9417d25b0c4f16bb4aff10a82c90d971e70c2f1c646a24e10d428792201b7f7ed9f6a2d796c46138f4c23b415adfaa90e27ec3db0ef9550dccb69c8bf31d86f7d0b431edb5b3d7d99fd3518ff91d"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x3, 0x9, 0xff}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xea, 0xfd, 0x9}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0x2, 0x7f, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0x0, 0x800}]}}, {{0x9, 0x5, 0x5, 0x2, 0x0, 0x9, 0x0, 0x3}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x0, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x400}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x9, 0x9, 0x8, [@generic={0xc4, 0x1, "c7d37218c6107b74200ef56a9fad4e97706aa2dd6c4e1962beb38de0982ff0aa0d95f24e8cf9fbda9fba243d85a7a49ac81529dcaa18a705c01963ba950c7c1e18fd9eb2cbe13ebfebea28d03214f0adbb799844f01e8e9d1dadf761bfbb76ccda1a6c00784454b5c70036034e23449bdfb24a133574266841bc60efd89409b9f060704e73784486d5bea83cd459534b098915866a18af404586c8a8c693542d7a42f4b3db2e119d88d8bdf0c014de6efcb32f8836db93e76b795cae5a660abdf174"}]}}, {{0x9, 0x5, 0x14, 0x10, 0x3ff, 0x4, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x59, 0x4}]}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0x7f, 0x20, 0x41, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x7fff}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x2, 0x2, 0x9, [@generic={0x34, 0x6, "c2f76f7097889299feeb443aa8a115e8b68b2bfdc7d020d851e4280656fa547c1b76602ebc23067828b7ef4199212feabe5a"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x81, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81}]}}, {{0x9, 0x5, 0x3, 0xb, 0x3ff, 0x0, 0x6, 0x4c}}]}}, {{0x9, 0x4, 0x2e, 0x89, 0x1, 0x30, 0x13, 0xff, 0xff, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x4}, [@processing_unit={0x9, 0x24, 0x7, 0x5, 0x6, 0x7f, "5f18"}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x1, 0x1, [0x5]}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0x8, "ac4633"}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x4, 0x0, "60a9f8c789"}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x6, 0xc2, 'X'}]}, @uac_control={{0xa, 0x24, 0x1, 0x1ff, 0x2d}, [@extension_unit={0x7, 0x24, 0x8, 0x5, 0x0, 0x3f}, @processing_unit={0x9, 0x24, 0x7, 0x5, 0x2, 0x80, "fcd3"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x2, 0x1, [0x6], 0x7f}]}], [{{0x9, 0x5, 0xd, 0x0, 0x10, 0xff, 0x0, 0x5, [@generic={0x18, 0x9, "5da7f5a75e945c7644afc2139861553d25d5e742cd04"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x20}]}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xde, 0x0, 0x6, 0x40, 0x81}, 0xf, &(0x7f0000000040)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x7, 0x3}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x407}}]}) 00:37:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x4}]}) 00:37:16 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0xc, 0x0, 0x0) 00:37:16 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x8) 00:37:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) [ 564.763961][ T8461] usb 3-1: can't set config #0, error -71 [ 564.822595][ T8461] usb 3-1: USB disconnect, device number 20 [ 565.045956][ T35] audit: type=1326 audit(1621039036.372:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15246 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:16 executing program 4: r0 = socket(0x1c, 0x10000001, 0x84) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/144, 0x90}, 0x0) 00:37:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x6}]}) 00:37:16 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) 00:37:16 executing program 1: open$dir(&(0x7f0000000140)='./file0\x00', 0x280305, 0x0) [ 565.773381][T11534] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 565.970087][ T35] audit: type=1326 audit(1621039037.292:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15275 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 566.144257][T11534] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 566.152917][T11534] usb 3-1: config 0 has no interface number 0 00:37:17 executing program 4: r0 = socket(0x1c, 0x10000001, 0x84) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2) [ 566.314918][T11534] usb 3-1: New USB device found, idVendor=2020, idProduct=2033, bcdDevice=2e.61 [ 566.324931][T11534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.334009][T11534] usb 3-1: Product: syz [ 566.338660][T11534] usb 3-1: Manufacturer: syz [ 566.344143][T11534] usb 3-1: SerialNumber: syz [ 566.525345][T11534] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 566.536273][T11534] usb 3-1: no configuration chosen from 1 choice 00:37:19 executing program 2: r0 = fanotify_init(0x4, 0x800) fcntl$getown(r0, 0x9) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e1000040cc060300000001705b4bd777272932508db499e3153c94e5fb0203010902120001000816b2ab52ca6c25fec757d89672b234060000000f755d3b784df6947c0820a1df4b4defd4d69df085d2da85dbb54b0b1ed3bc3bbe551dffd1bbdafc2cfdd8cbe889698dfef0f3a1c2523ee5c2a80a4960e60d43d1e8ac8cb229e0decdad37e5ff146fe0ef63508b5f9b0d33"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="4006e4feffffd205c37baf3641a281624efb7922977411227334f9329e055ecc557a26d3bb92f1863b64ad10805636b559c15d033b4956bcd8cd66f8d8daa0c1fcf433c15efc4a5817628ccc4dd157d9c110bd267d327d9cf36fab79ccbdc0f23d8cc52b88ada333c9c2d2af6880314ebd08000000000000000e5dffda56e0a42e99e81ec324656815c3a11e78bf934b0c1af25f82772fa849273e7e0f970588f8847167fe997f35bc03b6af698aba6eb246bf6037c987b701d5a26cc8c151d3f349b160246596c39378f7afcace7ee0836602000050e577"], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="0011170000000526649ef273f7f993c27afbb8451857af83bdcd21d16a"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0xcb}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}}) 00:37:19 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) 00:37:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x8}]}) 00:37:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 00:37:19 executing program 4: chroot(&(0x7f0000000340)='.\x00') [ 568.304417][T11534] usb 3-1: USB disconnect, device number 21 [ 568.705723][ T35] audit: type=1326 audit(1621039040.032:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15310 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:20 executing program 1: socketpair$unix(0x1, 0xd, 0x0, &(0x7f0000003840)) 00:37:20 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000002640)='ns/mnt\x00') 00:37:20 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) 00:37:20 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x9}]}) [ 569.283490][T11534] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 569.469228][T15330] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:20 executing program 1: socketpair$unix(0x2c, 0x0, 0x0, &(0x7f0000003840)) [ 569.564969][T11534] usb 3-1: too many configurations: 75, using maximum allowed: 8 [ 569.685356][ T35] audit: type=1326 audit(1621039041.012:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15331 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 569.713787][T11534] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 569.721581][T11534] usb 3-1: can't read configurations, error -61 [ 569.934933][T11534] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 570.234349][T11534] usb 3-1: too many configurations: 75, using maximum allowed: 8 [ 570.364782][T11534] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 570.373001][T11534] usb 3-1: can't read configurations, error -61 [ 570.387184][T11534] usb usb3-port1: attempt power cycle [ 571.017281][ T3123] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.025615][ T3123] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.127730][T11534] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 571.263694][T11534] usb 3-1: too many configurations: 75, using maximum allowed: 8 [ 571.384471][T11534] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 571.392253][T11534] usb 3-1: can't read configurations, error -61 [ 571.553553][T11534] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 571.684403][T11534] usb 3-1: too many configurations: 75, using maximum allowed: 8 [ 571.803827][T11534] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 571.811876][T11534] usb 3-1: can't read configurations, error -61 [ 571.822526][T11534] usb usb3-port1: unable to enumerate USB device 00:37:23 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0/file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount$overlay(0x400002, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,nfs_export=on']) rmdir(&(0x7f0000000000)='./bus/file0/file0\x00') rmdir(&(0x7f0000000080)='./bus/file0\x00') 00:37:23 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000000000000000004002000000070000000800000000010000000000000100008008000000ffff0000080000000300000000000000010000c0080000000100000008000000018000000000000008000080"]) 00:37:23 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x10}]}) 00:37:23 executing program 1: socket$inet(0x2, 0x0, 0x57ee) 00:37:23 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x18, &(0x7f0000000000)={0x40, 0x8, 0x57, {0x57, 0x4, "021009477f84e6a87d28c7ee45597ffa0b53ff1e200c4977085b5f0e0bbdf815b9bd15b1f6c08a26c6af4451cca7a185619b87b0bd3cb0c5fd4be2bb23d7c960906e8f84a12bcd3eedb143898c7f8d67490d146e86"}}, &(0x7f0000000080)={0x0, 0x3, 0x34, @string={0x34, 0x3, "c067d98ebed46b05c61f4e6d3d19dec75c7dca8cc846486a52909b7819411137a7805f6f8817f0ae393b0c4ae9c3d854b11b"}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x10, 0x80, 0x9, "7429dac8", "8b9f8939"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8c, 0x0, 0x4, 0x1, 0x40, 0x400, 0x40}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000200)={0x0, 0x7, 0xd2, "925f2068286f0622563712a8345d58c16ce625c26828bf6635c3b48a87f097f6cbce95d128426641f9b11e9d23bbbc55d47affb950019072cf3e51f16ca4fddeffd150a53505a1fd10e91fcb7e2955515a0ab46e4a4f5d046b655bc0ff805430b366f4d53c367d49c87154897c3b77cdd9ac0fb7914678609098acf27dabd70ac3cd870b70ba696a37d6729c739844a87b7a235b78b9cac6bb82e2ac1bf4322ff3c9c3ebe65091683a69f70e5b53e6251e1aafaf89db97ca188b74d02b67b33be586cebdbcf793a461f65ab2e58b1f249ba1"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000e00)=ANY=[@ANYBLOB="2020040000006d0106005f6a37234293cffd1a3bc9308c356778e06c2c682cabde5da16fb5c985e462d0afd8ce0a5ba93a4070e5db05b9b4f6b7ce6f2432a5e63e0b2031e439d74324726225647d52eeffb9ff6c1164328e2bd7d325637ac3864ceb4737400c02d1ee7823a9830afb4b857cb84f561a46e4a0e40f5a8895a280e9dd1ec36d2f3c6dbbffebcb5fae518d56be0f7304df9479628bfbbcd41eb9e4a4cb2c46c95f7d6421fcd3e70f1e6b775655b166d385d041138cfd130299d170797f5f32b1bc48e2a15511d98b765c00868ee44a785d75d3"], &(0x7f0000000400)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000480)={0x40, 0xb, 0x2, '\\z'}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, &(0x7f0000000580)={0x40, 0x19, 0x2, "b245"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x3}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f00000010c0)={0x14, 0xfffffffffffffffe, &(0x7f0000001040)={0x0, 0x3, 0x7a, @string={0x7a, 0x3, "88eba38e4f2a4ac1d14c5452e00f179792f0db679469c9bac3aa64bdec5909b7d4fbdbc88746bd9cf1a5f9f82f7692b71d876936cffb33357517e76aae8a6354a13ccf1237dc91abf4b5233d0395e585f64c9fdca23499c28da458c79183e8ffcbc1dcfc0906b704d9dbd0e5ccce2dd5876aa6df845adcd9"}}, &(0x7f00000001c0)={0x0, 0x22, 0xd, {[@main=@item_012={0x2, 0x0, 0x9, "44e2"}, @global=@item_012={0x1, 0x1, 0x2, '_'}, @local=@item_4={0x3, 0x2, 0x4, "8eb1e32d"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_012={0x1, 0x2, 0x0, "cc"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0x75f}}}}, &(0x7f0000001340)={0x18, &(0x7f0000001100)={0x40, 0x5, 0xf2, "f140bb97c14d84f05512def75ef08664a15f6a65d9027b10913db8cb99f60406ffb174468a3c105c7896cbacfa9288c3a7460fd48c0f0591ea03cf48be2475df1ded0a36386cb1ef722aa14610a2e2375e9f3689d64eb449182bd063476c1a503bdfc8ad6d1d0ff079f428066f009b7d6be7080d818a4f73d129a53aa1741fbba816ca93d043e6df2972bc1acc1b96a74551aa5ddfa3d058539553dcef94e331e62b4059e230cc33f02d90b2c69afb1d6eb693c234306b33e750f646e8e39e3e9c89a7dda64b167d02e55f81a6a6f0db765f33febe7c00a6347fc12b2d45463f32c51c446b51e3482981dac353a2ccdb5fc5"}, &(0x7f0000001200)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001240)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000001280)={0x20, 0x1, 0x76, "5649ca957623a2fc0a9824b259cc748fe5090a71c056e44cbbd426d1f56be30d1d363638dc400ac400a6c3c624a37693efd27a92382e535e6c0342e48591113bb2b913c1919329b7132f2093ee94102f658de0bbfefe90958f148d93492bb0936b8f249350a6b9079da2117389d45c9c85331cfaa7b1"}, &(0x7f0000001300)={0x20, 0x3, 0x1}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, &(0x7f0000001500)={0x14, &(0x7f0000001380)={0x40, 0x24, 0x96, {0x96, 0xe, "586c208e2638c76ad9f23ff17e92e94e80fc69cf12d03c024b38618f90dfa16b52a1854dc62ff1de21a2773fa41322c888e352c5d6bf373149c8ef5ee3078926425bcbd7a803f60db0ee7434bb5fb8813419fe5c89f135f1d2be998fd166355cdc37a9e93e4301e1332577e63d0a32fa499f0bc4281af988b298e2369c554e7deb7d41dce70013c1674cc133c3c6f17169b320e9"}}, &(0x7f0000001440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, &(0x7f0000001480)={0x0, 0x22, 0x12, {[@main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x5, "fdc14b35"}, @local=@item_012={0x1, 0x2, 0x8, "e2"}, @main=@item_4={0x3, 0x0, 0xa, "94278f3e"}, @main=@item_4={0x3, 0x0, 0x9, "71929290"}]}}, &(0x7f00000014c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xf9, 0x1, {0x22, 0x400}}}}, &(0x7f00000016c0)={0x18, &(0x7f0000001540)={0x40, 0x6, 0x2d, "67464ecae25c3b6cf25759cb3cfbf5077707bf676d5b826869c66f8e7d544dcc0219eb6b0dd37b2f507a99c4a9"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0xba}, &(0x7f0000001600)={0x20, 0x1, 0x49, "7c63376f2b411078260d6644def2cc89c84ac183b020c5be5b79b4db3501273d7c1609f3e8885c5a47ec941f739867599add6a60f5c5ca56589cdde809adde1c9b4f0a99a6936c8100"}, &(0x7f0000001680)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io(r1, &(0x7f0000000940)={0x18, &(0x7f0000000740)={0x20, 0x8, 0x2c, {0x2c, 0x35, "d7ce5965d225b47655aec9df3b590bcdf0c70329d7c2c5e771fe02a2226b1732d26a097e352df4d7bb31"}}, &(0x7f0000000780)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "f13867ef96bffcdceb05cfc2ece10ff08a515a44f70e0265876c434585711b2c1f45fc884581cb1ab2f645a6be2272aa249e450d444be25ded24327e2cf5e3c15e9850839c57ff63b3de3bb0f6c7aca38a9046f6dadfe2cefac8123ae067f6f04c7d4900c787ea01b123c1d27b9fd846cbf93ea00276a28f3a9aaccff16d611249c5f10bf93e0014dc08c3ed"}}, &(0x7f0000000840)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x3, 0x9b}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x2, 0xf00, 0x100, [0xffc000, 0x0, 0x3f3f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x3, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x4, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x4, 0x5}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x10, 0x89, 0x4, "fccaeef9", "6dcaa62e"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0x7, 0x4, 0x8, 0x5, 0x9}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000980)={0x20, 0x17, 0x4, "4d760363"}, &(0x7f00000009c0)={0x0, 0xa, 0x1}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x2a}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x2, 0x766fc9ac8e79d355}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x80, 0x2, [0xf0f0]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0xc73}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0xdf}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "cd12"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, &(0x7f0000000c40)={0x40, 0x19, 0x2, '1D'}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x5977}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x18}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x3}}) [ 572.143680][T15359] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 572.213035][ T35] audit: type=1326 audit(1621039043.532:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15356 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:23 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 00:37:23 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x1b0}]}) 00:37:23 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) 00:37:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f000000ba00)={&(0x7f000000b940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f000000b9c0)={&(0x7f000000b980)={0x10}, 0x10}}, 0x0) [ 572.763599][ T1977] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 572.887406][ T35] audit: type=1326 audit(1621039044.212:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15375 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 573.054972][ T1977] usb 3-1: no configurations [ 573.059827][ T1977] usb 3-1: can't read configurations, error -22 [ 573.179293][T15384] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x248}]}) [ 573.274909][ T1977] usb 3-1: new high-speed USB device number 27 using dummy_hcd 00:37:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getpgrp(0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x25, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @generic="72f3ff6a04bc03c9b0e80b13c90d7a8e31"]}]}, 0x38}, {&(0x7f0000000200)={0x440, 0x18, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@generic="8f443f023bc4421724b8b629f6a7b2509b5cd22a571821ac1093456aaf759da33d492701246c70573caca8df6aca79", @typed={0x8, 0x77, 0x0, 0x0, @uid}, @nested={0x9c, 0x0, 0x0, 0x1, [@generic, @typed={0x8, 0x39, 0x0, 0x0, @fd}, @generic="ace7f89e2087b6606911f4d5fdbbdb5372cec25f257739d9afe5abde", @typed={0x8, 0x45, 0x0, 0x0, @u32=0x9}, @generic="8fd9432b5ad14191d8c30104e78bd013160ce1dd80af17a89288e43ba05c5590b25f90088249e6274d1c801ca8cb2ef72d85dbdb09452afac0836722aa04faa6cfe2834d0463878580e0061d7e92e906a137a2374fbe127a", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private1}]}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x161, 0x22, 0x0, 0x1, [@generic="f32c504b4be7bdc151de3d7ed5412a6faab2ff3ed96f1096a2e72f760b5240ff5d1a24f7ad9bb297e7b6698e71060ee830d29fd203118a4c1583a8776062069dd3e88ea962d39a121d4e2a8ae5e990e3e82bcbfe6ddd2dc4752a2fba0bc185bb86b45f", @generic="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"]}, @nested={0x109, 0x47, 0x0, 0x1, [@generic="e402896911523f0f6916eda7d0f67651ed11508581b37b2f399220e4036126e18e0cab36c457c403026b724c2e2bdb828be83ebd0180436ac111a1c5a95573b0ac1d56c44d4eb7346311bb55817dc78787575e725f66c5c278004539c69f3e5f98971898d68b1061e56d84a7d656ab9761a5efe60bc708e5500b9c814187520715312ebdad810ff8a4d9d58801e53f63cc152373224b58c6f8", @generic="ed0e666a662773872d9fdbe469711bb49efb0e97605177f404ecc82eb2392fe577e397be9200b4c844a7e065789e8cced3a64c712f0e4add38aa9b235ab565fbad83d2f619f310420261f8629f4a342e05a78bc271bf8f2549e4c0f460175d33fe0d5cddfa43dfdf465d4c28"]}, @generic="095e477fb52151c8bccd807024d6d8a2954855fe9c9d9a045bf3909c98bdb8ecefcf4461a6be5413814ee8ebfb563559f7d9f0681503322cb0fe7682965c4c5eb5804eac43a3beb623e4d8b199635766ccc60685e0df01635129de4002bc4afdaafe4d35796b30fc423a753a23fb625e6f772837afd109eed3ba1d04c11cf735591ceb0bbc1d506aac470514af74db118214979cf56cfc250baf68fa475c46f417253ed4a32d56fdac84670c5fe68f2245a8a569dd90e541aa4be7f8d95ae1ee45695b472bedf115fe9dbae5f6a6df3f44dcb9c727510c04e2194ba4f76f68701a16"]}, 0x440}, {&(0x7f0000000680)={0xa4c, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x60, 0x0, 0x0, @ipv4=@empty}, @nested={0x9c, 0x35, 0x0, 0x1, [@typed={0x95, 0xc, 0x0, 0x0, @binary="ed84673f0b5b9897af5cae14f82f12c7a1a95aad41c99e5781ac3f56b3d479cba8380c8a20e4e07fda31385d41b2f89a83d71655f5fdc68dfac5586a59cdb8b9d8560a61937d938abbfe25051e70df380bf96c3ec3f5ff44a5e88751263de1fb6067f4b0524d5994cbbfc96b726be5063a41cf0a6b079e0f58c06931f1a2990a6bf50f55d2c2e883afae340efb8554afbd"}]}, @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x984, 0x0, 0x0, 0x1, [@generic="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"]}]}, 0xa4c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 00:37:24 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) 00:37:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000d80)={@empty}, 0x14) [ 573.564570][ T1977] usb 3-1: no configurations [ 573.569339][ T1977] usb 3-1: can't read configurations, error -22 [ 573.625578][ T1977] usb usb3-port1: attempt power cycle [ 573.813005][ T35] audit: type=1326 audit(1621039045.132:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15394 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:25 executing program 1: prctl$PR_SET_MM_MAP(0x39, 0xe, &(0x7f0000000600)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0}, 0x68) [ 574.199536][T15403] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 574.373843][ T1977] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 574.514615][ T1977] usb 3-1: no configurations [ 574.519445][ T1977] usb 3-1: can't read configurations, error -22 [ 574.693586][ T1977] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 574.838013][ T1977] usb 3-1: no configurations [ 574.843718][ T1977] usb 3-1: can't read configurations, error -22 [ 574.853951][ T1977] usb usb3-port1: unable to enumerate USB device 00:37:26 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e18692950323c1f695873913f240cd0613014b14010203010902120001000000d8e884f300001a104000"], 0x0) 00:37:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x2c0}]}) 00:37:26 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sync_file_range(r2, 0x0, 0x0, 0x7) 00:37:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) 00:37:26 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:26 executing program 1: io_setup(0x1, &(0x7f0000000040)) io_setup(0xb9, &(0x7f0000000200)) [ 575.591283][T15429] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 575.673901][ T35] audit: type=1326 audit(1621039046.992:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15422 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:27 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:27 executing program 4: mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x7) 00:37:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000100)) 00:37:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[]) 00:37:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x600}]}) [ 576.390883][T15443] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 576.423888][ T18] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 576.609887][ T35] audit: type=1326 audit(1621039047.932:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15441 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 576.653968][ T18] usb 3-1: device descriptor read/64, error 18 00:37:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0) [ 576.924024][ T18] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 577.125302][ T18] usb 3-1: device descriptor read/64, error 18 [ 577.244330][ T18] usb usb3-port1: attempt power cycle [ 577.963901][ T18] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 578.054593][ T18] usb 3-1: Invalid ep0 maxpacket: 149 [ 578.213742][ T18] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 578.304010][ T18] usb 3-1: Invalid ep0 maxpacket: 149 [ 578.310102][ T18] usb usb3-port1: unable to enumerate USB device 00:37:30 executing program 4: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000080)="92ce94e87bf961d9c933f2db2d4eb4d08c2fec83210dbcebcc338b53c8b2ee1b79aebb3057794ec6967e47e342f0ed0ad8613ed329cfed6bde2ee9be591fdc834648114e1b7d4379b1472e561493fa9a58f5ab16780fefa416a37d2243ae3432ff", 0x61, 0xfffffffffffffffe}, {&(0x7f0000000180)="544303a5ec99f9bd3433761d6c255bb6d5e9fd466c4bd0ec971de1d0f83fd7ca3a99e8f6a275392689baed484409ca98aa9e87cd3bcb03c2d8fb0e54f6d6184a86a97504cfbf899df9d67485ab778252fa9444cdeb65c284813ee7a4126a4ad7c6a5b7495f5a2171de26f476572ea178b095dd011688e395d3f923ada689a76561f4db72d2584895bef4b12c2733bb17193b8c80fb3e7652072b447051f3faf91f4bbe2fdc59d8923d70fcaafc6fbd2cfff97b1e96f0e9e2a6d20072a3756f", 0xbf, 0xff}, {&(0x7f0000000280)="4d63972f364ee33c7a2da0d15a36a0", 0xf}], 0x40060, &(0x7f0000000340)={[], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@obj_type={'obj_type', 0x3d, '}'}}, {@smackfsdef={'smackfsdef', 0x3d, '[+\\-}&'}}, {@obj_user={'obj_user', 0x3d, '%(['}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) 00:37:30 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:30 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x900}]}) 00:37:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[]) 00:37:30 executing program 1: pipe(&(0x7f0000000300)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 00:37:30 executing program 2: setrlimit(0x0, &(0x7f00000003c0)={0x1}) creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000140), &(0x7f00000003c0)=ANY=[], 0xd1, 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) r0 = syz_usb_connect(0x4, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0xc, &(0x7f0000000000)={0x20, 0x9, 0x24, {0x24, 0xf, "8f1b75d501112c285454539d4e9b7c252c1d26b87baac43e49d8f5303ad055a04b69"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x24, &(0x7f00000000c0)={0x40, 0x13, 0x2, "c403"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x7e}, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x3ff, 0xc, 0x0, 0x7ff, 0x3, 0x5, 0xe50, 0x10001, 0x5, 0xfffd, 0x5}}, &(0x7f0000000200)={0x20, 0x85, 0x4, 0xabb1}, &(0x7f0000000240)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000280)={0x20, 0x87, 0x2, 0xecf}, &(0x7f00000002c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000a80)={0x18, &(0x7f00000007c0)={0x20, 0x22, 0xfa, {0xfa, 0xb, "cb7581367bfe15f4cffd72dba3bba7fbac991ef442c298b2a74afb67f1a77655ab064b0ba8f0d21db2f2f4fe75c4dba55399d4a4c7ae45e191f5cffb35bb6107a251ec98bfd9bbfe2d9bb0a28b54d98124a105e2c607ae1f5fcb33edb3db8580c6c322ed416c17e59f5b9a00af0d481262791422bcd4fbc0db5bb41cdb9073a47f714ce6bb854da17be94b16069e14345e1f39eb39cd7897e8b30a5895b5daa0b50a2eca3765a9b65a941dad197b94f38391c49c432c92c63efa0ca50d14446898a437944e5ff65e819fda383dce3bb7afa16ae615820c2fb6f3f71973bc7fb3e3ca5b0af1943615af3fd5eba0b21617dd9754dad94050aa"}}, &(0x7f00000008c0)={0x0, 0x3, 0x49, @string={0x49, 0x3, "4f5836a54185715eda2940e34d226b9f89930afc0f5556abb13023a37130307481f7573f4a1c8e6f35e0cf6652577d3e87355ff0f4cac4a6faf7226821d2a61d00bf2e8145d657"}}, &(0x7f0000000940)={0x0, 0xf, 0xc3, {0x5, 0xf, 0xc3, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "f820cd7043cd418c2d34b0facb3558f6"}, @generic={0xa0, 0x10, 0xa, "699e12439d52cb97c829bfdad6793a1a7ad7b48e0d6850fc39b59be751c39cfc621f4c135e6cb2d48f58a6ed8fa13f4fff4f0ddc0946f05bc74128fc070ef4e1938f05fde49ebf250629e2a6dafd0b6cd2d48a64073f422bb6f3442d2a9bb77722df1e1cbfc0cc2d324e426be13e45b65c8a592819debf1daa017583cdda783a2b58386a8ae43e05e3616809e392d0182661d53f4a3b8cd4e3fa112ebc"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x40, 0x0, 0x9}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x7, 0x7, "e8c48428", "4c5f9d10"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x1, 0x0, 0x8, 0x4, 0x3}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000ac0)={0x20, 0x14, 0x7, "eb13a8769d1435"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0xa6}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x80, 0x2}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x85}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "7f35"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000d00)={0x40, 0x13, 0x6}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000d80)={0x40, 0x19, 0x2, 'Eq'}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0xcf}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000480)={0xc, &(0x7f0000000400)={0x40, 0x9, 0x65, {0x65, 0xb, "d9a108f911ac1c77c86800ab3cfa42e5f30213fe75cc7c817073d828b3cce4d5b6c6e135405579c42beff2065b433b5ea3b56269c6de710e8d3934fc9c1b2252d9e901de9f92f33400a3cd16eb8167191daa09ab4f929607272a366bbd817c9abc5a7b"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x40, 0xe, 0xf9, "807ea32b2c0314e2dfdcd0a122533d26d7c16722be0722927cec7de84e7f7612398990ba35d940299cfef2931d61b630432389be33020678903845fc874b541755bc93720b22c2bfa8e850d097c3ce87bfa51cb389b52c51bccdc85bbd1f15e7d8ea0b90b7007a69e6672d42d48d707f50a77c5d0adaecb01f911db028aa97c5b6bbf404a8ab38eae5e4ef5ec61cd0ceec11e5ad50a6db16dac8f42db8455c1f767ff002bf8a381218739952cf67c3e641d15972ffbd4592493761374661e8f878bd77bc7a68f4071ff9987e85b9c6eeec9be251b30a6a6d695076597ab78059f1c78883311d5101b296294d0d4c4f33946d3d469965b491d3"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x3, 0x0, 0x8, 0x3ff, 0x3, 0x0, 0x4e52, 0x86, 0xaa, 0x80, 0x3, 0xbcd6}}, &(0x7f0000000680)={0x20, 0x85, 0x4, 0x1}, &(0x7f00000006c0)={0x20, 0x83, 0x2}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0x400}, &(0x7f0000000740)={0x20, 0x89, 0x2, 0x1}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f00000010c0)={0x18, &(0x7f0000000f40)={0x0, 0x0, 0x55, {0x55, 0x21, "054e167429222071d8a89082b17107aa75d4af4672fbfce8e69a166bd804354969a69885180b46e9b54937a1f0a7343108f7cc58d1aada54635b8b1619513dffd973efa773ff1d3b2f6a1269c548cdd47745cd"}}, &(0x7f0000000fc0)={0x0, 0x3, 0x22, @string={0x22, 0x3, "27ae6da232cc4033eb15f7c8851b64fa1497831c9c5b8bab02b7f44f1b438853"}}, &(0x7f0000001000)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x7f, 0xf8, 0x9, "52f1f590", "8a0b00b9"}}, &(0x7f0000001080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x80, 0x3, 0xb, 0x100, 0x200}}}, &(0x7f0000001580)={0x44, &(0x7f0000001100)={0x0, 0x14, 0xa2, "28e7a1537f3239de81916ff10473e0d369af2ae0bb15cb117c491c128c95222abbdd92ad9383136dc73eb0e7755fd98c82e58b0f53c7f12cb6fe547c2293d0214da0e2c4db70d49ffbdc94f065154478a61cc52f6e6c38a0fd74b69c45bc0daeed419d1275d0e837c344ee0025e9e2cabc250bae5f63df9475594e3b0908f4eaff736dd5320fca200d9f59ebf3b64f6fea0b4c753b51b94c3c1a734efc51bb37a256"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0xc0784dc17a39fcd6, 0x2}}, &(0x7f0000001280)={0x20, 0x0, 0x8, {0x80, 0x40, [0x0]}}, &(0x7f00000012c0)={0x40, 0x7, 0x2}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000001340)={0x40, 0xb, 0x2, "4094"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000013c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f0000001400)={0x40, 0x17, 0x6}, &(0x7f0000001440)={0x40, 0x19, 0x2, "46a7"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0x20}}) r2 = syz_open_dev$swradio(&(0x7f0000000340), 0x0, 0x2) fallocate(r2, 0x44, 0x10000, 0x101) [ 579.208164][ T35] audit: type=1326 audit(1621039050.532:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15465 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 579.269759][T15471] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[]) [ 579.372053][T15479] loop4: detected capacity change from 0 to 264192 00:37:30 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 579.582527][T15479] loop4: detected capacity change from 0 to 264192 00:37:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x2000}]}) 00:37:31 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xde) bind(r0, &(0x7f00000000c0)=@ieee802154={0x24, @long}, 0x80) [ 579.719008][ T35] audit: type=1804 audit(1621039051.042:146): pid=15487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir099768844/syzkaller.HuFZJP/96/bus" dev="sda1" ino=14116 res=1 errno=0 00:37:31 executing program 4: syz_emit_ethernet(0x18a, &(0x7f00000001c0)={@empty, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, 'Z5W', 0x154, 0x2f, 0x0, @remote, @loopback, {[@dstopts={0x2c, 0x20, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x0, 0x13, "c5acca2bdaf7940e5cbb974fa5636c2cf2259e"}, @generic={0x0, 0xdd, "a6658f32a00cc5f34b07c7dd7bf64131a22a643c3a369736ea084bb5eb765c09c8dc56ce8a7ef96105f0342175fcb0e9c84ad97e01ac5db591aaa6ff5f1abe73a314a50ddd27cd2de13701fe23a9724278cf7adccbc4f15b045776057ab337c2510f6f6fa51b1d8d6e5b43c7994947961ba8d5f0aa0a3b8f13fac6b6b639f3333e196839294cc2c1aa5d90f9dec4bd5bf0f3c0609b39ac627a728b49a58bb957a9487c2179be9c12866a465b101f298e0877c6e4bf079ecf96061e3de83d22404d98661738dce61cbd5ce1a75f325f432602a968447c665139315ce6d8"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment]}}}}}, 0x0) 00:37:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB]) [ 580.053781][ T18] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 580.059813][T15497] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 580.176420][ T35] audit: type=1326 audit(1621039051.502:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 580.294350][ T18] usb 3-1: Using ep0 maxpacket: 8 00:37:31 executing program 1: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 00:37:31 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 580.415224][ T18] usb 3-1: config 0 interface 0 has no altsetting 0 [ 580.422198][ T18] usb 3-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=8b.db [ 580.431867][ T18] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:37:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x4802}]}) [ 580.569309][ T18] usb 3-1: config 0 descriptor?? 00:37:32 executing program 4: io_setup(0x81, &(0x7f0000000040)=0x0) io_getevents(r0, 0x4, 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f00000001c0)={0x0, 0x989680}) 00:37:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB]) [ 580.927713][T15517] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 581.021077][ T35] audit: type=1326 audit(1621039052.342:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15518 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 581.344211][ T18] mos7840 3-1:0.0: required endpoints missing [ 581.551083][ T18] usb 3-1: USB disconnect, device number 34 [ 582.098863][ T35] audit: type=1804 audit(1621039053.422:149): pid=15487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir099768844/syzkaller.HuFZJP/96/bus" dev="sda1" ino=14116 res=1 errno=0 [ 582.403889][ T18] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 582.644877][ T18] usb 3-1: Using ep0 maxpacket: 8 [ 582.765294][ T18] usb 3-1: config 0 interface 0 has no altsetting 0 [ 582.774809][ T18] usb 3-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=8b.db [ 582.784314][ T18] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.873999][ T18] usb 3-1: config 0 descriptor?? 00:37:34 executing program 2: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x20200, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x19, 0x1f, 0x136, &(0x7f0000000200)}) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) 00:37:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000740)={0x0, 0x1, "ab"}, &(0x7f0000000780)=0x9) 00:37:34 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c00010062"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0xb001}]}) 00:37:34 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000780)) 00:37:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB]) [ 583.143938][ T18] usb 3-1: can't set config #0, error -71 [ 583.184291][ T18] usb 3-1: USB disconnect, device number 35 [ 583.502227][T15563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 583.605470][ T35] audit: type=1326 audit(1621039054.932:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15558 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:35 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000500)={@multicast, @random="1e6fd991c2b1", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'a_x', 0x0, 0x3b, 0x0, @empty, @dev}}}}, 0x0) 00:37:35 executing program 4: syz_emit_ethernet(0x9a, &(0x7f00000001c0)=ANY=[@ANYBLOB="3b920a622da9ffffffffffff86dd60d2196c0064"], 0x0) 00:37:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d000000020000000600000007000000000000000000000000000040020000000700000008000000000100000000"]) 00:37:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0xc002}]}) 00:37:35 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c00010062"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 584.375394][ T8462] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 584.468305][T15587] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 584.547393][ T35] audit: type=1326 audit(1621039055.872:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15586 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 584.905377][ T8462] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 584.915105][ T8462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.923365][ T8462] usb 3-1: Product: syz [ 584.927974][ T8462] usb 3-1: Manufacturer: syz [ 584.933138][ T8462] usb 3-1: SerialNumber: syz [ 585.068607][ T8462] usb 3-1: config 0 descriptor?? [ 585.122119][ T8462] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 585.321248][ T8460] usb 3-1: USB disconnect, device number 36 [ 585.328785][ T8460] keyspan 3-1:0.0: device disconnected [ 586.154469][ T8460] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 586.774324][ T8460] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 586.787166][ T8460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.798168][ T8460] usb 3-1: Product: syz [ 586.802598][ T8460] usb 3-1: Manufacturer: syz [ 586.808177][ T8460] usb 3-1: SerialNumber: syz [ 586.819227][ T8460] usb 3-1: config 0 descriptor?? [ 586.871579][ T8460] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 586.971242][ T8462] usb 3-1: USB disconnect, device number 37 [ 586.981193][ T8462] keyspan 3-1:0.0: device disconnected 00:37:38 executing program 4: openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x6000, 0x0) 00:37:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xae64, 0x0) 00:37:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d000000020000000600000007000000000000000000000000000040020000000700000008000000000100000000"]) 00:37:38 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c00010062"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0xff7f}]}) [ 587.350869][T15632] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 587.433162][ T35] audit: type=1326 audit(1621039058.752:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15627 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:38 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0xf0, 0x1, [{{0x9, 0x4, 0x0, 0x9a, 0x2, 0x7, 0x1, 0x1, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2c, 0x0, 0x9}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x24, 0x3f, 0x1, 0x8, 0x20}, 0x3b, &(0x7f0000000800)={0x5, 0xf, 0x3b, 0x1, [@generic={0x36, 0x10, 0x2, "e7c8a594a1a4822a14c077ea302622c3da778265dcb520d6d225ed9a0d1a57e28d0454ee889addf1fe1de859c173793e307d8e"}]}, 0x8, [{0xb3, &(0x7f0000000840)=@string={0xb3, 0x3, "714ec91c6d88f1871257cd57776bfa5ca47126296c030360cf49e5a8e47d57c9c32d8ea7d3905311449dd15a89d1420b0f9b645c1ab6be09dd835085e69cff0e37ccb79449335b387811240afbbcf486210f9837d75824b0a5521a5e05a2f36ea993bfaf535bceaf5793f2f95ab5a1be1d3bd4f0e70dd6ab284f19e90ea9ebf0a50d6851f70e7a7265ccd7014ff663e0c034baeb581c9c4d266baa1e2b498abe577dbb19648cd225685823f34b0584202a"}}, {0x95, &(0x7f0000000900)=@string={0x95, 0x3, "9db496789a16a3d0eb3d77e15428da87b47496b4ecae025974419b8a0f06c894a83b20833596907d3f67e86939cc8bf607d4dc900d19ba615e348527c06d999ad06307862e9a44dbde2e4874051b7a00fd96116009c5439a5910bf651d9b6ffea047c54ab85b068c5344ea0b3c4da6bada4216f590b478426f852dc1eb55feb3aceb2f58335e319acdec0f620e4bf03a115797"}}, {0xad, &(0x7f0000000a00)=@string={0xad, 0x3, "7264235c70cd8551d254079c18f34955151951e2612b2067bc033017b4c6bdaafb922a0108ec25206643d7e9b02003413e9b43a09faafee5cd6271158010d534ec728acea81e310657aa15cd2b69a9444c9acc8095d791b48f986c632179c65b82bf089aab005b47800155b6126224e60ea8aea4d0875f871a0b9a9901f34e5de943ddf8c2250ed5ea41ddddc82e5abedf3e520be807fc7779d0d0184eb66dbbaa6ee894a19ce5d539f975"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x300a}}, {0x3e, &(0x7f0000000b00)=@string={0x3e, 0x3, "bef1c461c2587f1bc6fabe032ed394f38fb8d675ef8862a9ea43b1096dc288aa225de668ec59ec5dde30a013bbd43c6370699452c47cd146d44f1494"}}, {0x7b, &(0x7f0000000bc0)=@string={0x7b, 0x3, "e140b03f1de1cd3b2398ebd5682481c52f6b8fe68dff30a7d7a1e3b2ec79de5577d9e4abd5f4905f43b1ba8a780ccd2f24c78c4d16c098431473bec0b9a9db7c7832aae0a9443af1464d4d37a8fdba61bdefaae5c19b66acd543243e4262f2518c3ecfbc39d826259dca6da964b76c30b66534eb87c2271cba"}}, {0x39, &(0x7f0000000b40)=@string={0x39, 0x3, "fe5c29f7d89547af6d18c5a42be48395b8953632425bb3830f9d394d8e51464ab93388474f0db5de1825bd9f9f730df7402498c5a03c7b"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x1e1fe}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x6, 0x5a6, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0x7, 0xc3, 0xc0, 0x8, 0xeb1, 0x6668, 0xe47e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x594, 0x3, 0x2, 0x1, 0x80, 0x8, [{{0x9, 0x4, 0xc0, 0x4, 0x9, 0xdd, 0x1d, 0x94, 0x4, [@generic={0x25, 0x4, "0bb10d9ae49c2b8283f92c27f3e1e921b40f2ae6a8d343aa84a9d5989bf048a7215211"}], [{{0x9, 0x5, 0x3, 0x0, 0x3b7, 0x1, 0x0, 0x1c}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x9, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x4}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x4, 0x5f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0xfe8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x9, 0x5, 0xc2}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x9, 0x7, 0xad, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xdb3}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x6, 0x1, 0x3, [@generic={0x5f, 0x31, "9cd6e144f5c492ca14fe7aae1cba65799625d348a31303c690ef336fcf08e75b052fe59b227e71308fe15ba574e66af202fc2f056a88a9c431e0c6ccabe63984cfbce4b2c1cfa6836f16deb549d454ede692b525a1b0c0dab68d857a78"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x5, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0xcd}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x1e, 0x4, 0xff, [@generic={0xfe, 0xf, "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"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x0, 0xf9, 0x5}}]}}, {{0x9, 0x4, 0xc8, 0x20, 0x8, 0xee, 0xc4, 0xe8, 0x4, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "b6921f13"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x200, 0x0, 0x20}, {0x6, 0x24, 0x1a, 0x58, 0x28}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3ff, 0x9, 0x8001}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x5}]}], [{{0x9, 0x5, 0xe, 0x0, 0x0, 0x79, 0x8, 0xf9, [@generic={0x42, 0xf, "cbcf98115e19f753bb3f8e8d2f64c8f94a63eab1d9d6173e63747eadc412b31173ec9ff1a13b9eda70264edc57d69f9542d27bf41b4d4988f33907730938f4eb"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xe0, 0x6}]}}, {{0x9, 0x5, 0x2, 0x4, 0x610, 0x5, 0x0, 0x7, [@generic={0x46, 0x31, "8026deb045ae6881b32dc08eae39047f186b1d398f18b60d41f8812aef9945c99ba4a90f20421a8dc9487f1b0180969b7a7c49d07807611853f3a35efa24d793b27c4cdd"}, @generic={0xf0, 0xb, "f2ee058065a992014809f4a062f11059de657a785c8fb3d7501526dcba25047e8ccec3bf9a509b0bf2944e52410ddf6f585c154257daa2bb5668125b15088f6a625dcab654dbd2900d785e1a4abfbeea07dcad311d243b873710ef4d49d647968e7765b57ef802451bdf63f05e617ffb3066948a2d5e68eb8b23cc3128d37d0795101f6b5c8e33e9f109d5128fcf66d223cd08b2bbdafed9f4ae4f261f638cb9ef49cf73b877a1eda136c8f49e2a4ddb6d7d9a88401b0566e1cdc33da749d01329eae9408525fbce17951b03160f7463be89db38cdce7777aa4a38ea905b8317824ac8079e104c72c5cf33824d2d"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x66, 0x1, 0x7}}, {{0x9, 0x5, 0x2, 0x8, 0x0, 0x81, 0x1, 0xff}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x8, 0x80}}, {{0x9, 0x5, 0xb, 0x0, 0x3f7, 0x0, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x6}]}}, {{0x9, 0x5, 0x3, 0x4, 0x20, 0x2, 0x9, 0xff, [@generic={0x14, 0x23, "b6c079e5c3c7201375034d149736801a25a8"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9e, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x7, 0x40, 0x40, [@generic={0x71, 0x6, "25752d61bf1f148b370081972226095849a46d3ad6ab357f192983ce692c6f5b79da475fe90aa22a645aff78d746ee12189ee5761b6985835e468a826363b23ce2068e46d69144c2737b8a233c046d9c10c1fa338ff4e6283d576e2c1ca4181f3cf9b1052bcd13ef2ac75a37d1eea1"}]}}]}}, {{0x9, 0x4, 0xe4, 0x4, 0x6, 0x16, 0xb, 0xf, 0x1, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x5, 0x7f, 0xfc}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0x0, 0x3f, 0xf8}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x8, 0x6, 0xd5, [@generic={0xa9, 0xd, "e0314011464ada1a5574ac09ce1d7f9db743cea318ee72e2e7bee54c9490ed780e5d5baab8f93810c740213d429788b218b319a26a9ed4cf0d3c1eb681912ffc348c13a4df2574a65d832d1bb5f4ea7e280e5f961358f9db0efd75cd96eac9ed138e8a7a1a9a70aeca3cd0920f280a09c3be138fb25497262adb90976295c8a5ecbf8621ec73655658067aa7fadd87018a88808e47ad94ed7123461cd07042ce176e78087b81e3"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x1f, 0x7f, 0xda}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0xcf, 0x1, 0x20}}, {{0x9, 0x5, 0xa, 0x12, 0x20, 0x43, 0x20, 0x23}}]}}]}}]}}, &(0x7f0000001d40)={0xa, &(0x7f0000001c80)={0xa, 0x6, 0x200, 0x3f, 0xff, 0x20, 0x10}, 0x2c, &(0x7f0000001cc0)={0x5, 0xf, 0x2c, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x7f, 0x3f, 0xffff, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x0, 0xf1e, 0x4, [0x0, 0xffc030, 0x180cf, 0x3f0f]}]}, 0x1, [{0x4, &(0x7f0000001d00)=@lang_id={0x4, 0x3, 0x413}}]}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000001400)={0x14, &(0x7f0000001300)={0x0, 0x21, 0x5, {0x5, 0x10, "c9211d"}}, &(0x7f0000001340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}, &(0x7f0000001380)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x3, "d62698a3"}]}}, &(0x7f00000013c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0x3e, 0x1, {0x22, 0x473}}}}, &(0x7f0000001680)={0x18, &(0x7f0000001440)={0x40, 0x9, 0xf0, "6bbf80eb3adb1744c120ad7b169942ee10e457955c206535bebb3295e866bad66c0bc0edfc4b0e72e392d9151c7e71212fea576c557774f5474e7637f6ddc5b5494137a2aee816b9d85a78b4e6374019b354cf0714f74be28a1228bc16b86dc5d002e98a37065faf55898b99bd9391654dff9c0350e34305afc9277ea3aca4a012bdfbe9cfcc715b09a6907131068119c0e4d8739110b465c8ce50e39b0e8431f0db93f280eac95b5026da5280ef01f1a7a15fe19c572b792d05d79de0fd7e70565102172b48811d40d9c1aab98bcf87c99ae8f11edc5c248e964c154b7190f590a321c7ec14387a42d15712afc4634f"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0xd0}, &(0x7f00000015c0)={0x20, 0x1, 0x55, "5659807d9613466707ddfaa861282ea958e706399feeb06e81a1fb49c07ceda72752fed417bf18e834ac8c3ad32d2ce604ae931e47f0eb67d287c1c55999d1be9edf4565ad4e6d4cd88688b123331b1c163fe423f0"}, &(0x7f0000001640)={0x20, 0x3, 0x1, 0xff}}) syz_usb_control_io(r2, &(0x7f0000000e40)={0x18, &(0x7f0000000d00)={0x20, 0xf, 0x18, {0x18, 0x7, "517d29ed1fb1d9b62b6102600f2539eba531585e8a27"}}, &(0x7f0000000d40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}, &(0x7f0000000d80)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x48, 0x7, 0x1, 0x2, 0xef}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0xffff, 0xf00, 0x0, [0x0, 0xff0000, 0xc0, 0x3f, 0x4100, 0x3ff0]}, @ptm_cap={0x3}]}}, &(0x7f0000000dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x80, 0xbd, 0x7, "3fbb9eb3", "59a4eac6"}}, &(0x7f0000000e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfe, 0x60, 0x87, 0x0, 0x40, 0x2, 0x86}}}, &(0x7f0000001280)={0x44, &(0x7f0000000e80)={0x0, 0xb, 0x2a, "f5f21dfc44243d062a4adf2724d3dae9152a97269de97d722d2dec2823bd70969f3f09c5b2f746d84e35"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x3a}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000f80)={0x20, 0x0, 0x8, {0x1e1, 0x10, [0x0]}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001040)={0x40, 0xb, 0x2, "258a"}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0x101}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, &(0x7f0000001100)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001140)={0x40, 0x19, 0x2, "4a1e"}, &(0x7f0000001180)={0x40, 0x1a, 0x2}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0x43}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000200)={0x18, &(0x7f0000000000)={0x0, 0xe, 0x4d, {0x4d, 0xb, "028f7aa34b8e8d1a7fcb15346824e6b9db6898d920343f9330f30682b9bad8d96de40ea55972dfccd007bb687ae783dc4e30496c31502d2f5ef98659217da5f5254e9dbf2dd83af57ae773"}}, &(0x7f0000000080)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "0ab03c5484537ce717b60aa6f3e75c2fb86b60461189626e4b8f9708cf7e54834fc305a2f2d2659ce5ed0ff80a9c2b662022eebaa080c785f4722a614e5680fb72b881cf7082b518de09d4b6ca75532953bc022e7650c08d1cb1604049218895a11d7210359719ed"}}, &(0x7f0000000100)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x87, 0x0, 0x1, 0x8, 0x34}, @ssp_cap={0x10, 0x10, 0xa, 0xfb, 0x1, 0x0, 0xf00, 0x8000, [0xc0]}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x2, 0x0, "a043afb6", "7433bf36"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0xab, 0x4, 0x2, 0x4de, 0xe2ca}}}, &(0x7f0000000700)={0x44, &(0x7f0000000240)={0x40, 0x18, 0xde, "1acf6b6a653783d1f9246b8ed24f5d63dd453a28a8c86ca3372486a1dfd9b7e0b00a1df88a98b5a413e7f5451c6bae7d7b292fe181a19b2b4c90cbd7ac76773c7e543356fb224fd34b3f705e766b26178dcc6364c2aaa077702314174676f5f00c7169e134e6844fb4358cb5c8d0163e9377023f6eba3ab4b7243a6ba97bfa24a69e4143162660c8b2932a4e3a6d2c29b9db2466822e6c92d3cdedd56b6af9754c5c6de73bc5aae3c08794bc549dba994037c03b933700ba504283d9b203a507214d39bb9002eed9bd3dd3a8c1e25acfe41102198bb4deac3e5db302d3d2"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x60}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x1c00, 0x1, [0xf0]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x2f}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "1424"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1f}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "5ea4"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x9b}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x1}}) 00:37:39 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 00:37:39 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1}}}, 0x10, 0x0}, 0x0) 00:37:39 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c00010062726964"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d000000020000000600000007000000000000000000000000000040020000000700000008000000000100000000"]) 00:37:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x100000}]}) [ 588.114513][ T7] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 588.412955][ T35] audit: type=1326 audit(1621039059.732:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15652 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x100000 [ 588.488513][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000100)) 00:37:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffffffffe5e, &(0x7f0000000480)=[{&(0x7f0000000780)="dc1a4a7a8465524e945aba43766306eaeaf63cb6f88e51448ec764e39b75302305e20f466cddfeabf00c174960f022b59535217f8505b04f93b0a2858a1817a44b1776689bbb587756c4009066c51089ccdeee6e2d3f6488f656a60cc770ccec4ff56fe58c5ce58b14e6f00ae61e63f82b437503ddd31fbd5601132d502c94bde4e73607000000000000000000", 0x8d}, {&(0x7f0000000140)="2deae9833fccc8c46e92298e9a2deff502f048d4d32839b4f92effc0ae6554cfd29ec1837b42bcf9767c72518a04d124ad4134d5d2151149c672b11035974af99fbb95b60a8b0f5926f53baad70f170178a069ca9700131e22b1bf1897c80d00617dfebf50328fd56fe6e1c7a9af70600ec5333f231df41d661bc4fbcbed29596ead8c6713c4452bf3dc03b6b959dd8ff5551c2817b612c6fda1674d3f97e355c72b5c68a97805a38ed66c378c2cdda1a1f2436a4f9a5e3efe204295222e80f2561824522a3723ac911dc4949c3ed2a0aeca620102835fcd73a061ef0fd950c9cf9daa9e944e82abec3c3b109ced32b1b81b61515a", 0xf5}, {&(0x7f0000000240)="557225ed80003f194df6034e2b9cfc1c18e95cb975821c5d8b2656ef137bdc2cf44176d2f635b244a9fc66f5b3a24112ebad714b1c3eb84a20559c26b38c56366148364feb9c574b879dfb38f896a6e4e9caabff24dc341d833a4563563b075bce6b968588e2c41d6d7032a3523de5026d69189f", 0x74}, {&(0x7f00000002c0)="3219e9c4fc5332a9867aefe6dc9748b2f37e576f3e5ccec6e70a6b42420f12b39cb77191021ecd68102d4b21fbfae962ed3f957216bbfe773e477f12f4813ac60ec24bb078d1dcacf6e037b46d695d0129f0f55ea3c66e5fa16355e6a4bfcdbb5d0ca193a8b87c86b7064b613af7a329bc96ea805b9054c7ee95d883fc653ffc55abdfe4177c92fa72b704869c01bfa2c8e6d99be7570a601725f7f8b00598a58a30c35f9e09831353e01979c37e850ce83b7a95832e7804d3839b4d3ec9be", 0xbf}, {&(0x7f0000000380)="6026f4b9246e2e61e01c57d87923445e0646a70cd1ef4f62a4bd3a2dbfbc15a289b02889252b63c8d101b2a6ffd261086dbd85301fff75eef7fa30b377d8c70db64405cc8bf1de306d2ac6050b7d91d1da6c3f3f0f2b1f03ed4171e0696d5f35b22d42546d178d5abb7c77d9590b52574d289b8e2d278e0669f6f90b11eadb8ea8600917cf1d99ef0798a9bd8f3b288bc10a01ab60b21cddc1fe5d1dd9bd0fef243581c0bb8bc5bc2750b291e927290b9908a76dfda8", 0xb6}, {&(0x7f0000000440)="011a94d5321f12b313", 0x9}], 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32], 0x98}], 0x1, 0x4040884) [ 588.684990][ T7] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 588.694613][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.702914][ T7] usb 3-1: Product: syz [ 588.707643][ T7] usb 3-1: Manufacturer: syz [ 588.712567][ T7] usb 3-1: SerialNumber: syz 00:37:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x12945c}]}) [ 588.867613][ T7] usb 3-1: config 0 descriptor?? [ 588.908997][ T7] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:37:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB]) 00:37:40 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c00010062726964"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 589.108791][T15646] udc-core: couldn't find an available UDC or it's busy [ 589.116754][T15646] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 589.202333][T15646] udc-core: couldn't find an available UDC or it's busy [ 589.209710][T15646] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 589.424588][ T35] audit: type=1326 audit(1621039060.742:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15669 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x120000 00:37:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 589.822171][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:42 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e1021200010000000009040000001a1040000000000000000000000000000000a9ef263dc28d24e25e2e82a882a35a7dfb40eae5ff8d881fd226187a9a"], 0x0) 00:37:42 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x200000}]}) 00:37:42 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000440)) 00:37:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB]) 00:37:42 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c00010062726964"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:42 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000010c0), 0x7, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ad4a3dcc57bf42d2ea23576c8be0ab4182e1b9bbe565d1302de5d1dd1ef6b837f5aaf6262c1960b55c5fda3d9cfc95794489234682efddb6456c212dec9783ab", "813f8459280a24526f517dc62a832aff400b2617569e71af80500844a73415de95516ed96b6036b0b5d611e1dc955ae697f9685f34c1b6c79b15254b1b112273", "d79e01a42cd6b769e343d432b6a58cf054346a10020286723e3574214e95a274"}) [ 590.791070][ T1977] usb 3-1: USB disconnect, device number 38 [ 590.798560][ T1977] keyspan 3-1:0.0: device disconnected [ 591.079071][ T35] audit: type=1326 audit(1621039062.402:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15703 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x200000 [ 591.131456][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:42 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000180)={@random="db30cfb34b61", @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:37:42 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x1000000}]}) 00:37:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB]) 00:37:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 00:37:42 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c0001006272696467"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 591.742966][ T1977] usb 3-1: new high-speed USB device number 39 using dummy_hcd 00:37:43 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_PRIORITY(r0, 0xc0045878, 0x0) [ 591.935075][ T1977] usb 3-1: device descriptor read/64, error 18 [ 591.965940][ T35] audit: type=1326 audit(1621039063.282:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15724 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x1000000 [ 592.052105][T15730] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 592.224402][ T1977] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 592.414455][ T1977] usb 3-1: device descriptor read/64, error 18 [ 592.537216][ T1977] usb usb3-port1: attempt power cycle [ 593.275182][ T1977] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 593.374809][ T1977] usb 3-1: Invalid ep0 maxpacket: 0 [ 593.524505][ T1977] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 593.646279][ T1977] usb 3-1: Invalid ep0 maxpacket: 0 [ 593.669787][ T1977] usb usb3-port1: unable to enumerate USB device 00:37:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, r1, 0xc01}, 0x14}}, 0x0) 00:37:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x2000000}]}) 00:37:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d000000020000000600000007000000000000"]) 00:37:45 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c0001006272696467"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:45 executing program 4: pkey_mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffffff) 00:37:45 executing program 2: r0 = syz_mount_image$omfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x7f, 0x4, &(0x7f0000000900)=[{&(0x7f0000000700)="1b463b28d2979de1a91eacbdb61ba714c3c240496ad9bdc90697392b1985f1a01759812e0a7c01f5e61a2b6acfe94d4c73d7f86721454718b8435c155e341666e7cc88d23c012527f41792b60d559bf800db04986b44783e7d6443549edba453c16ded9065166795e746", 0x6a, 0x5}, {&(0x7f0000000780)="fc407df82fb95b5663fcf68f71bc58af03e97643137bbb5f41242549dcf405e189199dd3c76a2e3fd55d76e69bfbfde44ac6905af6f6037715a8cd256640f3ca84cd411571fdfd8f8cedd3243917021ce9939683360f026e1c1ac2e0bc243d18cdca606f9edd29dadf3092435cf52ee4a58ea0014d7669d8fd476ff859575487250b6ece01350cde2b0686be8a62aba3e8920e90da8a451e10c1e7d6078aed066bc73ab66d0857713d2a5695", 0xac, 0x1f}, {&(0x7f0000000840)="a8e13facc4ce14741438510ed341e5453a4eea5ccfa8ec48cb817df264894a473cb296a0a1c4693fafdc80906d576635ffe5", 0x32, 0x400}, {&(0x7f0000000880)="f048d65c928e6bc01eced33783cd899d931e5776eaf6fb83094e15634b911b7d3861175a43817ac4c9520969e29f75f1632c57ce410ddfc7e393868cd3a4d37c3ae1e6a6531cc7e85c769a1c1691eafb55e40c61f9754c3822a3b27562ac494d1e698e0db29d86cf088cf8", 0x6b, 0x2}], 0x2100014, &(0x7f0000000940)={[{'@'}, {'\xcc\\'}, {':}&-'}, {}, {'/%'}, {'^'}], [{@obj_user}, {@obj_type={'obj_type', 0x3d, ';-#'}}]}) fcntl$addseals(r0, 0x409, 0x3) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e186f240cd061341ed9a933427282abf1d847bce79a762b4f70109020009040000001a104000"], 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x7, 0xa0, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "1c40"}, {0x5, 0x24, 0x0, 0x17}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0x3f, 0x8}, {0x6, 0x24, 0x1a, 0x7f, 0x22}, [@network_terminal={0x7, 0x24, 0xa, 0x1f, 0x67, 0x9, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x4f, 0x1, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x25, 0x8}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x81, 0x8, 0x5, 0x8, 0x6}, 0x2a, &(0x7f0000000100)={0x5, 0xf, 0x2a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7f, 0x80, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "418381561d9f1815dda4c954110faf76"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x4, 0x1}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3c01}}, {0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="09032bbff5e6097716763d9e9f2fab1742d4d2054c9db8c7b773a5457865af6eb2410b34ede96c9912bfdadc68d988855789feb013f754b6425016c8090e60a42718415f176e626e7321bddb5dcbe7733bd40b"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x406}}]}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_connect(0x5, 0x420, &(0x7f0000001880)={{0x12, 0x1, 0x310, 0xff, 0xa6, 0x16, 0xff, 0x13d3, 0x3262, 0x7076, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40e, 0x3, 0x6, 0x8, 0x80, 0x80, [{{0x9, 0x4, 0x10, 0x7f, 0x6, 0xfa, 0x8d, 0xbc, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x3, 0x80, 0x4, 0x6, 0x8}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x4, 0xf6, "de"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x3, 0x80, 0xd84d, 0xd7, 0x7f}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x9, "a6e31fd4"}, @selector_unit={0x8, 0x24, 0x5, 0x2, 0x7f, "0e5b9e"}]}], [{{0x9, 0x5, 0x6, 0x9, 0x8, 0x80, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb3, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x5d, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x76, 0x8}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x5, 0xfc, 0x2}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x7, 0xfa, 0x7}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0x9, 0x7, 0x81}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x9, 0x7, 0xb0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1}, @generic={0xe1, 0x22, "fe133ab072cef2c08a743e534df78a7fa95440a18791c1279bcbc2cba74b34c2a8f9295d9ace22ad51b7ea95fb7524136727862c8e35a5d152e00f334d2ba1bbc9b39bc10d00039951e828b7a5ccb0f3348ccd407acca51dcba3e488d4c0b3713c0e4ad1e1b9c2d36c04595f315171534177fc15cd7002ad3657d7b5ec92161e7b49443c9987d1ac9f1605ef5a65bf0262c0d3f9854b384e9784d4e6f61de785ff7f0ae6aa3aa6d75e8dbee95e5affcecdad5e2cc241d10c93966e6ccf1cbbec75ebcf9771772752f8a999cf15f810a195ea9242a0f27312add49cf8a56b59"}]}}]}}, {{0x9, 0x4, 0xbe, 0xdb, 0x5, 0xd6, 0xca, 0x5e, 0x8, [], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0x4, 0x3, 0x6, [@generic={0x33, 0x4, "1d488210a20810fe91c6ada2b17f32c1733287a176b5d5d071a5ea7c7ad41976b8e20c24c90db6b8d3e7c9f0847fb127f5"}, @generic={0x51, 0x1, "c37dbc4eff1bb905b962301ab5cbce78e41ce844e675f851df064d7870952ff9ec6a046685f57827cb533cc9ce8e6f24a96e273e500b496f9c20551a5a9e6c9344badd84726876964fba2c2632bdf0"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x40, 0x3f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x6}]}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0x2, 0x7, 0x4f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x63, 0x25d}]}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x1, 0x2, 0xff}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x6, 0x2, 0x0, [@generic={0x19, 0x4, "31e9e5824b3aca37a8d3f213df78341f5527432f265245"}]}}]}}, {{0x9, 0x4, 0x4e, 0x4, 0xf, 0x20, 0x42, 0xfa, 0xff, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x2d}}, @uac_control={{0xa, 0x24, 0x1, 0x81, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x3, 0x9, 0x8, 0x4, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x6, 0x7, 0x1, 0x3, 0x6}, @extension_unit={0xd, 0x24, 0x8, 0x5, 0x8, 0x1, "6dc0c683df04"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x6, 0x9, 0xbbb0, 0x5d, 0x50}]}], [{{0x9, 0x5, 0x80, 0x0, 0x10, 0x20, 0x4, 0x7, [@generic={0x5c, 0x11, "40fcfe1ee10ac52046cdc6a13a8d93bc421a2cc82ac3b25948bbe93f6b7a7ea4e0cfd2fef64a24253c68a629fbc215b9a166628d72419c5235743a80e26c6848309dec892a5d01a3bad0ce698d269bafaee82179e87e4ae3acfe"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x101}]}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0xff, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe1, 0x6}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x4c, 0x9, 0xde}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x4, 0x6b, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0xfff7}, @generic={0x14, 0x0, "16e515a94755b2a59926ce923303bf9f1f2f"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x7, 0xe4, 0x80}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x9, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x6}, @generic={0x23, 0x5, "ed3e182c0bf4f6c6dbb7c02881a3fe37f658f40308f4ce626758d5b66dcde0e60a"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0x80, 0x7, 0x4b}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x70, 0x2, 0x55, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}]}}, {{0x9, 0x5, 0xb, 0x4, 0x10, 0x1, 0x9, 0x16, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x84, 0x8}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x1f, 0x1d, 0xa2}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x2, 0x0, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x3}]}}, {{0x9, 0x5, 0x3, 0x1, 0x400, 0x8, 0x7, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8}]}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0x2, 0x81, 0x20, [@generic={0x10, 0x21, "318c1d3d42c538306b85bf967f3f"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x8, 0x92, 0x1}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0xcf, 0x9, 0x4}}]}}]}}]}}, &(0x7f0000002040)={0xa, &(0x7f0000001cc0)={0xa, 0x6, 0x310, 0x1, 0x8b, 0x3, 0x20, 0x3f}, 0x8, &(0x7f0000001d00)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0xc4, &(0x7f0000001d40)=@string={0xc4, 0x3, "7bd7886243151202c48a4a25275bbbe18815ee9aaeddb895891d62591f303d31913d6a41b0d04b1413bdf9cb51622ab11b17cda8f7cc1914b113f6eac445e8b330f2159906ae22b2d9296c12a04ee87dab47d223d5b04f6026d05d9b38525244a96870fafcb343cde5539d77461d4a3a4b9cce78ef64dd7fccfc98053cdd4c067149ba13c42682e419f98561b20f83f68dd7333884310fab21cc7e203ffbc9be01c33902c5becf929ba253da59b0bdd794840cc017d0ed2d57e66a3f6cd8369b6778"}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x42f}}, {0x7e, &(0x7f0000001e80)=@string={0x7e, 0x3, "99834df5cbd88ac218f9451c92198a918ed607a839b794f20f844afd284f7504d7649978c6e46f635ef09959e1c56cbcdfb8be261486d7be60088080398805ce46eb33306647adc742546595c2188fd00ecdfb2230330860cf4c6f95c2f9e108fae30d5278744b536572e5c0042440082efb294ebf82a640458b240b"}}, {0xfa, &(0x7f0000001f00)=@string={0xfa, 0x3, "d29efe35f51fc6373ca3965820b6ded9eb626eb25f5dc1621d1361dba94b2053ff7b06a3c48ea077a032347ca14101d809ea451ee98162d349d49fe561b904122c2fee0468a212cf10c2ce1aedae305daf45443dd28e9d1a9820abdb59c8122dab170c5464e161f22c1b594ef8bf121de54e0d4f58b66a29dece60478d6424095c423d4d3140592e56e3ac1fb2fca66c2f028c2a4814cb0ad26def8764477369852a36385b3174be9b8b026f2659c74160c4e4b0458efba8aadd0799cfcb0b96e4b09c4aedc5b882e3b207eb382e1cc9d4a743a6bea2da88191ec454196d6f5d2e0ff5702b21f986a20a807bbc66d06128e9fcd10a7f0c22"}}, {0x17, &(0x7f0000002000)=@string={0x17, 0x3, "5102f803abb18ef1a855cb0b53d8d39bc19eeeef4d"}}]}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0xe7, &(0x7f0000000a00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x3f, 0x0, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0x80}, [@mixer_unit={0xb, 0x24, 0x4, 0x2, 0x1f, "5da15b39be20"}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x3, 0x6, [0x0, 0x6, 0x4, 0x1, 0x9f6b88155346caa4, 0x5], 0x55}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5d, 0x1, 0x1001}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x40, 0x4, 0xba, 0x9, "ad7ea5", "55c2"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x1, 0x4, 0x4, "a90a", "58b8"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0xf7, 0x7f, "b3fdac"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x75, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x9, 0x4, {0x7, 0x25, 0x1, 0x3, 0x6, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0x4b, 0x2, "b0d29c", "1c"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xff, 0x1, 0x2, 0x80}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xeaa3, 0x8001, 0x1, "bc3c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x0, 0x8, {0x7, 0x25, 0x1, 0x0, 0x2d, 0x7}}}}}}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x200, 0xb8, 0x6, 0x3, 0x20, 0xff}, 0x2a, &(0x7f0000000b00)={0x5, 0xf, 0x2a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "d262b43912ee4426c6110d1791bf522d"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x9, 0xff, 0xffff, 0x2}]}, 0x7, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0xc1a}}, {0x49, &(0x7f0000000bc0)=@string={0x49, 0x3, "dc6242b92e2baf3ba5197ee9e3e85965a35c5b60ac5295732d770a63107cd8709b40acee7d40a352c6e01b44e06c359260451b2482422614942598c20f72fe15f6676a9ab87f86"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44c}}, {0xfe, &(0x7f0000000c80)=@string={0xfe, 0x3, "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"}}, {0x35, &(0x7f0000000d80)=@string={0x35, 0x3, "7a4aef6a7d409db8fd3fe80c3189f0e684f2d1b3af1b8f6144d68f5415623fc673321ce489500f2299df31c0183a68f6f1c483"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x180a}}, {0x77, &(0x7f0000000e00)=@string={0x77, 0x3, "dd014413a7f02503ab64eece5a31b02100aaf130d63e3c7af0b9e1e36407e66cbaccb7e19777a0b843e1b8dbe72bc43f30ae811d64a1d7724fdbc418f76e346885d5831dc05a0e3068be0334e4791dc15af91383c4970aef6e1508a2db62db6606198a34a6d5c3434c3c1b1430b8aceec77df581c8"}}]}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001700)={0xc, &(0x7f0000001680)={0x0, 0x31, 0x14, {0x14, 0x2d, "75ae88923b151e701734d9aea5397af3962b"}}, &(0x7f00000016c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001840)={0x10, &(0x7f0000001740)={0x0, 0x6, 0x75, "6035385f3140bf6ab94fd842615148918577a6e3fd1cdbb6d9c020b0519d6fc20dd6be3b263d321ebeddc180fa53ef004a67524452910227a622804ca05242ac2f92db25151d7a48ce2396969b49a8881efd12be9ccad85751c6c0f48505b287176718c54cacd96ac74f8feef6b20e9d69193868d2"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001800)={0x0, 0x8, 0x1, 0x1f}}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000003c0)={0xc, &(0x7f00000002c0)={0x20, 0x30, 0xd1, {0xd1, 0xc, "ee33c9f62f45f355dae504445381c3c9661cfaa6f36c39529bcac203aa253b19cc25c2d4f43ccf5644868b2c83a15dca45a806276f7f55a6d1ea38e3dd7240599f2aecad0135c179829ce305369c68d6acf5d10cfbfc330312a43826a5ed7f3566ecbe8ceea672764aae1b692a64917ec4f87d4f93ad05c3df1cdc2efa037c6502ede26dd655713b11cd339c4f81fe8e9b71b98f930baad7ba2ad8b67b58e0c9c7ce2475a52d95e85a8e46b0f77abfb73bbd4cf476b57d8178e133317f8d90e326f66a7ee85d6753e07ac619a9a1cf"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="400b6e000000e094ee220835dd244dea3b8c65d6dc4a51c16872ee0c73532db998b3296d57fdfa640b8452626789c7de775957cc0880555cba1da03da630f5effe71ff46d19f7e5634ab8d09a73c45085a53e4c1cb9d2b89d279ff0bf969e35d6fc0d82448f16911de31f3020e009d3598da0961"], &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xad}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x0, 0x4, 0x4, 0xffff, 0x1000, 0x3, 0x8001, 0x400, 0x8, 0x6, 0x0, 0x1}}, &(0x7f0000000540)={0x20, 0x85, 0x4, 0x400}, &(0x7f0000000580)={0x20, 0x83, 0x2}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000600)={0x20, 0x89, 0x2}}) syz_usb_control_io$hid(r1, &(0x7f0000001080)={0x14, &(0x7f0000000f00)={0x60, 0x4, 0x93, {0x93, 0x7, "69832a9fc3696b1fd0bc532de944775a21ef39718f584f9e70529b95088532cd4b2c55b6dfd5b05617602aa910962f54694fa1a5fa2b0f96bf879ce5984eaf8ee55192d68745e02625f371c1affff0560f2d44b4d56eab696b53020515c4215d568d7934ea98a0bdb3b6ab5ef169573f4d78bac49977e1e7a46266cc4a13f02f754a147813a5e845c32b076f2f67ea3e7e"}}, &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}, &(0x7f0000001000)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x4}]}}, &(0x7f0000001040)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x29b}}}}, &(0x7f0000001340)={0x18, &(0x7f00000010c0)={0x20, 0x16, 0xb2, "3b543b5b680fa80b46ffc016895f8364d3e0ca8b9402e48a3815be64ab63d3d2aec151efb245f7e770a94f97a872d78fc01616678872529222902fba19d7162148b2f5b728ca552744b0982ed2e8854dc326b33cbfdc7c83866663baa8bcb7799bffd73fe0c2831cbc26c480f847faf43e79d36d4ac91ede6a151d410d2aeec34b193cbfb609da0eaf75864c8a54762387fbc62ad9a9c55dc056ad36073397b9665d36f7e014ed83fd064be01e3d6e86f3d9"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001200)={0x20, 0x1, 0xc6, "b2c8c2a92e16b87fa0a2a14ed87b9de115f93ce52cc3c177a6080296c445ca2905f1aa10c9939026d625380a54b4fb95e7efa3bd414eb1bf76f543a825e3763a4a96e10cb59629137f34e8f366358410312c85119aa58999c428e2241d6fcc3e308ac2610235ba276cf0f0a58f6fa303802fdeb6918ab746c335c14706dddb5d654333d6c296a3bb5025c414343698711a5c36b94f32b9c43d4c537490ad4e8c674e5a59118320c8c0a17b947355aa7ef69180a08d2db1e630226f37d1bd83cd7aeea6369ef7"}, &(0x7f0000001300)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$hid(r2, &(0x7f0000001480)={0x14, &(0x7f0000001380)={0x0, 0xd, 0x28, {0x28, 0x8, "84977b7e8eb8a89fcec54f2fb25ed6999c5365510abab2498ff171c98573adbde8a1d9e037fa"}}, &(0x7f00000013c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x809}}, &(0x7f0000001400)={0x0, 0x22, 0x1d, {[@main=@item_4={0x3, 0x0, 0x8, "a8d0c42a"}, @global=@item_4={0x3, 0x1, 0x5, "9bd95749"}, @global=@item_4={0x3, 0x1, 0x3, "4dce7512"}, @local=@item_012={0x0, 0x2, 0x5}, @global=@item_012={0x1, 0x1, 0x0, "04"}, @global=@item_4={0x3, 0x1, 0x2, '2\aWe'}, @global=@item_012={0x0, 0x1, 0x1}, @local=@item_4={0x3, 0x2, 0x3, "848d66bc"}]}}, &(0x7f0000001440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x62, 0x1, {0x22, 0xa2c}}}}, &(0x7f0000001640)={0x18, &(0x7f00000014c0)={0x40, 0xa, 0x41, "1411226d31d9ef5bf50e58de7e0626f746275940478033e58414228f7fba17aaa84d43e390552ea8f18944023b5bb75d41f441325fe83519fa006a5238b6509ac0"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000015c0)={0x20, 0x1, 0x38, "5332f729b87fdfaf88d34b6f849b19959a6045493385b6d9bb90a7ef88cbfff5cbc7a38214781325c7b04c5cec8c89128f13ab917df9d3a9"}, &(0x7f0000001600)={0x20, 0x3, 0x1, 0x5}}) [ 594.540516][ T35] audit: type=1326 audit(1621039065.862:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15751 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x2000000 [ 594.743006][T15762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:46 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x4000000}]}) 00:37:46 executing program 4: bpf$MAP_DELETE_BATCH(0x6, 0x0, 0x0) [ 594.900900][T15766] loop2: detected capacity change from 0 to 4 00:37:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d000000020000000600000007000000000000"]) 00:37:46 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001ac0)={'wlan0\x00'}) 00:37:46 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c0001006272696467"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 595.304108][ T8462] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 595.396306][ T35] audit: type=1326 audit(1621039066.712:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15774 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x4000000 [ 595.605903][ T8462] usb 3-1: too many configurations: 40, using maximum allowed: 8 00:37:47 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x40) [ 595.730350][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 595.735696][ T8462] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 595.747839][ T8462] usb 3-1: can't read configurations, error -61 [ 595.974848][ T8462] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 596.256463][ T8462] usb 3-1: too many configurations: 40, using maximum allowed: 8 [ 596.384960][ T8462] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 596.393108][ T8462] usb 3-1: can't read configurations, error -61 [ 596.402333][ T8462] usb usb3-port1: attempt power cycle [ 597.118225][ T8462] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 597.264304][ T8462] usb 3-1: too many configurations: 40, using maximum allowed: 8 [ 597.384784][ T8462] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 597.392653][ T8462] usb 3-1: can't read configurations, error -61 [ 597.547082][ T8462] usb 3-1: new high-speed USB device number 46 using dummy_hcd 00:37:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x6000000}]}) 00:37:49 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) write$sysctl(r0, 0x0, 0x0) 00:37:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d000000020000000600000007000000000000"]) 00:37:49 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 597.684454][ T8462] usb 3-1: too many configurations: 40, using maximum allowed: 8 00:37:49 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) 00:37:49 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(r0, 0x8, 0x80000000) sendto(0xffffffffffffffff, &(0x7f0000001440)="37b8b50b3dabbbc96989652d49346c3ab14383511282cfeac21a9b97744abf879d0261f39d35de45fbae86bf07712c9da9677541c9773921eb7cedde14dbb0dfb11a0aa58305d0387eff89fc26d1d2aa70d64da076a392a67ea8a73f4dd12a903213aa0a96bbd1e7958e139f55d54ba620", 0x71, 0x1, &(0x7f00000014c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x4, 0x0, 0x3}}, 0x80) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) r1 = syz_usb_connect(0x3, 0xa1b, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x41, 0x17, 0xfc, 0x10, 0x12d1, 0xbe69, 0xb37, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa09, 0x4, 0xd4, 0x3, 0x80, 0xda, [{{0x9, 0x4, 0xb4, 0x1, 0x2, 0xff, 0x6, 0x7b, 0x3, [], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x3, 0x6, 0x3f}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x80, 0x40, 0x2, [@generic={0xd, 0x31, "db1270dd3280640c2a63bd"}]}}]}}, {{0x9, 0x4, 0x33, 0x3, 0x10, 0x9f, 0x9c, 0x5, 0x5, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, 'p:'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xfffb, 0x1ff, 0xf5}, {0x6, 0x24, 0x1a, 0x81, 0x12}, [@mdlm_detail={0xf7, 0x24, 0x13, 0xe0, "d749ad051d307ed09f33cff0c13e35fba1b0e1416ddefcbbdc2404f39c30bbb62ac03865b0085d4c8c8d60d96a0889211fb4bd345f7b893ecfc346704e55df94dca5ab64aedc88e98d6a2aa53dc25f6bd7092dbc38dbd2d14cb7146e50219f55d9e385b90827d9a0f3a82d7064bdd18bc492162264a68cd917420cf10b67e87b480deb74220a5dffdc9a9a5397e51be078f7440beed835d7f48e1038c718e6479d4fd45d291b641b49902cb350dc6ea0fdd2f59a74c5779ee18acae1b1c1bb6fa7faac4fffe7defb61cf9237bad1ed5434da51519c131b5faa8526155c9df0d32644a1a7da863db7374951d5fd440084709a5a"}, @obex={0x5, 0x24, 0x15, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x3f, 0x7, 0xf8}, @obex={0x5, 0x24, 0x15, 0x719}, @mdlm={0x15, 0x24, 0x12, 0xbd}]}], [{{0x9, 0x5, 0x0, 0xc, 0x200, 0x5, 0xff, 0x9}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x3, 0x94, 0xc0, [@generic={0x4e, 0xd, "c85b5d1510d297657048244b0767d52d0fd3332d78c744ee0e53ad1f014a2a50583ee08e07f8c05403a4225df3a55af9b09c020430a0cf63cff66aac98e9dbba6ada63e8c622d602dcf4a20a"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x8, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x3, 0x0, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2}]}}, {{0x9, 0x5, 0x16, 0x12, 0x8, 0xff, 0x63, 0x31, [@generic={0x96, 0xa, "2e7341666294ff8bacdc779cb744ec84ab56944aa6a580f8f31ae2b6ca59e00287b125115c383753eefedc051ec639f9e8cfab9a8df849ea818bc5163a3914c534962bff4f0b3fcd85366d20bfbad9a1aff69874ccd3bf7f89cbe17daf514e680eaae339ff029f0909d638868f6e5a450d262e6141b6c6a514953cabafa0da9027247b497bedcf6a1edd8645f7082f50c51084c8"}, @generic={0xd3, 0x23, "5fa4970dc2c1c746e523e7327e5eeceb3f3787bdde096dffbc3919bc178b1c18c7bcdfda137ed801927093603403273d7879aee3e5f8860e52a105026f17c9ea1e30e42b1d0d5d4d5caf28b2567253d4a34f0c631f8b54e371e2af5ee7d9e91ed6885d3eb777241043d8e4779cd80cdd24d4f00a4c7373c6d6fcefebfcd711b4b3a22c8337fd4e36ed9a61b0f57fa72374876f05549c3296ad6cdc15cec9cae5d82e2063b1ec6fa579deeeb92798159fd9af2de3c468ac9752c3b93debb7227d7336806896e3d3c9d993461f8f71608980"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x0, 0x1f, 0x2, [@generic={0x23, 0x10, "017049c650e3c3fc79f210b3bebf4d1e5e18bda4cab189287c13eb068a5765eb10"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xfff}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0xab, 0xfa, 0x8, [@generic={0x89, 0x21, "195e2b753ae73e0ae7aa73491a0a7d4142d5f0c10d9630b63ecf97b8220c624528ac17ed78d4c330706c44cf46e4cd3abe08f45f54690c21bac742d73ef7413d4815b6cefd0e772515b202b251f1eb26cec1279da1ec286de4d83af3bab7a2e38df5cc1c0288fa97ee0904e849a041874d85a03d0efe5c5606ce0e2c524f65196253d9c260bb2b"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x6, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x1000}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x3b, 0xfb, 0x0, [@generic={0x1e, 0x3, "69629d9ea5ba7aba0632519cd01aaea427921ffe8f6fa89f111beb00"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x7b, 0xc1, 0x2}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x0, 0x2, 0xbd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x7}]}}, {{0x9, 0x5, 0x1, 0x1, 0x20, 0x7, 0x81, 0x9}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4d, 0x2, 0x81, [@generic={0x39, 0x24, "8b35291ba2b28d446a2b0cc07d5ecdfde414d35fddb8b30cd482c4c25b8cce9b0055648607ed00f7e0e8c0661ebea8bf8455e8106e86dc"}, @generic={0x9c, 0x7, "fcc50de79189f462e0c1223101a09ad2ba985db45820ddfa7b2a4ff9a27f931728973845ddbddc8d07b7cebfb5b13ad2f3fb616b271534f95911e3f6681b16132fa43c1e4af32f33564aae3ed532e5a50515dc67205d66ae09f062ecbc423bacb3f3d8e83bd8480fce729ffa996df6472e80b731a86fcff0331330f7ac29bc58458a326a65720ddbbb4983597f6c29065ec728e39a45293d71b0"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x4, 0x1, 0x6b, [@generic={0x91, 0x3, "bc31507a07333e9e7bd40e2b21f834af89f4fd8102461d2bac2533742ff50a1e9f544a69b4106edc140a12a290f014aaf2e8fe542e26e6c218c0220e622ec1aaf8e131ad7fcb71433d8f77fa50d05fd1bdb240088179bb1c721e4708c2a11476e6d2ee1e8b3f286849d1a899e7cb3330dc4a0fa908b3751ed8a2fd4458373ee24dc7518cfdc300d5a88f4db1c61e42"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x8001}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0xf9, 0xfc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xe00}]}}, {{0x9, 0x5, 0x80, 0xc, 0x40, 0x7, 0x3f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xae, 0x6}]}}]}}, {{0x9, 0x4, 0x16, 0x3f, 0x0, 0x2, 0xa, 0x8f, 0xff, [@uac_as]}}, {{0x9, 0x4, 0xab, 0x2, 0xf, 0x9a, 0x3b, 0x5c, 0x6, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "5e6b1d"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xff, 0x1000, 0x6f}, {0x6, 0x24, 0x1a, 0x1e}}], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0x80, 0xff, 0x49, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0xffff}, @generic={0xc5, 0x24, "15b98abeab76f5e6a2d21c399d6b4adcded7541316f71989ac63d832d7b77224f80567438204a90539a76c1c0b9ae9d4534b0335e47e50ee18770c8cf0955339889eeea91351e615d8d91fff448a36af108ad3fbaadba4f1a5ea7091033ac2e193cdc41e5b420ff65163d02728fa1d15a101e166de1ef1ddefce4445337c3fa7059fdddc681fe7c854e86db36ff7988861c71c8419127f47b7d74d1558518bb8fff2b2ef55e269a2ab152ea3439381fed01bfbe10255cd5dc656db71fe120777c02d7c"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x1, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x1fc1}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x4, 0xc0, 0xc, [@generic={0x83, 0xe, "33a6fbe5eb0117af2c382720143f65b32cdb86e347e0513434dc2a651cc2445fdf3e5d3c9a1aec8b42bcf1309e0fc4530626a54e282e8ec11f05b9164b3403d23fcadd43e023b50fd1b135e01cbcdffd26c7effd7c88ab04c586e805e2b425af11786609dd12f788c57b2a9094a8068e0ecedf79c11aa72db6966c1ecb5aaa2b93"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x802}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x80, 0xd, 0x7}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x0, 0x5, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x3, 0x81, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x0, 0x26, 0x3c, [@generic={0x78, 0x5, "92715291337638a69423075581e94b0b8de8d02cd794fbc772d522e61ed8268ace13285e74a32749bdc2d0b2101885c5b69810ce6fc1dd9ea6e7496cead4c09c4c62b3b9b7e82eafecbc93cf6be822db92fed403299e7f1a679346c578c0cc955fb21bf6891180760e6881faa83d4ed4937f654db8cd"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x4, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x5ef, 0x2, 0x6, 0x1}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x20, 0x9, 0x8}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0xff, 0x8, 0x1f}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x80, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x1}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x5, 0x0, 0x9}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x5, 0x3, 0x9, [@generic={0x86, 0xd, "b6572a2561f7cf043ed10f0811517d538ef36fb4e6b2689455b861f83ba1e64ceb32b667d1ebe360ade53d4d4e40f7490c794124d6d556eebd13c8c9fdf9fc33895db2fac6a3003ed7989b6cef8720f2dabf08b26c7a929316711e86dd92a97dde3bd69d70221886d7e8035257e32a24723000517b7588a59991278beb487fdccfddd71f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x81, 0x80, 0x81, [@generic={0xad, 0x23, "ee20b2e095c22b0dd2c9856661a4778ab2e66e5989a9b5ebbaf7e2112e23584f38bc4e9ad9ab966c064ab7af0a80a58f2b78af167ca13943e7df4d416d7d9baffbe804f8bf10160e5298e622be4258be019d49742da4807828dd35797d94bbd6e2de78d32e1cfa763cdc9fbb7305e0b76b1ab023d09538a7c586d2b90dbff3abba4177ecc011b1a0c0079c96a2ec4d6f2fbe520e7a7241f2dfaca303f2d5d156fee925bc2d0e7edb810b09"}]}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x3, 0x2, 0x7f, 0x20, 0x2}, 0x4c, &(0x7f0000000040)={0x5, 0xf, 0x4c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x81, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0xc, 0xc, 0x1}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xe4, "129b84332ad618814b3d9e09dde4f4d3"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "b46df995527d628f6c65e39e7f40a881"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x16, 0x8, 0x39, 0x8, 0x1}]}, 0x8, [{0xc3, &(0x7f00000000c0)=@string={0xc3, 0x3, "c8d5e9aed71d05c090f84263680a9f54204dc48c4500c3add130ca6c1740a4720830a7e15f103ba310bc01ee9067be721cbffa79f4efd98dfa3e7e5604d61f55629d6a3f58dd578a5491ffdc6032806cdaa4715e94598ada8837edc25bd4d5ec94af465ab842d99af3dc2d23a66c2c5aa41436ca83efba3e424933027e4fc91ad364d2803e03a132f16fdf143701eec1fc5aba6549ebdf67125f1f29a697a881360dc9d4b47ed8012f5ef4a97807696d113bec6e5f9f69c97427cc858d6411d4f6"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x41a}}, {0x2a, &(0x7f0000000c80)=@string={0x2a, 0x3, "94baf868dd251a84722f43252e91f17148c50fe3dc186b65f8419a35940668c9495d707196c5d876"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x403}}, {0x7b, &(0x7f0000000d00)=@string={0x7b, 0x3, "b3ea74210840e322dc4b02345ca2c05f16c16384e496db15c5d1a70794fb4e2c5e96780bc62a8e74f05151a8f3494db92206c40789bfd8e36abf0a333eca2f233177fc776694a413a92332e644ddd6902c1456482580cfc9179c0531c0e3fdc823582713a01de667044dca29cd6ffed8c8c165064443ddfe06"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x1401}}, {0xf3, &(0x7f0000000e00)=@string={0xf3, 0x3, "e2e63936f051b99fd56f6196d10d25b88bab3cbf4cedd620932515f628418ef622c02d5b92ed812ff5581c262e7fd96f4952f45a40186633be38fd96f464d4c1a008ab2b8fb19ebe739bb09509a0a2e8f887a6d1ce11b9901ce31b1b5a65d4668017bb75b6ab6c45936ebbcafa52f70477618aea38d994a066705aaa12b07b3ffc3179408923b852f45105fd149eec7eff2b47deab74cc1057b6024726487aa97026473d7d86cc3f4a8ade06d679c66d60a423528cc026aa447d57cea1f553a0e0c854087399f2c355c4ab72f34fdc9a98f45962851a5801fe04204286905a10de689aca8351e9701db458a0e194393418"}}]}) syz_usb_control_io$hid(r1, &(0x7f00000011c0)={0x14, &(0x7f0000001540)={0x0, 0x11, 0xfa, {0xfa, 0x21, "16ed221156963504dbdbb9974c0939ea105546b4560a15c73eed5b61b7b8680b6e40b9c77a92f2b96e8002cac5e4e41b02317f8131754f105effc973b69d6df961879abd7a6a89bbed5133a71df5a387faf5a9840290f4d9b3363c9111c70cbea8c0900e134b822d07fbc1773386aabe531e38e2790f68233aa2fc8155f920da9153a6ead08dd5cff914db24a20b81bfde515e1a6757cc52d9a14d838d9e58bf02d61352f22bdb29328b4c760b9ae16f0d4d6063e5abaf821fa10b0dcdd629ee80c2fd57eb83baf3f5ae5bbe5a4408d02d83278466e45d048f95cf9adfcef49619c19bdcbc86e39bfc574c6101177364e9f7e2e8627ce3de"}}, &(0x7f0000001080)={0x0, 0x3, 0x7e, @string={0x7e, 0x3, "dd0b7f8ec83677a500f2063f37e83f1af5e92b773a1f9a0dcdfcc9a9ef85dcca324d16c1a0825b0a9f2f96970805f767e9784b09376311ef8e330f9fd6855094efb1531adaf941e738b993ee5d0672e66d4c9ca9561d36788a568be78b5fbd8a042ed9784cae495971f18aabc15cf51dbd03cb0b9596b0a139607855"}}, &(0x7f0000001140)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x3, '}'}, @local=@item_4={0x3, 0x2, 0x3, "1aaabad9"}, @local=@item_4={0x3, 0x2, 0x4, "abb6ad4e"}, @global=@item_4={0x3, 0x1, 0x7, "43367b14"}, @global, @global=@item_4={0x3, 0x1, 0xb, "b9b9a6f7"}, @global=@item_4={0x3, 0x1, 0x0, "6013265a"}, @global=@item_012={0x0, 0x1, 0x1}]}}, &(0x7f0000001180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x5f2}}}}, &(0x7f0000001400)={0x18, &(0x7f0000001200)={0x0, 0xa, 0x2e, "892bc244d2f6d1285fb1e270c42232ec5beab561dc3f462f005d0b4feee0bc2357c1a7358b8920e24af19e112ce3"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0xfe}, &(0x7f00000012c0)={0x20, 0x1, 0xf9, "0fbf711c276315d6cf8343cf5a21d42fa3e7d4f03310b968ca31bf678bbcf2aa2e9f0e126e6cc91d46b5638acc6773ccae8f3166a022abc6c4ee3f2fbe0005536f393078072213ad85c9720cc45d114293f2cff957134f9c7e0fb538d1c3d1dc27e38a8e1b2d320939a14f02b567344432c578bef70506926832b1a2f814f2ac82ddbb99990a55fe88d3eeea1e22a4eff0034df2450f9339a2e2aa745e9c33b55f77a11c79f4ed08a509f167cd45282b932bd679e1cacca63c4b9d99b86ba3d0450ac3fc66b10fedf2ca18a955e080d60e9cbbb70fbbde90b3976dfe43d3a9cde26f7b8bc06eaa156f1e812009a7da6476164d6f03f3e6cd28"}, &(0x7f00000013c0)={0x20, 0x3, 0x1, 0x1}}) [ 597.814206][ T8462] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 597.821994][ T8462] usb 3-1: can't read configurations, error -71 [ 597.891579][ T8462] usb usb3-port1: unable to enumerate USB device [ 598.036904][ T35] audit: type=1326 audit(1621039069.362:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15810 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x6000000 [ 598.130091][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d0000000200000006000000070000000000000000000000000000400200000007"]) 00:37:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x8000000}]}) 00:37:49 executing program 4: openat$cuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 00:37:49 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}) [ 598.794687][ T8462] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 598.880779][ T35] audit: type=1326 audit(1621039070.201:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15825 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x8000000 00:37:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x9000000}]}) 00:37:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d00000002000000060000000700000000000000"]) [ 599.216302][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:50 executing program 4: ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) [ 599.316443][ T8462] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 599.326021][ T8462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.334608][ T8462] usb 3-1: Product: syz [ 599.338904][ T8462] usb 3-1: Manufacturer: syz [ 599.343664][ T8462] usb 3-1: SerialNumber: syz [ 599.467853][ T8462] usb 3-1: config 0 descriptor?? 00:37:50 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 599.508362][ T8462] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 599.639212][ T35] audit: type=1326 audit(1621039070.961:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15846 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x9000000 [ 599.710052][T15823] udc-core: couldn't find an available UDC or it's busy [ 599.718680][T15823] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:37:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000001180)) [ 599.842782][ T8460] usb 3-1: USB disconnect, device number 47 [ 599.853049][ T8460] keyspan 3-1:0.0: device disconnected 00:37:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x48020000}]}) [ 600.145308][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 600.369013][ T35] audit: type=1326 audit(1621039071.691:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15869 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x48020000 [ 600.384614][T15871] udc-core: couldn't find an available UDC or it's busy [ 600.401010][T15871] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:37:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x4}, 0x40) 00:37:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB="0a000000000000000d000000020000"]) 00:37:52 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:52 executing program 1: syz_emit_ethernet(0x12, &(0x7f0000000280)={@broadcast, @empty, @val={@void}, {@generic={0x8906}}}, 0x0) 00:37:52 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x5c941200}]}) 00:37:52 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e186f240cd0613014b140102030109021200010000000009040000001a104000b36842cd1a4ba9fb498659f67b99da8e30a166059adc990287b1e518efffebb90e8144519ac683702ec6dff79c5caed384ea71766b9cb4e095323a60742bb817efaab198ec944ba03b2b872d3e6f9305809fcadd9e3d593044bda86743f19a5afbe2277baee55aaf050f502d0abc8f0ced3d76cc"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x18, &(0x7f00000009c0)={0x0, 0x7, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001980)={0x14, &(0x7f0000001880)={0x0, 0x23, 0x36, {0x36, 0x5, "af3e284424a871ea5ab058cc7ca0bfba8a46a4b67ffe2cf8b902b446efb03c5789babf9f5238d1bfc62aae5c0ad6e1e30d266de0"}}, &(0x7f00000018c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000001900)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xa, "db040c77"}, @main=@item_4={0x3, 0x0, 0x8, "5213d629"}]}}, &(0x7f0000001940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0x437}}}}, &(0x7f0000001c00)={0x18, &(0x7f00000019c0)={0x0, 0x18, 0xd2, "f5105a7cf1ec2fcfc0e2dfe2cdbef513033739fe5bae36a19ee4225ceaa5447f0020a6616e371899ee8e4d55fe49bbc3a7b32bb96caad999d22fa78ff730e05aee1ec5abd51b91ecc644e4d8a62f74c9d28c50b9806e77fc4828f6e9f2c68eb0cf23b2ef0f9f32c3002af9b25d0093824d89c3881d2d236750e9b3da751935778304356b136f460ccf5881e49f6650ee3e85e67643a8f28edb5aaa8a57f873fdae14ceae89a8fd989e8c31310137eadca8ba116d888e5a5d48bdd8b3f501a5c49f71e5c147ed1d209ea399b72efb94fc30ec"}, &(0x7f0000001ac0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001b00)={0x0, 0x8, 0x1}, &(0x7f0000001b40)={0x20, 0x1, 0x46, "19cbc34f2dc45d71dd81b4df0706c8fcc13765a59cd7957ae700214e9832c05391012e6956a5e5cfaa765ea304d695bfab9ffe4152276049fda5193bad4ed594eab792cbc230"}, &(0x7f0000001bc0)={0x20, 0x3, 0x1}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="0008e6000000e610b9aad84a1c84d4f984673abc2674d1f4f5ca37ff727e22fcdae626ea7374e8ec5e4610525dbff9af28032d58d8521e18d735b09f181d4c165aeafa5b9917ee11ea3fcf9317d522989be579181389720e641f20dc945968dcf0be503586d48aa01d74ac068dea2eb02a83a17adc3b9e18dc97f6cf4a059053f8c104c8bf765ae11d6476268b2833df794b61a306d56c79cda11ce0285e8f79c08246344ec9c43b52f0dca66f992b60cecb05e64ff3317e87b7b21892277b54581138c2de70206dd046e1132f5677225d6f5d7c4731cb96a6db05a8a7a62380b773d09454f711de"], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x10, &(0x7f0000000200)={0x0, 0x11, 0x6e, "6de449294fac74135e642fedb23c7124ad765cb57ac0af8c03a199411a397c51ad2538584c8f470e779e8bdf7b12fadc81ff68799d47bdd73c1d8d8f611f20a941122fcafd8183c7f24c394ff3e22ca82eade545d4474d1fdab5d12e868bafc473d6fe71de86d802142b5fa20df6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) r3 = syz_usb_connect$cdc_ncm(0x4, 0xfe, &(0x7f0000000dc0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x2, 0x1, 0x1, 0x30, 0x11, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "f18a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xfff, 0x56, 0x80}, {0x6, 0x24, 0x1a, 0x9, 0x14}, [@network_terminal={0x7, 0x24, 0xa, 0x81, 0x1, 0xa9, 0x5}, @mdlm_detail={0x63, 0x24, 0x13, 0x7, "105b30d48e88c860c542e4b3840cddaedf8785925044e3ee457c754c780fb2b64c4709d05f75ed8e84966effc4e6142635f81c1ee219e6ead3e883211608d3cc1754608ed1f8e67af4d051681f34fdae41646199d14df849fdb498c3127e45"}, @mbim_extended={0x8, 0x24, 0x1c, 0x800, 0x1, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0xc6, 0x1, 0x8, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x23, 0x3f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x6, 0x19}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1f, 0x0, 0x1f}}}}}}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x110, 0x5, 0x1f, 0x9, 0x40, 0x7}, 0xf, &(0x7f0000000f00)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0x81, 0x5}]}, 0x5, [{0x12, &(0x7f0000000f40)=@string={0x12, 0x3, "8db60ff67c7a67646839cf76c088fbaa"}}, {0x6b, &(0x7f0000000f80)=@string={0x6b, 0x3, "365e0d145df3e49bcf764e5a5225ba207c1a6d1eda9ccd157578f180c852782cdb977ca817ed82b4dc78efcb3efe517cac1f324da0c70da857a2621674cbd93ccc2d580bc90f8cca8515e88ef47924b6bddbd23de9b454f76d0f6a88ed838429a1b9dee7aa52438e68"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x300a}}, {0x99, &(0x7f0000001040)=@string={0x99, 0x3, "2ea6d0dc4ad8e3ec0a61c3f92890c933dee80f0e7e7eb856d5b65a746d022d7f499e049049d629d5065395a6dc459e960665bace1eaf85fc2dfbfbc876301734596f417f582b067d68cd11357c4d7f8a30a25201c2004e17f619823f0300312f902398cbf9d08a783213a2357c1eda470bff5045c41cae5b5d7f49502fa465713906f78498a7ddca17ae96c10438abcc4c0ed0b3efe011"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x437}}]}) syz_usb_control_io(r3, &(0x7f0000001380)={0x18, &(0x7f0000001c40)=ANY=[@ANYBLOB="400585000000850d610fb93204deee32622ca5edf12749b3896a01b82b0341362f302b0ffc7f4f933ba7e74504b9484e88443d0ac11657959be48bd61c791093b682c2e7641fac71164f295072c06c074bb8c1b2b3c2a6a41c39ec6981e7e6e0e7591395e66f0b32751c26db3608165bbc3a0e0fd1329aa7be8d017985de4967d9a44c4cd09671e378c148cb"], &(0x7f0000001240)={0x0, 0x3, 0x52, @string={0x52, 0x3, "816fa484397dc211748cb60d78687875af222d9d07f0e906f49295ec860c1ac28e46a7c6147f7aa54ed0a409cccfefc5059544f8f54bda266becd061f5e605df19ea93354c7839f7c71c5c64585f5c2f"}}, &(0x7f0000000600)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x5, 0x40, 0xff}]}}, &(0x7f0000001300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0x5, 0x5, "b00a643c", "4cb856f8"}}, &(0x7f0000001340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x3, 0x0, 0x1, 0xb6, 0xc000, 0x5}}}, &(0x7f0000001800)={0x44, &(0x7f00000013c0)={0x20, 0x14, 0x3c, "c761d99f3677821c0b052b67d36493ff19a6b45df31862d4d8329aa70f44e2891546d81f5efc1fbda71cf5f2aa950643ace23501258ddef2e24a364e"}, &(0x7f0000001440)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000014c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001500)=ANY=[@ANYBLOB="20000800005e400042000f000000"], &(0x7f0000001540)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001580)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000015c0)={0x40, 0xb, 0x2, "9c52"}, &(0x7f0000001600)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000001640)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000001680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000016c0)={0x40, 0x19, 0x2, "896b"}, &(0x7f0000001700)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001740)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001780)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000017c0)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000840)={0x18, &(0x7f00000001c0)={0x0, 0xd, 0x32, {0x32, 0xb, "7837700ea9f0f893d998b6af621f465d3d083697e43650acd055c07209e1b9b411430d91a8f629a786ec1c3010548dc5"}}, &(0x7f0000000680)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "4619c1a73a395f62e6af870001886315aad60b5c67b46d17460286c4f083af9c3a488f2e2fd631be634e03fb7fd92126bc69579d40cd612265a6cf31ee4a61cb42fcdc141cd8eb541d69eeca122debb6da4e5d8ea46f7ce73872e311fa297f15b9bfc6327be055088c978d6e1c72fb64f322f883d7bae26e7975422c7bd07618be1049d6c20a6480f13eb280575d0568db8123561de6ea996dfc05068aca3f34d185c0b500a70f744c569fe4959c96c2cef41e10e2a5c59b18cf5ea22cea983165d37b31d2190799f76e3bf4138d1e2bdc5ff816b601427a37057068667f2a0c2ba83e148173be262b5d0419a91ea9e50d5f7a1dbc017d1a"}}, &(0x7f0000000780)={0x0, 0xf, 0x33, {0x5, 0xf, 0x33, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x7, 0xf0f, 0x9260, [0x3f00, 0x1ecf, 0xff, 0xff0030]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x1, 0x1, 0xffff, 0xa9}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x9, 0x2321}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x9, 0x4f, "bfca8a30", "414845d3"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x3, 0xb8, 0x7, 0x80, 0x6, 0x401}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000880)={0x40, 0x18, 0x42, "83b1e32df1c7e10175179e184abe05bae8c09c4e412e4e886c7dfbdd382c9ce5ac6d5af487a6df7d5bd29eae6c8e59f2145a910e19b69c881760f94517d787dccdc9"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x0, 0x20}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000a80)={0x40, 0x9, 0x1}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, '0['}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @random="c0d32ba15614"}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "a67e"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x51}, &(0x7f0000000d00)={0x40, 0x21, 0x1}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000400)={0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="2009200000002003cb12731e0ea53fda8b8a7577d24d96772600b6c24b8c0c02f63735dbbfb7085cfd0de698401ddd5839300c3a6eea7c60727f3a2794b39d5a656e4d0004e5362321e25123990536c319bd6ec08e9502bf0a601fe99fa008c4fef6"], &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x10, &(0x7f0000000440)={0x0, 0x0, 0xc7, "c1a1ecc9fc3fd3d6217a7fa65aeb4c217817197047dd6cce2c10ed68e4c1f1ccbd45cd059a86b492187dbd1d86a53f35870f8f5ad36b62ed12be3b9f319703c12318762aabb26b752c4463b051909b6a9ab9bd58ad176ad147a3824d689e302c2c38f3ab7db7c1ef9537331976c3d057be93028e301ae03614df96faa0d54417bd39432cecc76134bcd13ab420d257d4203245011d5bdc1b8e0e27dbda4463c4353edd0b11f2c29ea20518a69f9ec6ccba1725822fc1a1c70f89608471891eceef488ae3091e9e"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2}}) [ 601.107175][ T35] audit: type=1326 audit(1621039072.431:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15881 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x5c940000 [ 601.143677][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0xa, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)=0x5d) 00:37:52 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0x1}) 00:37:52 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 00:37:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB='\n\x00']) 00:37:52 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 601.816013][ T8461] usb 3-1: new high-speed USB device number 49 using dummy_hcd 00:37:53 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 00:37:53 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0xb0010000}]}) 00:37:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r2}) [ 602.131679][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB='\n\x00']) 00:37:53 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 602.395829][ T8461] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 602.407240][ T8461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.416734][ T8461] usb 3-1: Product: syz [ 602.421065][ T8461] usb 3-1: Manufacturer: syz [ 602.426095][ T8461] usb 3-1: SerialNumber: syz [ 602.510914][ T35] audit: type=1326 audit(1621039073.831:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15910 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0xb0010000 [ 602.646648][ T8461] usb 3-1: config 0 descriptor?? [ 602.722866][ T8461] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected 00:37:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6, 0x0, 0x0, 0xc0020000}]}) [ 603.130198][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 603.251493][T15935] udc-core: couldn't find an available UDC or it's busy [ 603.259133][T15935] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 603.336942][ T35] audit: type=1326 audit(1621039074.661:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15934 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0xc0020000 [ 603.369783][T15935] udc-core: couldn't find an available UDC or it's busy [ 603.377218][T15935] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:37:55 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006480), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fbdbdf250b0000000c00990006000000050000000c006e80040001000400010008003700020000000400280004002800050008000400000014000a000a4137260e507985ebdf163ba9222dea3d"], 0x64}}, 0x0) 00:37:55 executing program 1: setuid(0xee00) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) 00:37:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB='\n\x00']) 00:37:55 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 604.556417][ T7] usb 3-1: USB disconnect, device number 49 [ 604.563307][ T7] keyspan 3-1:0.0: device disconnected 00:37:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) r1 = openat$nvram(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}, {}, {@access_client}], [{@dont_hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsroot}]}}) 00:37:56 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_mount_image$bfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x4, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000680)="0d0f2fefa271b9c0e41e5583aefe63eca7c5b7b2b38052257957602094668364f995261cc14e0449091b342961412c300c32928916c20fc0ba16c6939089026384fdee92454e6a1ebb9ba9d7bcc701bbbea838578e6483ab59758a596a2cffb15d4942c2792b813c331cbbc509d9b6bc397b1f7852fd0cd7aaa08247b3f8210d59d71e52caaf44549a6988e4c2e9d69ead06b5272c3826a69f8932f47f83787dbd51a7e1717497f8cb6c82bb9559342bf080d350236f3f4aac843c19bcccbf3a7e13b1fa38dd85", 0xc7, 0x6}, {&(0x7f0000000180)="3177840b33b176d85e583fac1cebbe1a73e4b58771a1a1757003f7b67f99ccae16e169d22532bb5fe556de", 0x2b, 0x3}], 0x1a560c2, &(0x7f0000000780)={[{'/{:'}], [{@euid_gt={'euid>', 0xee00}}]}) syz_open_dev$vcsn(&(0x7f00000007c0), 0x2, 0x28000) write$char_usb(r0, &(0x7f0000000000)="f3f65a976731ada39c46e32874c835f6e7cbbb175e61e0a81a407245427d02c8ae53dbba80b664a81a8c94b07eed3913081c63626027b72482defde9e95dd05ed523418a051315b47d18d2af7aea5c88e60e9c5c4b092b9f6a1e5b5be08d6c32ab1011b87a16f85c8ada3e7262bb45d74ecddfecb327f8c6e2e8dceade260b4959b0a65aebb2719128eeab6cb2e0d7e78ca443b551b78a44e2a9bf72b935ab77f7af5c290457df510faa82e46f9208bf88a7ef6700f487f0db0cc79213cd75498dc48489900b1211a3808966a190152f65410caf49ffa95eabbe510237340210d6ad8403707be3b04d109ea22be6a3342474a65e", 0xf4) syz_usb_connect(0x3, 0x41c, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x52, 0x2e, 0x88, 0xff, 0x19d2, 0x33, 0x339c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40a, 0x3, 0x0, 0xfd, 0x0, 0x0, [{{0x9, 0x4, 0x8d, 0x3f, 0x0, 0xff, 0xff, 0xff, 0x52}}, {{0x9, 0x4, 0xd6, 0x1, 0x0, 0xaa, 0xb7, 0xf4, 0x40, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "193fbc"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x73, 0x3, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0xa}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x7e, 0x8000}, @mdlm_detail={0xa5, 0x24, 0x13, 0x3, "2d946ff22622e01def64539427c9e35546d486046e8b692f1ad8633525462ce93c29c044eb3f04bafe75a8b4ea077674d832d3c68cd99fe198fccf6131f69f1eee5b06457e38924043ac7a3a81a326750273aefd3729091f6a2e670988e13b8cd0a1fbd7fb6fd235e4c7b065f4422abffcb5388a72d15eaa5212432d6dbb69fdddb9ec805645e5b208280afa3195a032a14b746a472cabf5cbc63a6da3d04434ea"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @mbim={0xc, 0x24, 0x1b, 0xfff, 0x7, 0x80, 0x3, 0x7ff, 0x4}]}, @uac_control={{0xa, 0x24, 0x1, 0x200, 0x8}}]}}, {{0x9, 0x4, 0xad, 0x51, 0xe, 0xff, 0xff, 0xff, 0x8, [], [{{0x9, 0x5, 0xe, 0x10, 0x400, 0x5, 0x1, 0xff}}, {{0x9, 0x5, 0x2, 0x14cbdf4524fafb33, 0x400, 0x6, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x5, 0x9, 0xe1, [@generic={0xf8, 0x1, "1765b1e6936b22b1a659e0df643da45057555c431f46ed90445105e42c1f9ba008b1f74b7410ef5c6c0abde776c7388d4c06e1dea0dbfff633bc4a64e0f8dc9de8f2a640bf179a41fe0fee36b5002f190ceb8b319ee77ec5d4cd2e7c9bb9a95ca3a8c5b2f63a0fe6f07703b177cd75ec4e4ce864ebdcf555c4e916bf3b97489e3136bf07645c305c0d6168a0b3f2db4b8ed9ad79c130f2818a00643d5ab780794169b077702d082b2e8fed15a016bb01c43b8fdea19c2e50b784a47726dfd30789b9d767df6bfc1fad0000ec199f389bd4e0c8748594bd65f27a4a8ac0fb937f5e2546e9230737d71cb243239dae5f8ba9c4c40110e6"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x8, 0x80, 0xc2}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0xff, 0x2}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x4, 0xc0, 0x20}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x9, 0x6, 0x0, [@generic={0xb5, 0x22, "6f1ee3ec1b0636515f9df0950c8a02d2b641017bf3f25849a0a7182fc59ba88b20789cbead6e1842f3a9981fd852c332aa6c726fbbfa5a2c3764385948e75523f017634866899b0418a285f64c4da6dcf753df6fdf2b5204b8cc629e1e1190f527c6decd006ef20024c6e1d600eff23f448d5c351fb4b0f3e10d0d93419fe36bf576890f948df1f8873780b49b815123cdf0e3fc4f0c21f02cab8f4f1e764a9ba35e291ed57ebc70c8eafa871d9ab49e5bed11"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x9}]}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0x8, 0xf7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x893e}]}}, {{0x9, 0x5, 0xb, 0x14, 0x3ff, 0xd4, 0x5, 0x8}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x9, 0xff, 0xe6}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x8, 0x3, 0x1, [@generic={0xb8, 0x2, "4c860fa906da2c86fc562b49fa9efb9b0d5420bf21c6a774541d23440472f4ea19d8f31df9ce0078f5415ac9430b897b4bfc94796cf04c34d3e43503284580574cad8df5a8762ebfc00d00ccca8cf8b4d6ac4d51270c976b60e9441935733a5873c15ab652afee66569f901cdd5855d22861b0425cece4802c647fd79350bb0c4f03a044a3dd42af0b1ebe14002888b60626a8f3b2f191ee9285a9274653e0bfa2051981237767eb8127975504f868fc556a7ee77b7c"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x1f, 0xd2, 0x5}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x4, 0x12, 0x81}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x4, 0x5, 0xbd}}]}}]}}]}}, 0x0) [ 604.758468][ T35] audit: type=1326 audit(1621039076.081:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15952 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 605.029840][T15965] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:37:56 executing program 1: syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000001e6fe691c2b186dd"], 0x0) [ 605.136394][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:37:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00\x00\x00\x00\r']) 00:37:56 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x1c}}, 0x0) [ 605.519210][ T35] audit: type=1326 audit(1621039076.841:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15952 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 605.716359][ T8461] usb 3-1: new high-speed USB device number 50 using dummy_hcd 00:37:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x1081, 0x7, 0x81, 0x400}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xad) r1 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x0, 0x2}, {0x6, 0x0, 0x0, 0x10000000}]}) 00:37:57 executing program 1: syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x4100) 00:37:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB='\n\x00\x00']) [ 605.967408][ T8461] usb 3-1: Invalid ep0 maxpacket: 512 00:37:57 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 606.134728][ T8461] usb 3-1: new high-speed USB device number 51 using dummy_hcd 00:37:57 executing program 4: write$fb(0xffffffffffffffff, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$fb(r0, &(0x7f0000000100)="f6", 0x1) [ 606.329024][ T35] audit: type=1326 audit(1621039077.651:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15990 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x10000000 [ 606.424393][ T8461] usb 3-1: Invalid ep0 maxpacket: 512 [ 606.482733][ T8461] usb usb3-port1: attempt power cycle 00:37:57 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') 00:37:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(r0, 0x8, 0x80000000) ioctl$TUNATTACHFILTER(r0, 0x400854d5, &(0x7f0000000040)={0x2000000000000333, &(0x7f0000000080)=[{0x7, 0x8, 0xf, 0x1}, {0xbe9d, 0x1, 0x0, 0x1}, {0x3ff, 0xde, 0x6, 0xffff}, {0x9, 0x0, 0xb0, 0x3}, {0xb, 0x71, 0x1, 0x1}, {0x100, 0x8, 0x9, 0x3}]}) [ 606.812728][T16006] nvme_fabrics: unknown parameter or missing value 'ö' in ctrl creation request [ 606.881635][T16007] nvme_fabrics: unknown parameter or missing value 'ö' in ctrl creation request [ 607.099217][ T35] audit: type=1326 audit(1621039078.411:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16008 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 607.234294][ T8461] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 607.345612][ T8461] usb 3-1: Invalid ep0 maxpacket: 512 [ 607.494625][ T8461] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 607.596289][ T8461] usb 3-1: Invalid ep0 maxpacket: 512 [ 607.602222][ T8461] usb usb3-port1: unable to enumerate USB device [ 607.861361][ T35] audit: type=1326 audit(1621039079.181:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16008 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 00:37:59 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:37:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB='\n\x00\x00']) 00:37:59 executing program 4: socketpair(0x0, 0x4b, 0x0, 0x0) 00:37:59 executing program 1: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000500)={0x0, @raw_data="3d468a4951b06a03f4b8848ac818c45e4309f85b229e88b558a39a3e515aa93d76fa65c3b12e8e47a51c9bd776da5c078c08d186de9574b2892342063c6c60b314ce1411713bb0836d671282f6dad0a2d9e0eec6217e94db9ffee7e8de24f1e5ca2c19e443e93765fccf382ea00a0f755666b657d41afbda5771d8a837fee5cbc0d739e0c9cce2adc8c1ed14a8bfa416dc209a83e78de2f38d506138324877cb95d38a5ccc36957584d65e8897cb56d8a851100fe85f65765838a19d5aad785f9f1d53204281d14b"}) 00:37:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x25}, {0x6, 0x1}, {0x3, 0x4, 0x3, 0x3eee3009}]}) 00:37:59 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, &(0x7f0000000840)={0x0, 0x10, 0x95, {0x95, 0xc, "a7d755e6a3478b5c09eb1a0b14a5d8b6f0b23492c36d5303e1eb505bb9d06c5a2edbf055f91b45e490f363b9f11bee2296f2d3f4e50bca08e1452d8d0208ce317e35c3a4adabd3b534c13e90ce4f5a342adfbb1b4a1e2ea58965562872939b35e6a4c22548ca840ae05f44504336d3d627ef9111eefbb4c4ea0eb12213d964fa4fa065e4d300a19aa6de118acf54e0cc5239cc"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f0000000a00)={0x0, 0xf, 0x63, {0x5, 0xf, 0x63, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x4e, 0x10, 0xb, "00cedc79e66d796289138154555f21e2a18bc9e967d7b3a9d0c9f5a60453507a0ea07542d22a2e2e67711bf30f6f6b0d9092f1d8c4d3927ddfc510f38a18af7e3a357ba0232e017f6b04e0"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x4, 0x78, 0x1}]}}, &(0x7f0000000a80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x80, 0x40, 0xc1, '9,Nh', "3475c679"}}, &(0x7f0000000ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x27, 0x9, 0x0, 0x4}}}, &(0x7f0000000fc0)={0x44, &(0x7f0000000b40)={0x20, 0x6, 0xa9, "b50f7a8336ea37b9a485ebd4bd0335d20ca77828d38e5443016e12941c8b87f01fdb4a679e66fe61038b189752f5e394c17c2fd6c668183da9f7080979c4b16387cd95d4900f545c07675f1f680227cf18cbf1360932df946da352d709843c4d3044912d5f590e238c66113e14f472e6bb646c5f097821a2eb58be0f2290dd7f85bfd7f704296efd15cefd2d19cf9689804aafec3abed5609be0dba6a6020e0435c7fee9267e06af0a"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000cc0)={0x20, 0x0, 0x37, {0xe0, 0x0, [0xf0f]}}, &(0x7f0000000d00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000d40)={0x40, 0x9, 0x1, 0xcf}, &(0x7f0000000d80)={0x40, 0xb, 0x2, "abb7"}, &(0x7f0000000dc0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="45a1def934b1"}, &(0x7f0000000e40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000e80)={0x40, 0x19, 0x2, "9965"}, &(0x7f0000000ec0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000f00)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000f40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000f80)={0x40, 0x21, 0x1, 0x4}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x3, 0x99, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x2, 0x1, 0x3, 0xd0, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "81"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x3, 0x8c4, 0xbc}, {0x6, 0x24, 0x1a, 0x9, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x40}, @mbim={0xc, 0x24, 0x1b, 0x800, 0xe151, 0x5, 0x8, 0x99e, 0x5}, @dmm={0x7, 0x24, 0x14, 0x401, 0x9fa}, @mdlm_detail={0x10, 0x24, 0x13, 0x0, "449e9d89bf703a86b69ab949"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0xfa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x0, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xdb, 0xff, 0x3f}}}}}}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x250, 0xff, 0x5, 0xa3, 0xff, 0x1}, 0x7d, &(0x7f0000000940)={0x5, 0xf, 0x7d, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0xf, 0x3, 0xea21}, @generic={0x43, 0x10, 0xa, "426b991dfdf0f2ed92c1be8587570e40fc3666dc59c7b70392c0d86543f6bcc83716f0f7c3e3973755fbdf6568bca172feb64dadbd0e71e6359fbc1f91659005"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x7, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0x80, 0x6, 0x3ff, 0xf000, 0x3, [0xc0, 0xff3f30, 0xff0030, 0x1fec0cf, 0xffffc0, 0xff3f00]}]}, 0x4, [{0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x420}}, {0xd9, &(0x7f0000001180)=@string={0xd9, 0x3, "2bd3c704c3b15f720428a24e9237ae5b224a204020f2760fa050acd23c7b01c01d2ff37c694b7f9ec6bbcf69d9a37e943dfa637e30c0b31a3c6cfca765b960d28f7768b81975294b65fdb8284437c834af163f6e89d1cb056c6cabff919aa72c965508d967448081f7b38c62170531d4fd6ca8a836dedaa2822d3d1975a415e214f9bf84c4aab6f4cff2db476573f7bc0f283814f7272ebf21b2a6e2b4b61bd0b3854eac54a343396d05ba7e74e768fceb19b9c6024bb83fe67d68f4ebd2d85349009790b6be931fd6b0b18f7bcdd656978536557fe585"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x140a}}, {0x77, &(0x7f00000012c0)=@string={0x77, 0x3, "090534edf0d1b491f976f5d767fc88c3be5ec486f70dd478d7dec6d81c5a9905176b3bbbe76e5b3198f8c2e64238605fb4d6a0724354af5b0e8e3a5f6c0bf1c10e596f5d5f1dfe3921907de3e06b6f2ec2b78cd844b81ba8efc6312d501a6688ef4dc19c5ad0182c5fea3a2777e659e686a8b550dc"}}]}) syz_usb_control_io(r2, &(0x7f0000001600)={0x18, &(0x7f0000001380)={0x20, 0x5, 0x85, {0x85, 0x22, "4f03e3558d7a0c9552f77ad81d922e3e06247298b6c1506562fdaeccffe6529e70a08adff31a02c1f058bff375b271631bfe86a8282494ec1345425893ceb570238f6ace0e027a0df6f3031b4418597203b3938d82662b9cce2fa38daf290b13bc7cf7f1fbe30761ae62d894ecb296cb4ef133b2c4f480c17d417c326864abf944b82c"}}, &(0x7f0000001440)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "bde42692d3a1acc4bfaee553a8fe01e1de5d8cbf07b9285c92f7f24ac8d329de19fd5f07dda02c9823ada4cb2737d3687f0fdbdf66db740b915f76e65156732c9167c7b61cc48b19a99a29e7dccdceec88821f445385b67eee3d7cd4c17dea43f372df05548ffb11d6777ae71c08a2b921ea495914c3e12e487b47f46860327898e7f3fa1baf62137521405e574e983c88cf61c657bc59e90d70fe15164bfe4bc8e12d6e801a22bf9b1806433fc5a97929a972351dc0186f1c4443bd715dd4"}}, &(0x7f0000001540)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x9, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "98447766816751ab3951d5f29b07def8"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0x7, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x5, 0x3ff}]}}, &(0x7f0000001580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x20, 0x5, "7dcf589f", "64daa117"}}, &(0x7f00000015c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x3, 0x84, 0x7, 0x81, 0x5, 0x8001}}}, &(0x7f0000001a80)={0x44, &(0x7f0000001640)={0x0, 0x16, 0x70, "602a5569016df78abc9d69723c3dd6b5a6607452f487f256505a39ad9b34059f233fc3bdc6fe3f5b3a0a10d701d9d4a12c6630b2873a16a2c9c850324f1f85522dba261f90ffd15ec31123654525d9fe48cda0d67b7e34266ed4e7628a26ff78ae7f81d1ebc78fa878daca05173271fd"}, &(0x7f00000016c0)={0x0, 0xa, 0x1, 0xed}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0x5b}, &(0x7f0000001740)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001780)={0x20, 0x0, 0x8, {0x400, 0x8, [0xf0f]}}, &(0x7f00000017c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001800)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001840)={0x40, 0xb, 0x2, "a0d0"}, &(0x7f0000001880)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000018c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001900)={0x40, 0x17, 0x6, @random="07f7260fd3e5"}, &(0x7f0000001940)={0x40, 0x19, 0x2, "d849"}, &(0x7f0000001980)={0x40, 0x1a, 0x2}, &(0x7f00000019c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001a00)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001a40)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f00000002c0)={0x18, &(0x7f0000000040)={0x40, 0x6, 0x82, {0x82, 0x8, "b9c75de336d764c4da2a328163cca7a3d8c46f32d58552913a87b15bf64a5e95b57e12387f5ad1e23c4b1f98c7c74973be092bda37bf444091490a8bc3035eeea410f33ee6c673051b7d86449a816398ddcad077b682ce5c54cf4293439383669d1270518a5e8ed77ef0f4fedbefee1bc4d95ed4db62c63e81f4fb1accbc72b6"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, &(0x7f0000001040)={0x0, 0xf, 0xc7, {0x5, 0xf, 0xc7, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x8, 0x7, 0x8, 0x81}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x17a, 0x0, 0x100, [0xffc00f, 0xc000, 0x3f30, 0xff0000]}, @generic={0x41, 0x10, 0x1, "eb21b17d5bc82a608838d9e8a0efa79627ba6ccb75e658f85463200952488597bb174fec47cf896ca3f1ed2a586ab335e4e8ca96361d13d9509120fc68f7"}, @generic={0x57, 0x10, 0x4, "e295e4d9d05c3ba6771f4924108b363734ad166adbff069b22c047fc7e7e66f70eff159066f54dce75a751f45882eba87915cc50ec564016b91832f199398ec94b97f72ae7c1cbfe736d7b994095fd364df5cca7"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe6, 0x4, 0x8, 0x8, "4bce9ce6", "0be08ed4"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe0, 0x1, 0x65, 0xc0, 0x81, 0x5, 0x5}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000300)={0x0, 0xb, 0xd7, "d0c05dcc38f9c5f33d5217b039fdffd16839ceacc64c76a8ae2e8d7f382f4a3082e249b140ad3d62bb19dc9cdbf09c57c6dda1d7f0a99099d51bb04d85bf49e84a9d752c02dfaebd9c94076412d6c81fe00666fe1926f0f746e8ef2804f5c99fdd5e0841f9a6a2176c592b9d4d6939f6ee7c35952a428fb2eb92c24471252ddda1ba3845c4da44d67955411f804fd974f99731475ada4e9a1ee227def172af6391864fb8a002caf2c90c240ceb963b34c40dfe9e281084b511e7609204a21132a4ace156fa390ffeee85312bf255eab907e4ac66b786e8"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xd7}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x80, 0x20}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000580)={0x40, 0xb, 0x2, 'L\a'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000600)={0x40, 0x13, 0x6, @random="bc96b2a5f349"}, &(0x7f0000000140)={0x40, 0x17, 0x6, @local}, &(0x7f0000000680)={0x40, 0x19, 0x2, "b61c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x6997}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0xff}}) 00:37:59 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:38:00 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@local, @random="1e6fd991c2b1", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "d2196c", 0x44, 0x33, 0x0, @loopback={0x3}, @local}}}}, 0x0) 00:38:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB='\n\x00\x00']) 00:38:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 609.034471][ T8461] usb 3-1: new high-speed USB device number 54 using dummy_hcd 00:38:00 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x5}]}) [ 609.596279][ T8461] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 609.606100][ T8461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.615089][ T8461] usb 3-1: Product: syz [ 609.619865][ T8461] usb 3-1: Manufacturer: syz [ 609.627501][ T8461] usb 3-1: SerialNumber: syz 00:38:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00\x00']) 00:38:01 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:38:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) [ 609.814887][ T8461] usb 3-1: config 0 descriptor?? [ 609.858636][ T8461] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 610.032150][ T35] audit: type=1326 audit(1621039081.351:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16060 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f8b549 code=0x0 00:38:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) 00:38:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00\x00']) [ 610.429628][T16072] udc-core: couldn't find an available UDC or it's busy [ 610.438826][T16072] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:38:01 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000ac0), 0x20a100, 0x0) [ 610.558360][T16072] udc-core: couldn't find an available UDC or it's busy [ 610.566979][T16072] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:38:03 executing program 4: pselect6(0x40, &(0x7f0000000480), 0x0, &(0x7f0000000500)={0x4}, &(0x7f0000000540)={0x0, 0x3938700}, 0x0) 00:38:03 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001040000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:38:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 00:38:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00\x00']) [ 611.719512][ T8460] usb 3-1: USB disconnect, device number 54 [ 611.727145][ T8460] keyspan 3-1:0.0: device disconnected 00:38:03 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000140)=r1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x0, r0, 0x68123cf1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6, 0x9, 0x40, 0x6}, {0x4, 0x1, 0x2, 0x7}, {0x8a23, 0x0, 0x2, 0x8}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x5, &(0x7f0000000180)=[{0x40, 0x9, 0x0, 0x2}, {0x40, 0x20, 0x40, 0x1}, {0x20, 0x0, 0x80, 0x40}, {0x9, 0x2, 0x45, 0x98}, {0x6, 0x4, 0x5, 0x8}]}) 00:38:03 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe1, 0x86, 0xf2, 0x40, 0x6cd, 0x113, 0x144b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x10, 0x40}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c4e0708560832acdb8b000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001400)={0x14, &(0x7f0000001200)={0x0, 0x2, 0x80, {0x80, 0x31, "410f3beabf3ed29fd1d1008338f5e808b5f47ccddb0ad3bfce550782bfbd3e1fc5c908713ceeed831af627c5aeb433a8936590fb6a94e774b17b071c994f11f928f7fafc5f58d429443977a7c36f352697457c637936e1a2c9bbc6f50524a84c870dfc1fd12d6dc659dc8ed2e2755abcb3d0dbd7ce69b28c7ccd91cc6e38"}}, &(0x7f00000012c0)={0x0, 0x3, 0x7e, @string={0x7e, 0x3, "352d0d02091ea36259f294d52ca3e6d3f94d01184d583514bec654db4e075cd6a751f7484e009720486171e6c85d2d57d14f306d7a4821b714f60556a09759a5a1f82af279ca33cbed900e8220819866ce406ff08e12cd1d9823643bc68bacc1b6fe30add747b92e57df0ea4808141b4d4a7920069ba3519a57109a7"}}, &(0x7f0000001380)={0x0, 0x22, 0x3, {[@global=@item_012={0x0, 0x1, 0x3}, @global=@item_012={0x1, 0x1, 0x0, "d0"}]}}, &(0x7f00000013c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0x4fc}}}}, &(0x7f0000001600)={0x18, &(0x7f0000001440)={0x0, 0x0, 0x7, "e6171e483f1040"}, &(0x7f0000001480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000014c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001500)={0x20, 0x1, 0x9f, "1a6bd66dbabff4c8fb75d90fa68c172ced06da8e4bb595b41bca53db187cc3864bb2a247bcbe5552e62e7f4c16a00e6a194edf9f0e31ff822959ba3e45bf6f8e9b5f5e2ac6a8c62cb9392e5466737e7cd042b8c84d3c1ceffa1ff768d2b66d2e90e29b146de40cbdfe0a772998a61fa7c72ad84cf93b8c804ce5d2bc1e13ac4b3b7a4d1901f297bbd7a71e048f52fe422cdf3d92e762efd565ad326c7f86e8"}, &(0x7f00000015c0)={0x20, 0x3, 0x1}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0xa0, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x2, 0x1, 0xf6, 0x20, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'M'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xeb31, 0x4, 0x8}, {0x6, 0x24, 0x1a, 0xc0b, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x20}, @mbim={0xc, 0x24, 0x1b, 0xffff, 0x0, 0x4, 0x5, 0xb7e7, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x8}, @acm={0x4, 0x24, 0x2, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x20, 0x4, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7f, 0x0, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xe0, 0xfa, 0x1}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x300, 0xb9, 0x3, 0xd, 0xff, 0x1}, 0x47, &(0x7f00000007c0)={0x5, 0xf, 0x47, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x6, 0x5, 0x3, 0x2, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x63, 0x4, 0x8001, 0xc0}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "ef0777e3955464595d6299797cb1dc58"}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x6, 0xf00f, 0x20, [0x0, 0xc000, 0xf]}]}, 0x5, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x448}}, {0xc1, &(0x7f00000008c0)=@string={0xc1, 0x3, "3c116e8b819dcc7fdd95619ca19f56392815210518940dbbfc9542f17c62735201ec05faa2c0bb387c81e5d812f891a59f918ded255f21d9eaeea00eea13e672b7b1525d73326dde0e575fa4f08f9dc401fd1e5119c54e38a877234b87d621e64153767fa7fbede9c19fd8662e4dc11193fbada389d56ba085d985020a33bb63ea43177308eae6123fe669d0ce659f3d2b30f7bac81a53d57cf70ae63d4c47002ac69109535b817efd3323975f7d681f5fb4da7c4cd4823db68304c0e89501"}}, {0x6e, &(0x7f0000000a00)=@string={0x6e, 0x3, "7413095218448e3c49c4152b62bcdbd854dad238d23c8eda64cf65f071670b6003ab85618178a2805da315e0057bae68f4158ece4a7c3694bbeffd97e3c325767eba74a54417efd9c463f038a0a68ffabfcac1bef9124ca59a46537b181ffa7c47dc5b16ee4edf1dc875e437"}}, {0x40, &(0x7f0000000a80)=@string={0x40, 0x3, "3a5dc2e2c99bada4841924a3b8161c448746ac23f6b25258973f1c0681769f42368ffad17ff10059bc1c0ed741d25239708389a53d5896f509dfa66f700c"}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x18, &(0x7f0000000bc0)={0x0, 0x23, 0xb0, {0xb0, 0x16, "ed4347b3cff4f9c7a29d787e7aa483820b11624b17be46cc3c9544ac5091783bd50d56473f7f02d3d36b9dc725bf39a79343e6fdb723ece321da36710ed812456db9757febf7a833c775cf978c267afdd56b46dd4ba040eb34d38a8696f3f4fc2affd38d92343a3b1935a134cbd70c7b1d96d8d66b3e0c9e8452fb3c21880ff73725829c4331b325cb81061eea3fae056a6ff8aa5db1fa2c9b6791a56abe623fa2703061ff92c776eeb07587ef24"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc4f7}}, &(0x7f0000000b40)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x1f, 0x2, 0xe67, 0x15}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x5, 0x1, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0xfe, 0x6, 0xe4, 0x9}]}}, &(0x7f0000000c80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x0, 0x40, 0x4, "ad6dcdc3", "4b6aaf94"}}, &(0x7f0000000cc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x4, 0x1, 0x80, 0xe9, 0x0, 0x8}}}, &(0x7f0000001180)={0x44, &(0x7f0000000d40)={0x0, 0x15, 0x79, "2733f724f2b2a25b79e97cb018ab8fb8d419dd9654d30ed244e5a3bb959c194a4f6910d98cf5c8502d3de1f73e19813d3cab8785c2805f1d0dce9c066d6ae7a024e8d2e25d35dc57f42b23efe33a3e506ecd399a24ebe32a5b24f35381ffbc1f2c789442df5926456823bc70ccc2feceaf7edcd8b5d9f32b0e"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x84}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000e80)={0x20, 0x0, 0x8, {0x800, 0x20, [0xf0f]}}, &(0x7f0000000ec0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000f00)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000f40)={0x40, 0xb, 0x2, "81ae"}, &(0x7f0000000f80)={0x40, 0xf, 0x2, 0x100}, &(0x7f0000000fc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001000)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001040)={0x40, 0x19, 0x2, 'l('}, &(0x7f0000001080)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000010c0)={0x40, 0x1c, 0x1}, &(0x7f0000001100)={0x40, 0x1e, 0x1, 0x5a}, &(0x7f0000001140)={0x40, 0x21, 0x1, 0x80}}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000200)={0x18, &(0x7f0000000000)={0x40, 0xb, 0x8a, {0x8a, 0x21, "0b37feddf4d9d189252c4dcd57d07935fb507365af0719aa6136cf6aab58e9ee20874a0af48db343bfd041cbe829785842c1220c604ec1b78560b56bcbbb30087ac3059e52ca52abdf2e6a543d7edccb705e13e2f399b724f701fd4fb1873ced6ebba84049cb13b888cc8024da3ba53e4699d17a1bd980bd3b6dfb5d3bf8dbf3bf4096db0851b609"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x1, 0x7, 0x5, "2f4b44c2", "0dd93328"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa7, 0x0, 0x5, 0x9, 0x4, 0x6f, 0x9}}}, &(0x7f0000000640)={0x44, &(0x7f0000000240)={0x20, 0x14, 0x20, "346dfb197f306a8210dbdac0bc50e7bc80076e2b08fea16d9ba40ec5445f2664"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x1000, 0x40, [0xf00]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x79b}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000400)={0x40, 0xb, 0x2, "967c"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0xf}, &(0x7f0000000480)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000500)={0x40, 0x19, 0x2, "f056"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x97}, &(0x7f00000005c0)={0x40, 0x1e, 0x1}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x8}}) [ 611.971046][ T35] audit: type=1326 audit(1621039083.291:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16092 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 611.978385][T16097] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:38:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00\x00\x00\x00']) 00:38:03 executing program 1: r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x1000880) inotify_rm_watch(r0, r1) 00:38:03 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001040000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:38:03 executing program 4: socketpair(0x6, 0x0, 0x0, &(0x7f0000000040)) [ 612.684413][ T18] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 612.771062][ T35] audit: type=1326 audit(1621039084.091:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16092 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 612.787363][T16122] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:38:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00\x00\x00\x00']) 00:38:04 executing program 1: sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 613.213872][ T18] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=14.4b [ 613.223799][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.232458][ T18] usb 3-1: Product: syz [ 613.237031][ T18] usb 3-1: Manufacturer: syz [ 613.242679][ T18] usb 3-1: SerialNumber: syz 00:38:04 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001040000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:38:04 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) [ 613.469097][ T18] usb 3-1: config 0 descriptor?? [ 613.527398][ T18] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 613.729596][T16109] udc-core: couldn't find an available UDC or it's busy [ 613.737067][T16109] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 613.817626][T16109] udc-core: couldn't find an available UDC or it's busy [ 613.826984][T16109] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:38:05 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) 00:38:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002540)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00\x00\x00\x00']) [ 614.008184][T16140] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:38:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000000c0), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 00:38:06 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x356, 0x78, 0xf00, 0x480, 0x8, 0x0, 0x1, 0x0, {0x1, 0x101, 0x1}, {0x9, 0xfffffffa, 0x1}, {0x1, 0x5, 0x1}, {0x1, 0xc}, 0x3, 0x80, 0xbed7, 0x7, 0x1, 0x3, 0xfffffffd, 0x2, 0x2, 0x1d64, 0x3, 0x7fffffff, 0x19, 0x2, 0x4, 0x1}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e186f240cd0613014b140102030109021200010000000009040000001a104000c1aa8a88c639c7080c19883a80acf947d353319d55"], 0x0) 00:38:06 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 00:38:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) 00:38:06 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@id, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='Z', 0x1}], 0x1}, 0x40) 00:38:06 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/985], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="000e003f0000087e5bc5795e6558", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:38:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x4, 0x1, 0x7f, 0x7}, {0x40, 0x40, 0x3, 0x1}, {0x9, 0x1, 0x1, 0x7fff}, {0x1, 0x4, 0x0, 0xffffffff}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x25}, {0x6}]}) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/105, 0x69}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f00000003c0)=""/254, 0xfe}, {&(0x7f0000000180)=""/2, 0x2}, {&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f0000000580)=""/69, 0x45}, {&(0x7f0000000600)=""/68, 0x44}, {&(0x7f0000000680)}], 0x9, 0x3, 0x9) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x4, 0x9, 0x2, 0x7fff}, {0x9, 0x6, 0x7f, 0x5}, {0x9, 0x80, 0x60, 0x9}, {0x4a28, 0x0, 0x2, 0x8}, {0x9, 0x5, 0x0, 0x6}, {0x8, 0x64, 0x46, 0x7}, {0x1ff, 0xdc, 0xa7, 0x16}, {0x2ed, 0x9, 0x3, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000140)=r2) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000680)={r2, 0x5, 0x2}) [ 615.386764][ T2056] usb 3-1: USB disconnect, device number 55 [ 615.393609][ T2056] keyspan 3-1:0.0: device disconnected [ 615.560641][T16167] ===================================================== [ 615.567835][T16167] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 615.574839][T16167] CPU: 1 PID: 16167 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 615.584103][T16167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.594286][T16167] Call Trace: [ 615.598215][T16167] dump_stack+0x24c/0x2e0 [ 615.602605][T16167] kmsan_report+0xfb/0x1e0 [ 615.607091][T16167] __msan_warning+0x5c/0xa0 [ 615.611645][T16167] erspan_xmit+0x21b9/0x3ea0 [ 615.616310][T16167] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 615.622693][T16167] ? validate_xmit_xfrm+0xd5/0x1b90 [ 615.627954][T16167] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 615.633823][T16167] ? erspan_tunnel_init+0x470/0x470 [ 615.639168][T16167] xmit_one+0x2b6/0x760 [ 615.643992][T16167] dev_hard_start_xmit+0x196/0x420 [ 615.649177][T16167] sch_direct_xmit+0x57c/0x1a60 [ 615.654109][T16167] __qdisc_run+0x35b/0x490 [ 615.658864][T16167] __dev_queue_xmit+0x26ad/0x4600 [ 615.663961][T16167] dev_queue_xmit+0x4b/0x60 [ 615.668544][T16167] __bpf_redirect+0x1461/0x16b0 [ 615.673624][T16167] ? kmsan_get_metadata+0x116/0x180 [ 615.679056][T16167] bpf_clone_redirect+0x4a1/0x660 [ 615.684345][T16167] ___bpf_prog_run+0x2b78/0xb950 [ 615.689543][T16167] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 615.695687][T16167] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 615.702078][T16167] ? bpf_csum_level+0x760/0x760 [ 615.707072][T16167] __bpf_prog_run512+0x12e/0x190 [ 615.712053][T16167] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 615.720022][T16167] ? kmsan_get_metadata+0x116/0x180 [ 615.725809][T16167] ? kmsan_internal_set_origin+0x85/0xc0 [ 615.731518][T16167] ? __msan_get_context_state+0x9/0x20 [ 615.737399][T16167] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 615.743278][T16167] ? __msan_get_context_state+0x9/0x20 [ 615.748792][T16167] ? irqentry_exit+0x12/0x50 [ 615.753446][T16167] ? sysvec_apic_timer_interrupt+0x86/0xf0 [ 615.759333][T16167] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 615.765637][T16167] ? kmsan_get_metadata+0x116/0x180 [ 615.773172][T16167] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 615.780149][T16167] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 615.786296][T16167] ? ktime_get+0x390/0x470 [ 615.791124][T16167] ? kmsan_get_metadata+0x4f/0x180 [ 615.796741][T16167] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 615.802806][T16167] ? __bpf_prog_run480+0x190/0x190 [ 615.808503][T16167] bpf_test_run+0x53f/0xe60 [ 615.813178][T16167] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 615.819258][T16167] bpf_prog_test_run_skb+0x1914/0x3500 [ 615.824938][T16167] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 615.830901][T16167] __do_sys_bpf+0xbe6f/0x1aba0 [ 615.836110][T16167] ? __msan_get_context_state+0x9/0x20 [ 615.841714][T16167] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 615.847846][T16167] ? kmsan_get_metadata+0x116/0x180 [ 615.853242][T16167] ? kmsan_get_metadata+0x116/0x180 [ 615.859977][T16167] ? kmsan_get_metadata+0x116/0x180 [ 615.865681][T16167] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 615.871788][T16167] ? kmsan_get_metadata+0x116/0x180 [ 615.877192][T16167] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 615.883067][T16167] ? kmsan_internal_set_origin+0x85/0xc0 [ 615.889902][T16167] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 615.896321][T16167] ? __msan_instrument_asm_store+0x107/0x130 [ 615.902457][T16167] ? kmsan_get_metadata+0x116/0x180 [ 615.907953][T16167] ? kmsan_get_metadata+0x116/0x180 [ 615.913222][T16167] __se_sys_bpf+0x8e/0xa0 [ 615.917629][T16167] __ia32_sys_bpf+0x4a/0x70 [ 615.922284][T16167] __do_fast_syscall_32+0x127/0x180 [ 615.927753][T16167] do_fast_syscall_32+0x6a/0xc0 [ 615.937483][T16167] do_SYSENTER_32+0x73/0x90 [ 615.942359][T16167] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 615.951013][T16167] RIP: 0023:0xf7f8b549 [ 615.955498][T16167] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 615.979145][T16167] RSP: 002b:00000000f55855fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 615.987614][T16167] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 615.995714][T16167] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 616.003834][T16167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 616.011865][T16167] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 616.020059][T16167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 616.028240][T16167] [ 616.030611][T16167] Uninit was created at: [ 616.034886][T16167] kmsan_internal_poison_shadow+0x5c/0xf0 [ 616.040705][T16167] kmsan_slab_alloc+0x8e/0xe0 [ 616.045499][T16167] __kmalloc_node_track_caller+0xa4f/0x1470 [ 616.051510][T16167] pskb_expand_head+0x25e/0x1e20 [ 616.056555][T16167] erspan_xmit+0xa04/0x3ea0 [ 616.062195][T16167] xmit_one+0x2b6/0x760 [ 616.066425][T16167] dev_hard_start_xmit+0x196/0x420 [ 616.073346][T16167] sch_direct_xmit+0x57c/0x1a60 [ 616.078703][T16167] __qdisc_run+0x35b/0x490 [ 616.083631][T16167] __dev_queue_xmit+0x26ad/0x4600 [ 616.088798][T16167] dev_queue_xmit+0x4b/0x60 [ 616.093355][T16167] __bpf_redirect+0x1461/0x16b0 [ 616.098690][T16167] bpf_clone_redirect+0x4a1/0x660 [ 616.103802][T16167] ___bpf_prog_run+0x2b78/0xb950 [ 616.108784][T16167] __bpf_prog_run512+0x12e/0x190 [ 616.113778][T16167] bpf_test_run+0x53f/0xe60 [ 616.118336][T16167] bpf_prog_test_run_skb+0x1914/0x3500 [ 616.124337][T16167] __do_sys_bpf+0xbe6f/0x1aba0 [ 616.129240][T16167] __se_sys_bpf+0x8e/0xa0 [ 616.133635][T16167] __ia32_sys_bpf+0x4a/0x70 [ 616.138180][T16167] __do_fast_syscall_32+0x127/0x180 [ 616.143426][T16167] do_fast_syscall_32+0x6a/0xc0 [ 616.148407][T16167] do_SYSENTER_32+0x73/0x90 [ 616.152985][T16167] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.159534][T16167] ===================================================== [ 616.166507][T16167] Disabling lock debugging due to kernel taint [ 616.270743][ T35] audit: type=1326 audit(1621039087.591:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16169 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ffa549 code=0x0 [ 616.351829][T16171] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 616.393027][T16175] ===================================================== [ 616.400026][T16175] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 616.407131][T16175] CPU: 0 PID: 16175 Comm: syz-executor.4 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 616.417428][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.427932][T16175] Call Trace: [ 616.431260][T16175] dump_stack+0x24c/0x2e0 [ 616.436107][T16175] kmsan_report+0xfb/0x1e0 [ 616.440766][T16175] __msan_warning+0x5c/0xa0 [ 616.445320][T16175] erspan_xmit+0x21b9/0x3ea0 [ 616.449969][T16175] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 616.456112][T16175] ? validate_xmit_xfrm+0xd5/0x1b90 [ 616.465613][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 616.471489][T16175] ? erspan_tunnel_init+0x470/0x470 [ 616.476768][T16175] xmit_one+0x2b6/0x760 [ 616.480992][T16175] dev_hard_start_xmit+0x196/0x420 [ 616.486302][T16175] sch_direct_xmit+0x57c/0x1a60 [ 616.492363][T16175] __qdisc_run+0x35b/0x490 [ 616.497108][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 616.502199][T16175] dev_queue_xmit+0x4b/0x60 [ 616.506779][T16175] __bpf_redirect+0x1461/0x16b0 [ 616.512054][T16175] ? kmsan_get_metadata+0x116/0x180 [ 616.517310][T16175] bpf_clone_redirect+0x4a1/0x660 [ 616.522408][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 616.527522][T16175] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 616.533427][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 616.539991][T16175] ? bpf_csum_level+0x760/0x760 [ 616.544919][T16175] __bpf_prog_run512+0x12e/0x190 [ 616.554961][T16175] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 616.562404][T16175] ? kmsan_get_metadata+0x116/0x180 [ 616.567950][T16175] ? kmsan_get_metadata+0x116/0x180 [ 616.573690][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 616.579589][T16175] ? __msan_get_context_state+0x9/0x20 [ 616.585356][T16175] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 616.591225][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 616.600474][T16175] ? should_fail+0x72/0x9e0 [ 616.605056][T16175] ? psi_task_change+0x330/0x7e0 [ 616.610167][T16175] ? kmsan_get_metadata+0x116/0x180 [ 616.615513][T16175] ? kmsan_get_metadata+0x116/0x180 [ 616.620774][T16175] ? kmsan_get_metadata+0x116/0x180 [ 616.626033][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 616.632026][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 616.638149][T16175] ? ktime_get+0x390/0x470 [ 616.642629][T16175] ? kmsan_get_metadata+0x4f/0x180 [ 616.648001][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 616.653998][T16175] ? __bpf_prog_run480+0x190/0x190 [ 616.659593][T16175] bpf_test_run+0x53f/0xe60 [ 616.664297][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 616.670799][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 616.678265][T16175] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 616.684309][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 616.689123][T16175] ? __msan_get_context_state+0x9/0x20 [ 616.694662][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 616.700782][T16175] ? kmsan_get_metadata+0x116/0x180 [ 616.706392][T16175] ? kmsan_get_metadata+0x116/0x180 [ 616.711640][T16175] ? kmsan_get_metadata+0x116/0x180 [ 616.717055][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 616.722908][T16175] ? kmsan_get_metadata+0x116/0x180 [ 616.728165][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 616.734044][T16175] ? kmsan_internal_set_origin+0x85/0xc0 [ 616.739932][T16175] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 616.746060][T16175] ? __msan_instrument_asm_store+0x107/0x130 [ 616.752089][T16175] ? kmsan_get_metadata+0x116/0x180 [ 616.757360][T16175] ? kmsan_get_metadata+0x116/0x180 [ 616.762623][T16175] __se_sys_bpf+0x8e/0xa0 [ 616.766998][T16175] __ia32_sys_bpf+0x4a/0x70 [ 616.771565][T16175] __do_fast_syscall_32+0x127/0x180 [ 616.777843][T16175] do_fast_syscall_32+0x6a/0xc0 [ 616.783323][T16175] do_SYSENTER_32+0x73/0x90 [ 616.788259][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.794919][T16175] RIP: 0023:0xf7f8b549 [ 616.799571][T16175] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 616.819308][T16175] RSP: 002b:00000000f55435fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 616.827864][T16175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 616.836003][T16175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 616.844096][T16175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 616.852103][T16175] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 616.860146][T16175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 616.868194][T16175] [ 616.870540][T16175] Uninit was created at: [ 616.874814][T16175] kmsan_internal_poison_shadow+0x5c/0xf0 [ 616.880721][T16175] kmsan_slab_alloc+0x8e/0xe0 [ 616.885441][T16175] __kmalloc_node_track_caller+0xa4f/0x1470 [ 616.891494][T16175] pskb_expand_head+0x25e/0x1e20 [ 616.896479][T16175] erspan_xmit+0xa04/0x3ea0 [ 616.901026][T16175] xmit_one+0x2b6/0x760 [ 616.905311][T16175] dev_hard_start_xmit+0x196/0x420 [ 616.910752][T16175] sch_direct_xmit+0x57c/0x1a60 [ 616.915736][T16175] __qdisc_run+0x35b/0x490 [ 616.920285][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 616.925613][T16175] dev_queue_xmit+0x4b/0x60 [ 616.930194][T16175] __bpf_redirect+0x1461/0x16b0 [ 616.935286][T16175] bpf_clone_redirect+0x4a1/0x660 [ 616.940345][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 616.947315][T16175] __bpf_prog_run512+0x12e/0x190 [ 616.952292][T16175] bpf_test_run+0x53f/0xe60 [ 616.956840][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 616.962360][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 616.967199][T16175] __se_sys_bpf+0x8e/0xa0 [ 616.971566][T16175] __ia32_sys_bpf+0x4a/0x70 [ 616.977354][T16175] __do_fast_syscall_32+0x127/0x180 [ 616.982605][T16175] do_fast_syscall_32+0x6a/0xc0 [ 616.987505][T16175] do_SYSENTER_32+0x73/0x90 [ 616.992055][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.998457][T16175] ===================================================== [ 617.006136][T16175] ===================================================== [ 617.013098][T16175] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 617.020076][T16175] CPU: 0 PID: 16175 Comm: syz-executor.4 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 617.030372][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.040496][T16175] Call Trace: [ 617.043821][T16175] dump_stack+0x24c/0x2e0 [ 617.048390][T16175] kmsan_report+0xfb/0x1e0 [ 617.052884][T16175] __msan_warning+0x5c/0xa0 [ 617.057438][T16175] erspan_xmit+0x21b9/0x3ea0 [ 617.062251][T16175] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 617.068387][T16175] ? validate_xmit_xfrm+0xd5/0x1b90 [ 617.073633][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 617.079512][T16175] ? erspan_tunnel_init+0x470/0x470 [ 617.084755][T16175] xmit_one+0x2b6/0x760 [ 617.088956][T16175] dev_hard_start_xmit+0x196/0x420 [ 617.094119][T16175] sch_direct_xmit+0x57c/0x1a60 [ 617.099037][T16175] __qdisc_run+0x35b/0x490 [ 617.103513][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 617.108589][T16175] dev_queue_xmit+0x4b/0x60 [ 617.113152][T16175] __bpf_redirect+0x1461/0x16b0 [ 617.118320][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.123758][T16175] bpf_clone_redirect+0x4a1/0x660 [ 617.128840][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 617.134276][T16175] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 617.140124][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 617.146252][T16175] ? bpf_csum_level+0x760/0x760 [ 617.151170][T16175] __bpf_prog_run512+0x12e/0x190 [ 617.156170][T16175] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 617.163601][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.168961][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.174203][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 617.180063][T16175] ? __msan_get_context_state+0x9/0x20 [ 617.185584][T16175] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 617.191441][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 617.197564][T16175] ? should_fail+0x72/0x9e0 [ 617.202152][T16175] ? psi_task_change+0x330/0x7e0 [ 617.209774][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.215026][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.220583][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.225865][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 617.231820][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 617.238303][T16175] ? ktime_get+0x390/0x470 [ 617.242770][T16175] ? kmsan_get_metadata+0x4f/0x180 [ 617.247918][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 617.253788][T16175] ? __bpf_prog_run480+0x190/0x190 [ 617.258937][T16175] bpf_test_run+0x53f/0xe60 [ 617.263665][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 617.269772][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 617.275391][T16175] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 617.281338][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 617.287913][T16175] ? __msan_get_context_state+0x9/0x20 [ 617.293617][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 617.299745][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.304985][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.310768][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.316040][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 617.321890][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.327146][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 617.333021][T16175] ? kmsan_internal_set_origin+0x85/0xc0 [ 617.338714][T16175] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 617.344866][T16175] ? __msan_instrument_asm_store+0x107/0x130 [ 617.350910][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.356285][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.361564][T16175] __se_sys_bpf+0x8e/0xa0 [ 617.365946][T16175] __ia32_sys_bpf+0x4a/0x70 [ 617.370500][T16175] __do_fast_syscall_32+0x127/0x180 [ 617.376821][T16175] do_fast_syscall_32+0x6a/0xc0 [ 617.381917][T16175] do_SYSENTER_32+0x73/0x90 [ 617.386486][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 617.393075][T16175] RIP: 0023:0xf7f8b549 [ 617.398515][T16175] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 617.424749][T16175] RSP: 002b:00000000f55435fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 617.433222][T16175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 617.441257][T16175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 617.449419][T16175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 617.457628][T16175] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 617.465725][T16175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 617.473765][T16175] [ 617.476201][T16175] Uninit was created at: [ 617.480452][T16175] kmsan_internal_poison_shadow+0x5c/0xf0 [ 617.486376][T16175] kmsan_slab_alloc+0x8e/0xe0 [ 617.491291][T16175] __kmalloc_node_track_caller+0xa4f/0x1470 [ 617.497246][T16175] pskb_expand_head+0x25e/0x1e20 [ 617.502259][T16175] erspan_xmit+0xa04/0x3ea0 [ 617.506902][T16175] xmit_one+0x2b6/0x760 [ 617.511097][T16175] dev_hard_start_xmit+0x196/0x420 [ 617.518253][T16175] sch_direct_xmit+0x57c/0x1a60 [ 617.523715][T16175] __qdisc_run+0x35b/0x490 [ 617.528536][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 617.533606][T16175] dev_queue_xmit+0x4b/0x60 [ 617.538647][T16175] __bpf_redirect+0x1461/0x16b0 [ 617.544006][T16175] bpf_clone_redirect+0x4a1/0x660 [ 617.549971][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 617.561312][T16175] __bpf_prog_run512+0x12e/0x190 [ 617.566666][T16175] bpf_test_run+0x53f/0xe60 [ 617.571219][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 617.579067][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 617.584797][T16175] __se_sys_bpf+0x8e/0xa0 [ 617.589177][T16175] __ia32_sys_bpf+0x4a/0x70 [ 617.594065][T16175] __do_fast_syscall_32+0x127/0x180 [ 617.599324][T16175] do_fast_syscall_32+0x6a/0xc0 [ 617.604233][T16175] do_SYSENTER_32+0x73/0x90 [ 617.608781][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 617.615352][T16175] ===================================================== [ 617.622734][T16175] ===================================================== [ 617.629705][T16175] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 617.637133][T16175] CPU: 0 PID: 16175 Comm: syz-executor.4 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 617.647323][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.657416][T16175] Call Trace: [ 617.660727][T16175] dump_stack+0x24c/0x2e0 [ 617.665184][T16175] kmsan_report+0xfb/0x1e0 [ 617.669640][T16175] __msan_warning+0x5c/0xa0 [ 617.674878][T16175] erspan_xmit+0x21b9/0x3ea0 [ 617.679534][T16175] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 617.685763][T16175] ? validate_xmit_xfrm+0xd5/0x1b90 [ 617.691014][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 617.696984][T16175] ? erspan_tunnel_init+0x470/0x470 [ 617.702232][T16175] xmit_one+0x2b6/0x760 [ 617.706462][T16175] dev_hard_start_xmit+0x196/0x420 [ 617.711624][T16175] sch_direct_xmit+0x57c/0x1a60 [ 617.716621][T16175] __qdisc_run+0x35b/0x490 [ 617.721092][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 617.726163][T16175] dev_queue_xmit+0x4b/0x60 [ 617.730732][T16175] __bpf_redirect+0x1461/0x16b0 [ 617.735807][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.741052][T16175] bpf_clone_redirect+0x4a1/0x660 [ 617.746125][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 617.751089][T16175] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 617.756959][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 617.763065][T16175] ? bpf_csum_level+0x760/0x760 [ 617.768855][T16175] __bpf_prog_run512+0x12e/0x190 [ 617.774092][T16175] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 617.782171][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.787443][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.792689][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 617.798551][T16175] ? __msan_get_context_state+0x9/0x20 [ 617.804359][T16175] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 617.810227][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 617.816528][T16175] ? should_fail+0x72/0x9e0 [ 617.821078][T16175] ? psi_task_change+0x330/0x7e0 [ 617.826088][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.831446][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.836883][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.842331][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 617.848207][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 617.854355][T16175] ? ktime_get+0x390/0x470 [ 617.859225][T16175] ? kmsan_get_metadata+0x4f/0x180 [ 617.864837][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 617.870777][T16175] ? __bpf_prog_run480+0x190/0x190 [ 617.876388][T16175] bpf_test_run+0x53f/0xe60 [ 617.881170][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 617.887182][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 617.894000][T16175] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 617.899955][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 617.904784][T16175] ? __msan_get_context_state+0x9/0x20 [ 617.910287][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 617.916489][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.922049][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.927560][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.932827][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 617.938693][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.944022][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 617.949876][T16175] ? kmsan_internal_set_origin+0x85/0xc0 [ 617.955549][T16175] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 617.961737][T16175] ? __msan_instrument_asm_store+0x107/0x130 [ 617.967762][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.973009][T16175] ? kmsan_get_metadata+0x116/0x180 [ 617.978274][T16175] __se_sys_bpf+0x8e/0xa0 [ 617.982648][T16175] __ia32_sys_bpf+0x4a/0x70 [ 617.987193][T16175] __do_fast_syscall_32+0x127/0x180 [ 617.992431][T16175] do_fast_syscall_32+0x6a/0xc0 [ 617.997325][T16175] do_SYSENTER_32+0x73/0x90 [ 618.001867][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 618.008353][T16175] RIP: 0023:0xf7f8b549 [ 618.012906][T16175] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 618.032590][T16175] RSP: 002b:00000000f55435fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 618.041048][T16175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 618.049086][T16175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.057652][T16175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.065661][T16175] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 618.073686][T16175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.081810][T16175] [ 618.084170][T16175] Uninit was created at: [ 618.088413][T16175] kmsan_internal_poison_shadow+0x5c/0xf0 [ 618.094281][T16175] kmsan_slab_alloc+0x8e/0xe0 [ 618.099012][T16175] __kmalloc_node_track_caller+0xa4f/0x1470 [ 618.105033][T16175] pskb_expand_head+0x25e/0x1e20 [ 618.110098][T16175] erspan_xmit+0xa04/0x3ea0 [ 618.114638][T16175] xmit_one+0x2b6/0x760 [ 618.118829][T16175] dev_hard_start_xmit+0x196/0x420 [ 618.124507][T16175] sch_direct_xmit+0x57c/0x1a60 [ 618.129506][T16175] __qdisc_run+0x35b/0x490 [ 618.133970][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 618.139212][T16175] dev_queue_xmit+0x4b/0x60 [ 618.143754][T16175] __bpf_redirect+0x1461/0x16b0 [ 618.148723][T16175] bpf_clone_redirect+0x4a1/0x660 [ 618.153790][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 618.158867][T16175] __bpf_prog_run512+0x12e/0x190 [ 618.163854][T16175] bpf_test_run+0x53f/0xe60 [ 618.168407][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 618.174001][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 618.178820][T16175] __se_sys_bpf+0x8e/0xa0 [ 618.183203][T16175] __ia32_sys_bpf+0x4a/0x70 [ 618.187757][T16175] __do_fast_syscall_32+0x127/0x180 [ 618.192999][T16175] do_fast_syscall_32+0x6a/0xc0 [ 618.197997][T16175] do_SYSENTER_32+0x73/0x90 [ 618.202544][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c 00:38:09 executing program 1: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) [ 618.209118][T16175] ===================================================== [ 618.216370][T16175] ===================================================== [ 618.223371][T16175] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 618.230373][T16175] CPU: 0 PID: 16175 Comm: syz-executor.4 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 618.240747][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.250929][T16175] Call Trace: [ 618.254245][T16175] dump_stack+0x24c/0x2e0 [ 618.258623][T16175] kmsan_report+0xfb/0x1e0 [ 618.263080][T16175] __msan_warning+0x5c/0xa0 [ 618.267624][T16175] erspan_xmit+0x21b9/0x3ea0 [ 618.272265][T16175] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 618.280570][T16175] ? validate_xmit_xfrm+0xd5/0x1b90 [ 618.285825][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 618.292207][T16175] ? erspan_tunnel_init+0x470/0x470 [ 618.297812][T16175] xmit_one+0x2b6/0x760 [ 618.302110][T16175] dev_hard_start_xmit+0x196/0x420 [ 618.307513][T16175] sch_direct_xmit+0x57c/0x1a60 [ 618.312443][T16175] __qdisc_run+0x35b/0x490 [ 618.316928][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 618.322123][T16175] dev_queue_xmit+0x4b/0x60 [ 618.327538][T16175] __bpf_redirect+0x1461/0x16b0 [ 618.332516][T16175] ? kmsan_get_metadata+0x116/0x180 [ 618.337792][T16175] bpf_clone_redirect+0x4a1/0x660 [ 618.342887][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 618.347981][T16175] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 618.354670][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 618.360891][T16175] ? bpf_csum_level+0x760/0x760 [ 618.365923][T16175] __bpf_prog_run512+0x12e/0x190 [ 618.370957][T16175] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 618.378576][T16175] ? kmsan_get_metadata+0x116/0x180 [ 618.384128][T16175] ? kmsan_get_metadata+0x116/0x180 [ 618.389401][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 618.395289][T16175] ? __msan_get_context_state+0x9/0x20 [ 618.400828][T16175] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 618.407020][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 618.413172][T16175] ? should_fail+0x72/0x9e0 [ 618.417742][T16175] ? psi_task_change+0x330/0x7e0 [ 618.423041][T16175] ? kmsan_get_metadata+0x116/0x180 [ 618.428403][T16175] ? kmsan_get_metadata+0x116/0x180 [ 618.433917][T16175] ? kmsan_get_metadata+0x116/0x180 [ 618.439414][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 618.446500][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 618.453496][T16175] ? ktime_get+0x390/0x470 [ 618.460535][T16175] ? kmsan_get_metadata+0x4f/0x180 [ 618.466489][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 618.472619][T16175] ? __bpf_prog_run480+0x190/0x190 [ 618.477798][T16175] bpf_test_run+0x53f/0xe60 [ 618.482421][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 618.488320][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 618.493863][T16175] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 618.499874][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 618.504731][T16175] ? __msan_get_context_state+0x9/0x20 [ 618.510236][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 618.516350][T16175] ? kmsan_get_metadata+0x116/0x180 [ 618.521602][T16175] ? kmsan_get_metadata+0x116/0x180 [ 618.527334][T16175] ? kmsan_get_metadata+0x116/0x180 [ 618.532609][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 618.538555][T16175] ? kmsan_get_metadata+0x116/0x180 [ 618.543808][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 618.549669][T16175] ? kmsan_internal_set_origin+0x85/0xc0 [ 618.555345][T16175] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 618.561457][T16175] ? __msan_instrument_asm_store+0x107/0x130 [ 618.567483][T16175] ? kmsan_get_metadata+0x116/0x180 [ 618.572815][T16175] ? kmsan_get_metadata+0x116/0x180 [ 618.578165][T16175] __se_sys_bpf+0x8e/0xa0 [ 618.582565][T16175] __ia32_sys_bpf+0x4a/0x70 [ 618.587206][T16175] __do_fast_syscall_32+0x127/0x180 [ 618.592454][T16175] do_fast_syscall_32+0x6a/0xc0 [ 618.597507][T16175] do_SYSENTER_32+0x73/0x90 [ 618.602156][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c 00:38:09 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040), 0x10) [ 618.608659][T16175] RIP: 0023:0xf7f8b549 [ 618.612864][T16175] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 618.633225][T16175] RSP: 002b:00000000f55435fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 618.641863][T16175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 618.650067][T16175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.658274][T16175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.666503][T16175] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 618.674556][T16175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.682577][T16175] [ 618.684948][T16175] Uninit was created at: [ 618.689228][T16175] kmsan_internal_poison_shadow+0x5c/0xf0 [ 618.695026][T16175] kmsan_slab_alloc+0x8e/0xe0 [ 618.699742][T16175] __kmalloc_node_track_caller+0xa4f/0x1470 [ 618.705740][T16175] pskb_expand_head+0x25e/0x1e20 [ 618.710733][T16175] erspan_xmit+0xa04/0x3ea0 [ 618.715286][T16175] xmit_one+0x2b6/0x760 [ 618.719488][T16175] dev_hard_start_xmit+0x196/0x420 [ 618.724659][T16175] sch_direct_xmit+0x57c/0x1a60 [ 618.729565][T16175] __qdisc_run+0x35b/0x490 [ 618.735152][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 618.740246][T16175] dev_queue_xmit+0x4b/0x60 [ 618.744792][T16175] __bpf_redirect+0x1461/0x16b0 [ 618.749769][T16175] bpf_clone_redirect+0x4a1/0x660 [ 618.754831][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 618.759902][T16175] __bpf_prog_run512+0x12e/0x190 [ 618.765022][T16175] bpf_test_run+0x53f/0xe60 [ 618.769659][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 618.775160][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 618.779987][T16175] __se_sys_bpf+0x8e/0xa0 [ 618.784361][T16175] __ia32_sys_bpf+0x4a/0x70 [ 618.788922][T16175] __do_fast_syscall_32+0x127/0x180 [ 618.794170][T16175] do_fast_syscall_32+0x6a/0xc0 [ 618.799058][T16175] do_SYSENTER_32+0x73/0x90 [ 618.803601][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 618.810258][T16175] ===================================================== [ 618.817613][T16175] ===================================================== [ 618.825645][T16175] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 618.834590][T16175] CPU: 0 PID: 16175 Comm: syz-executor.4 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 618.845045][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.855132][T16175] Call Trace: [ 618.858967][T16175] dump_stack+0x24c/0x2e0 [ 618.863370][T16175] kmsan_report+0xfb/0x1e0 [ 618.868451][T16175] __msan_warning+0x5c/0xa0 [ 618.873525][T16175] erspan_xmit+0x21b9/0x3ea0 [ 618.878173][T16175] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 618.884387][T16175] ? validate_xmit_xfrm+0xd5/0x1b90 [ 618.889636][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 618.896370][T16175] ? erspan_tunnel_init+0x470/0x470 [ 618.901728][T16175] xmit_one+0x2b6/0x760 [ 618.906107][T16175] dev_hard_start_xmit+0x196/0x420 [ 618.911487][T16175] sch_direct_xmit+0x57c/0x1a60 [ 618.916570][T16175] __qdisc_run+0x35b/0x490 [ 618.921176][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 618.926278][T16175] dev_queue_xmit+0x4b/0x60 [ 618.930959][T16175] __bpf_redirect+0x1461/0x16b0 [ 618.936560][T16175] ? kmsan_get_metadata+0x116/0x180 [ 618.941827][T16175] bpf_clone_redirect+0x4a1/0x660 [ 618.946907][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 618.951889][T16175] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 618.957746][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 618.963949][T16175] ? bpf_csum_level+0x760/0x760 [ 618.968952][T16175] __bpf_prog_run512+0x12e/0x190 [ 618.974109][T16175] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 618.981642][T16175] ? kmsan_get_metadata+0x116/0x180 [ 618.986904][T16175] ? kmsan_get_metadata+0x116/0x180 [ 618.992236][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 618.998094][T16175] ? __msan_get_context_state+0x9/0x20 [ 619.003632][T16175] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 619.009499][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 619.015798][T16175] ? should_fail+0x72/0x9e0 [ 619.020377][T16175] ? psi_task_change+0x330/0x7e0 [ 619.025378][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.030716][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.035967][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.041239][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 619.047099][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 619.053218][T16175] ? ktime_get+0x390/0x470 [ 619.057696][T16175] ? kmsan_get_metadata+0x4f/0x180 [ 619.062896][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 619.068778][T16175] ? __bpf_prog_run480+0x190/0x190 [ 619.074022][T16175] bpf_test_run+0x53f/0xe60 [ 619.078608][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 619.084471][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 619.090158][T16175] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 619.096143][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 619.100957][T16175] ? __msan_get_context_state+0x9/0x20 [ 619.106461][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 619.112583][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.117948][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.123193][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.128634][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 619.134519][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.139762][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 619.145616][T16175] ? kmsan_internal_set_origin+0x85/0xc0 [ 619.151298][T16175] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 619.159093][T16175] ? __msan_instrument_asm_store+0x107/0x130 [ 619.177563][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.182814][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.188061][T16175] __se_sys_bpf+0x8e/0xa0 [ 619.192439][T16175] __ia32_sys_bpf+0x4a/0x70 [ 619.196994][T16175] __do_fast_syscall_32+0x127/0x180 [ 619.202536][T16175] do_fast_syscall_32+0x6a/0xc0 [ 619.207458][T16175] do_SYSENTER_32+0x73/0x90 [ 619.212045][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 619.218447][T16175] RIP: 0023:0xf7f8b549 [ 619.222637][T16175] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 619.242362][T16175] RSP: 002b:00000000f55435fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 619.251184][T16175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 619.259376][T16175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 619.267390][T16175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 619.275413][T16175] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 619.283462][T16175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 619.291479][T16175] [ 619.293850][T16175] Uninit was created at: [ 619.298096][T16175] kmsan_internal_poison_shadow+0x5c/0xf0 [ 619.303868][T16175] kmsan_slab_alloc+0x8e/0xe0 [ 619.308695][T16175] __kmalloc_node_track_caller+0xa4f/0x1470 [ 619.314644][T16175] pskb_expand_head+0x25e/0x1e20 [ 619.319633][T16175] erspan_xmit+0xa04/0x3ea0 [ 619.324194][T16175] xmit_one+0x2b6/0x760 [ 619.328426][T16175] dev_hard_start_xmit+0x196/0x420 [ 619.333585][T16175] sch_direct_xmit+0x57c/0x1a60 [ 619.338482][T16175] __qdisc_run+0x35b/0x490 [ 619.342969][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 619.348038][T16175] dev_queue_xmit+0x4b/0x60 [ 619.352583][T16175] __bpf_redirect+0x1461/0x16b0 [ 619.357479][T16175] bpf_clone_redirect+0x4a1/0x660 [ 619.362578][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 619.367708][T16175] __bpf_prog_run512+0x12e/0x190 [ 619.372694][T16175] bpf_test_run+0x53f/0xe60 [ 619.377249][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 619.382863][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 619.388131][T16175] __se_sys_bpf+0x8e/0xa0 [ 619.392530][T16175] __ia32_sys_bpf+0x4a/0x70 [ 619.397090][T16175] __do_fast_syscall_32+0x127/0x180 [ 619.402359][T16175] do_fast_syscall_32+0x6a/0xc0 [ 619.407862][T16175] do_SYSENTER_32+0x73/0x90 [ 619.412433][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 619.418820][T16175] ===================================================== [ 619.426348][T16175] ===================================================== [ 619.433770][T16175] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 619.440855][T16175] CPU: 0 PID: 16175 Comm: syz-executor.4 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 619.451146][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 619.461242][T16175] Call Trace: 00:38:10 executing program 3: r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2800000010000104000000000e00000000002000", @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 619.464683][T16175] dump_stack+0x24c/0x2e0 [ 619.469074][T16175] kmsan_report+0xfb/0x1e0 [ 619.473568][T16175] __msan_warning+0x5c/0xa0 [ 619.478138][T16175] erspan_xmit+0x21b9/0x3ea0 [ 619.482804][T16175] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 619.488954][T16175] ? validate_xmit_xfrm+0xd5/0x1b90 [ 619.494200][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 619.500063][T16175] ? erspan_tunnel_init+0x470/0x470 [ 619.505325][T16175] xmit_one+0x2b6/0x760 [ 619.509561][T16175] dev_hard_start_xmit+0x196/0x420 [ 619.514727][T16175] sch_direct_xmit+0x57c/0x1a60 [ 619.519637][T16175] __qdisc_run+0x35b/0x490 [ 619.524119][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 619.529276][T16175] dev_queue_xmit+0x4b/0x60 [ 619.533961][T16175] __bpf_redirect+0x1461/0x16b0 [ 619.538905][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.544260][T16175] bpf_clone_redirect+0x4a1/0x660 [ 619.549526][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 619.554526][T16175] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 619.560468][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 619.566607][T16175] ? bpf_csum_level+0x760/0x760 [ 619.571501][T16175] __bpf_prog_run512+0x12e/0x190 [ 619.576509][T16175] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 619.584207][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.589777][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.595078][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 619.600930][T16175] ? __msan_get_context_state+0x9/0x20 [ 619.606462][T16175] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 619.612353][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 619.618472][T16175] ? should_fail+0x72/0x9e0 [ 619.623028][T16175] ? psi_task_change+0x330/0x7e0 [ 619.628026][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.635829][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.641187][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.646804][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 619.653707][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 619.659913][T16175] ? ktime_get+0x390/0x470 [ 619.664502][T16175] ? kmsan_get_metadata+0x4f/0x180 [ 619.669745][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 619.675630][T16175] ? __bpf_prog_run480+0x190/0x190 [ 619.680890][T16175] bpf_test_run+0x53f/0xe60 [ 619.686003][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 619.691886][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 619.697435][T16175] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 619.703843][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 619.708764][T16175] ? __msan_get_context_state+0x9/0x20 [ 619.714390][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 619.720970][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.726301][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.731555][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.737232][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 619.743091][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.748341][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 619.754201][T16175] ? kmsan_internal_set_origin+0x85/0xc0 [ 619.760492][T16175] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 619.766848][T16175] ? __msan_instrument_asm_store+0x107/0x130 [ 619.772878][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.778133][T16175] ? kmsan_get_metadata+0x116/0x180 [ 619.784941][T16175] __se_sys_bpf+0x8e/0xa0 [ 619.789321][T16175] __ia32_sys_bpf+0x4a/0x70 [ 619.793866][T16175] __do_fast_syscall_32+0x127/0x180 [ 619.799108][T16175] do_fast_syscall_32+0x6a/0xc0 [ 619.804195][T16175] do_SYSENTER_32+0x73/0x90 [ 619.808742][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 619.815309][T16175] RIP: 0023:0xf7f8b549 [ 619.819551][T16175] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 619.840273][T16175] RSP: 002b:00000000f55435fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 619.848927][T16175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 619.857040][T16175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 619.870021][T16175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 619.878563][T16175] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 619.887708][T16175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 619.896095][T16175] [ 619.898492][T16175] Uninit was created at: [ 619.902744][T16175] kmsan_internal_poison_shadow+0x5c/0xf0 [ 619.908538][T16175] kmsan_slab_alloc+0x8e/0xe0 [ 619.913435][T16175] __kmalloc_node_track_caller+0xa4f/0x1470 [ 619.919475][T16175] pskb_expand_head+0x25e/0x1e20 [ 619.924500][T16175] erspan_xmit+0xa04/0x3ea0 [ 619.929045][T16175] xmit_one+0x2b6/0x760 [ 619.933245][T16175] dev_hard_start_xmit+0x196/0x420 [ 619.938400][T16175] sch_direct_xmit+0x57c/0x1a60 [ 619.943302][T16175] __qdisc_run+0x35b/0x490 [ 619.947763][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 619.952857][T16175] dev_queue_xmit+0x4b/0x60 [ 619.957403][T16175] __bpf_redirect+0x1461/0x16b0 [ 619.962296][T16175] bpf_clone_redirect+0x4a1/0x660 [ 619.967364][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 619.972372][T16175] __bpf_prog_run512+0x12e/0x190 [ 619.977361][T16175] bpf_test_run+0x53f/0xe60 [ 619.981916][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 619.987470][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 619.992274][T16175] __se_sys_bpf+0x8e/0xa0 [ 619.996681][T16175] __ia32_sys_bpf+0x4a/0x70 [ 620.001222][T16175] __do_fast_syscall_32+0x127/0x180 [ 620.006570][T16175] do_fast_syscall_32+0x6a/0xc0 [ 620.011465][T16175] do_SYSENTER_32+0x73/0x90 [ 620.016005][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 620.022380][T16175] ===================================================== [ 620.029743][T16175] ===================================================== [ 620.036821][T16175] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 620.043810][T16175] CPU: 0 PID: 16175 Comm: syz-executor.4 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 620.054202][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.064832][T16175] Call Trace: [ 620.068136][T16175] dump_stack+0x24c/0x2e0 [ 620.072510][T16175] kmsan_report+0xfb/0x1e0 [ 620.076971][T16175] __msan_warning+0x5c/0xa0 [ 620.081601][T16175] erspan_xmit+0x21b9/0x3ea0 [ 620.086253][T16175] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 620.092388][T16175] ? validate_xmit_xfrm+0xd5/0x1b90 [ 620.097644][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 620.103494][T16175] ? erspan_tunnel_init+0x470/0x470 [ 620.108757][T16175] xmit_one+0x2b6/0x760 [ 620.112958][T16175] dev_hard_start_xmit+0x196/0x420 [ 620.118114][T16175] sch_direct_xmit+0x57c/0x1a60 [ 620.123071][T16175] __qdisc_run+0x35b/0x490 [ 620.128493][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 620.133579][T16175] dev_queue_xmit+0x4b/0x60 [ 620.138218][T16175] __bpf_redirect+0x1461/0x16b0 [ 620.144068][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.149747][T16175] bpf_clone_redirect+0x4a1/0x660 [ 620.154940][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 620.160527][T16175] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 620.166716][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 620.173454][T16175] ? bpf_csum_level+0x760/0x760 [ 620.178380][T16175] __bpf_prog_run512+0x12e/0x190 [ 620.183565][T16175] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 620.191119][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.196372][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.201672][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 620.207778][T16175] ? __msan_get_context_state+0x9/0x20 [ 620.213621][T16175] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 620.219743][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 620.225942][T16175] ? should_fail+0x72/0x9e0 [ 620.230828][T16175] ? psi_task_change+0x330/0x7e0 [ 620.235816][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.241321][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.246997][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.255402][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 620.262328][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 620.268727][T16175] ? ktime_get+0x390/0x470 [ 620.273198][T16175] ? kmsan_get_metadata+0x4f/0x180 [ 620.278651][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 620.284537][T16175] ? __bpf_prog_run480+0x190/0x190 [ 620.289779][T16175] bpf_test_run+0x53f/0xe60 [ 620.294334][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 620.300278][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 620.316155][T16175] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 620.323491][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 620.328631][T16175] ? __msan_get_context_state+0x9/0x20 [ 620.334342][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 620.341345][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.346617][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.351891][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.357178][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 620.363209][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.368454][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 620.374323][T16175] ? kmsan_internal_set_origin+0x85/0xc0 [ 620.380086][T16175] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 620.386831][T16175] ? __msan_instrument_asm_store+0x107/0x130 [ 620.394384][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.400384][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.406041][T16175] __se_sys_bpf+0x8e/0xa0 [ 620.410683][T16175] __ia32_sys_bpf+0x4a/0x70 [ 620.416975][T16175] __do_fast_syscall_32+0x127/0x180 [ 620.422338][T16175] do_fast_syscall_32+0x6a/0xc0 [ 620.427299][T16175] do_SYSENTER_32+0x73/0x90 [ 620.431883][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 620.438372][T16175] RIP: 0023:0xf7f8b549 [ 620.443295][T16175] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 620.463122][T16175] RSP: 002b:00000000f55435fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 620.472158][T16175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 620.480275][T16175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.488538][T16175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.496577][T16175] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 620.504800][T16175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.512900][T16175] [ 620.515261][T16175] Uninit was created at: [ 620.520043][T16175] kmsan_internal_poison_shadow+0x5c/0xf0 [ 620.525817][T16175] kmsan_slab_alloc+0x8e/0xe0 [ 620.530554][T16175] __kmalloc_node_track_caller+0xa4f/0x1470 [ 620.536489][T16175] pskb_expand_head+0x25e/0x1e20 [ 620.541469][T16175] erspan_xmit+0xa04/0x3ea0 [ 620.546106][T16175] xmit_one+0x2b6/0x760 [ 620.552390][T16175] dev_hard_start_xmit+0x196/0x420 [ 620.557634][T16175] sch_direct_xmit+0x57c/0x1a60 [ 620.562705][T16175] __qdisc_run+0x35b/0x490 [ 620.567156][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 620.572420][T16175] dev_queue_xmit+0x4b/0x60 [ 620.576975][T16175] __bpf_redirect+0x1461/0x16b0 [ 620.581867][T16175] bpf_clone_redirect+0x4a1/0x660 [ 620.586946][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 620.591933][T16175] __bpf_prog_run512+0x12e/0x190 [ 620.596919][T16175] bpf_test_run+0x53f/0xe60 [ 620.601911][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 620.607449][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 620.612378][T16175] __se_sys_bpf+0x8e/0xa0 [ 620.616753][T16175] __ia32_sys_bpf+0x4a/0x70 [ 620.621306][T16175] __do_fast_syscall_32+0x127/0x180 [ 620.626549][T16175] do_fast_syscall_32+0x6a/0xc0 [ 620.631463][T16175] do_SYSENTER_32+0x73/0x90 [ 620.636096][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 620.642469][T16175] ===================================================== [ 620.649978][T16175] ===================================================== [ 620.656966][T16175] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 620.663955][T16175] CPU: 0 PID: 16175 Comm: syz-executor.4 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 620.674991][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.685080][T16175] Call Trace: [ 620.688386][T16175] dump_stack+0x24c/0x2e0 [ 620.692846][T16175] kmsan_report+0xfb/0x1e0 [ 620.697317][T16175] __msan_warning+0x5c/0xa0 [ 620.701888][T16175] erspan_xmit+0x21b9/0x3ea0 [ 620.706525][T16175] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 620.712667][T16175] ? validate_xmit_xfrm+0xd5/0x1b90 [ 620.718096][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 620.723975][T16175] ? erspan_tunnel_init+0x470/0x470 [ 620.729235][T16175] xmit_one+0x2b6/0x760 [ 620.733439][T16175] dev_hard_start_xmit+0x196/0x420 [ 620.738594][T16175] sch_direct_xmit+0x57c/0x1a60 [ 620.743528][T16175] __qdisc_run+0x35b/0x490 [ 620.747993][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 620.753215][T16175] dev_queue_xmit+0x4b/0x60 [ 620.758093][T16175] __bpf_redirect+0x1461/0x16b0 [ 620.763375][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.774089][T16175] bpf_clone_redirect+0x4a1/0x660 [ 620.779329][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 620.784495][T16175] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 620.790468][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 620.797114][T16175] ? bpf_csum_level+0x760/0x760 [ 620.802040][T16175] __bpf_prog_run512+0x12e/0x190 [ 620.807400][T16175] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 620.815539][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.821081][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.826379][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 620.833888][T16175] ? __msan_get_context_state+0x9/0x20 [ 620.839406][T16175] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 620.845612][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 620.851735][T16175] ? should_fail+0x72/0x9e0 [ 620.856672][T16175] ? psi_task_change+0x330/0x7e0 [ 620.861743][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.867686][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.872961][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.878324][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 620.884182][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 620.890298][T16175] ? ktime_get+0x390/0x470 [ 620.894886][T16175] ? kmsan_get_metadata+0x4f/0x180 [ 620.900218][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 620.906610][T16175] ? __bpf_prog_run480+0x190/0x190 [ 620.911777][T16175] bpf_test_run+0x53f/0xe60 [ 620.916697][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 620.922596][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 620.928212][T16175] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 620.934165][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 620.938977][T16175] ? __msan_get_context_state+0x9/0x20 [ 620.944579][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 620.950700][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.955956][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.961199][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.966629][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 620.973001][T16175] ? kmsan_get_metadata+0x116/0x180 [ 620.978268][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 620.984134][T16175] ? kmsan_internal_set_origin+0x85/0xc0 [ 620.989917][T16175] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 620.996035][T16175] ? __msan_instrument_asm_store+0x107/0x130 [ 621.002093][T16175] ? kmsan_get_metadata+0x116/0x180 [ 621.007696][T16175] ? kmsan_get_metadata+0x116/0x180 [ 621.013052][T16175] __se_sys_bpf+0x8e/0xa0 [ 621.018389][T16175] __ia32_sys_bpf+0x4a/0x70 [ 621.023040][T16175] __do_fast_syscall_32+0x127/0x180 [ 621.028299][T16175] do_fast_syscall_32+0x6a/0xc0 [ 621.033211][T16175] do_SYSENTER_32+0x73/0x90 [ 621.037770][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 621.044153][T16175] RIP: 0023:0xf7f8b549 [ 621.048284][T16175] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 621.068025][T16175] RSP: 002b:00000000f55435fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 621.076487][T16175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 621.085109][T16175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 621.093125][T16175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 621.101160][T16175] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 621.109168][T16175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 621.117183][T16175] [ 621.119523][T16175] Uninit was created at: [ 621.123851][T16175] kmsan_internal_poison_shadow+0x5c/0xf0 [ 621.129645][T16175] kmsan_slab_alloc+0x8e/0xe0 [ 621.134476][T16175] __kmalloc_node_track_caller+0xa4f/0x1470 [ 621.140443][T16175] pskb_expand_head+0x25e/0x1e20 [ 621.145436][T16175] erspan_xmit+0xa04/0x3ea0 [ 621.149986][T16175] xmit_one+0x2b6/0x760 [ 621.154213][T16175] dev_hard_start_xmit+0x196/0x420 [ 621.160126][T16175] sch_direct_xmit+0x57c/0x1a60 [ 621.165905][T16175] __qdisc_run+0x35b/0x490 [ 621.170807][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 621.175915][T16175] dev_queue_xmit+0x4b/0x60 [ 621.180473][T16175] __bpf_redirect+0x1461/0x16b0 [ 621.185403][T16175] bpf_clone_redirect+0x4a1/0x660 [ 621.190502][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 621.195742][T16175] __bpf_prog_run512+0x12e/0x190 [ 621.200728][T16175] bpf_test_run+0x53f/0xe60 [ 621.205808][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 621.211602][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 621.217049][T16175] __se_sys_bpf+0x8e/0xa0 [ 621.222678][T16175] __ia32_sys_bpf+0x4a/0x70 [ 621.227223][T16175] __do_fast_syscall_32+0x127/0x180 [ 621.232556][T16175] do_fast_syscall_32+0x6a/0xc0 [ 621.237691][T16175] do_SYSENTER_32+0x73/0x90 [ 621.242240][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 621.248626][T16175] ===================================================== [ 621.255945][T16175] ===================================================== [ 621.262927][T16175] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 621.270320][T16175] CPU: 0 PID: 16175 Comm: syz-executor.4 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 621.281237][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.291452][T16175] Call Trace: [ 621.294785][T16175] dump_stack+0x24c/0x2e0 [ 621.299164][T16175] kmsan_report+0xfb/0x1e0 [ 621.303862][T16175] __msan_warning+0x5c/0xa0 [ 621.309487][T16175] erspan_xmit+0x21b9/0x3ea0 [ 621.316159][T16175] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 621.322393][T16175] ? validate_xmit_xfrm+0xd5/0x1b90 [ 621.327649][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 621.334268][T16175] ? erspan_tunnel_init+0x470/0x470 [ 621.339922][T16175] xmit_one+0x2b6/0x760 [ 621.345127][T16175] dev_hard_start_xmit+0x196/0x420 [ 621.351842][T16175] sch_direct_xmit+0x57c/0x1a60 [ 621.356752][T16175] __qdisc_run+0x35b/0x490 [ 621.361228][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 621.366350][T16175] dev_queue_xmit+0x4b/0x60 [ 621.370949][T16175] __bpf_redirect+0x1461/0x16b0 [ 621.375846][T16175] ? kmsan_get_metadata+0x116/0x180 [ 621.381097][T16175] bpf_clone_redirect+0x4a1/0x660 [ 621.386627][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 621.391617][T16175] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 621.397478][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 621.403630][T16175] ? bpf_csum_level+0x760/0x760 [ 621.408536][T16175] __bpf_prog_run512+0x12e/0x190 [ 621.413556][T16175] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 621.421005][T16175] ? kmsan_get_metadata+0x116/0x180 [ 621.426272][T16175] ? kmsan_get_metadata+0x116/0x180 [ 621.431569][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 621.437445][T16175] ? __msan_get_context_state+0x9/0x20 [ 621.442959][T16175] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 621.448840][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 621.454959][T16175] ? should_fail+0x72/0x9e0 [ 621.459710][T16175] ? psi_task_change+0x330/0x7e0 [ 621.465164][T16175] ? kmsan_get_metadata+0x116/0x180 [ 621.470453][T16175] ? kmsan_get_metadata+0x116/0x180 [ 621.475903][T16175] ? kmsan_get_metadata+0x116/0x180 [ 621.481452][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 621.487778][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 621.493937][T16175] ? ktime_get+0x390/0x470 [ 621.498420][T16175] ? kmsan_get_metadata+0x4f/0x180 [ 621.503690][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 621.509679][T16175] ? __bpf_prog_run480+0x190/0x190 [ 621.514933][T16175] bpf_test_run+0x53f/0xe60 [ 621.519779][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 621.526212][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 621.531837][T16175] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 621.537929][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 621.543151][T16175] ? __msan_get_context_state+0x9/0x20 [ 621.548671][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 621.554790][T16175] ? kmsan_get_metadata+0x116/0x180 [ 621.560059][T16175] ? kmsan_get_metadata+0x116/0x180 [ 621.565318][T16175] ? kmsan_get_metadata+0x116/0x180 [ 621.570579][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 621.576435][T16175] ? kmsan_get_metadata+0x116/0x180 [ 621.581685][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 621.587541][T16175] ? kmsan_internal_set_origin+0x85/0xc0 [ 621.593584][T16175] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 621.599837][T16175] ? __msan_instrument_asm_store+0x107/0x130 [ 621.606119][T16175] ? kmsan_get_metadata+0x116/0x180 [ 621.611654][T16175] ? kmsan_get_metadata+0x116/0x180 [ 621.617949][T16175] __se_sys_bpf+0x8e/0xa0 [ 621.622551][T16175] __ia32_sys_bpf+0x4a/0x70 [ 621.627129][T16175] __do_fast_syscall_32+0x127/0x180 [ 621.632656][T16175] do_fast_syscall_32+0x6a/0xc0 [ 621.637657][T16175] do_SYSENTER_32+0x73/0x90 [ 621.642314][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 621.649924][T16175] RIP: 0023:0xf7f8b549 [ 621.654071][T16175] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 621.676157][T16175] RSP: 002b:00000000f55435fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 621.684770][T16175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 621.692876][T16175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 621.702288][T16175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 621.710488][T16175] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 621.718509][T16175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 621.726520][T16175] [ 621.728941][T16175] Uninit was created at: [ 621.733187][T16175] kmsan_internal_poison_shadow+0x5c/0xf0 [ 621.739041][T16175] kmsan_slab_alloc+0x8e/0xe0 [ 621.743931][T16175] __kmalloc_node_track_caller+0xa4f/0x1470 [ 621.750138][T16175] pskb_expand_head+0x25e/0x1e20 [ 621.755109][T16175] erspan_xmit+0xa04/0x3ea0 [ 621.759657][T16175] xmit_one+0x2b6/0x760 [ 621.763872][T16175] dev_hard_start_xmit+0x196/0x420 [ 621.769285][T16175] sch_direct_xmit+0x57c/0x1a60 [ 621.774418][T16175] __qdisc_run+0x35b/0x490 [ 621.778885][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 621.784219][T16175] dev_queue_xmit+0x4b/0x60 [ 621.789241][T16175] __bpf_redirect+0x1461/0x16b0 [ 621.794232][T16175] bpf_clone_redirect+0x4a1/0x660 [ 621.800319][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 621.805722][T16175] __bpf_prog_run512+0x12e/0x190 [ 621.810792][T16175] bpf_test_run+0x53f/0xe60 [ 621.815459][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 621.820998][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 621.825811][T16175] __se_sys_bpf+0x8e/0xa0 [ 621.830183][T16175] __ia32_sys_bpf+0x4a/0x70 [ 621.834726][T16175] __do_fast_syscall_32+0x127/0x180 [ 621.839993][T16175] do_fast_syscall_32+0x6a/0xc0 [ 621.844976][T16175] do_SYSENTER_32+0x73/0x90 [ 621.849522][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 621.855987][T16175] ===================================================== [ 621.865640][T16175] ===================================================== [ 621.874796][T16175] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 621.884814][T16175] CPU: 0 PID: 16175 Comm: syz-executor.4 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 621.897431][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.909284][T16175] Call Trace: [ 621.912988][T16175] dump_stack+0x24c/0x2e0 [ 621.919660][T16175] kmsan_report+0xfb/0x1e0 [ 621.924389][T16175] __msan_warning+0x5c/0xa0 [ 621.929063][T16175] erspan_xmit+0x21b9/0x3ea0 [ 621.934435][T16175] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 621.940766][T16175] ? validate_xmit_xfrm+0xd5/0x1b90 [ 621.946090][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 621.952128][T16175] ? erspan_tunnel_init+0x470/0x470 [ 621.960098][T16175] xmit_one+0x2b6/0x760 [ 621.965642][T16175] dev_hard_start_xmit+0x196/0x420 [ 621.972575][T16175] sch_direct_xmit+0x57c/0x1a60 [ 621.977687][T16175] __qdisc_run+0x35b/0x490 [ 621.986891][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 621.992079][T16175] dev_queue_xmit+0x4b/0x60 [ 621.996705][T16175] __bpf_redirect+0x1461/0x16b0 [ 622.002249][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.009683][T16175] bpf_clone_redirect+0x4a1/0x660 [ 622.014894][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 622.020096][T16175] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 622.025971][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 622.032091][T16175] ? bpf_csum_level+0x760/0x760 [ 622.037091][T16175] __bpf_prog_run512+0x12e/0x190 [ 622.042097][T16175] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 622.049526][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.054863][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.060131][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 622.066016][T16175] ? __msan_get_context_state+0x9/0x20 [ 622.071740][T16175] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 622.078814][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 622.084947][T16175] ? should_fail+0x72/0x9e0 [ 622.089507][T16175] ? psi_task_change+0x330/0x7e0 [ 622.094523][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.099790][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.105170][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.110641][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 622.116506][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 622.123796][T16175] ? ktime_get+0x390/0x470 [ 622.128290][T16175] ? kmsan_get_metadata+0x4f/0x180 [ 622.133550][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 622.139454][T16175] ? __bpf_prog_run480+0x190/0x190 [ 622.144803][T16175] bpf_test_run+0x53f/0xe60 [ 622.149648][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 622.155877][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 622.163967][T16175] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 622.170109][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 622.174930][T16175] ? __msan_get_context_state+0x9/0x20 [ 622.181050][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 622.187697][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.193067][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.198846][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.204115][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 622.210452][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.216141][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 622.222364][T16175] ? kmsan_internal_set_origin+0x85/0xc0 [ 622.229698][T16175] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 622.236559][T16175] ? __msan_instrument_asm_store+0x107/0x130 [ 622.243936][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.249456][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.254728][T16175] __se_sys_bpf+0x8e/0xa0 [ 622.259741][T16175] __ia32_sys_bpf+0x4a/0x70 [ 622.265130][T16175] __do_fast_syscall_32+0x127/0x180 [ 622.270391][T16175] do_fast_syscall_32+0x6a/0xc0 [ 622.275400][T16175] do_SYSENTER_32+0x73/0x90 [ 622.280661][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 622.287499][T16175] RIP: 0023:0xf7f8b549 [ 622.291972][T16175] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 622.314086][T16175] RSP: 002b:00000000f55435fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 622.324288][T16175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 622.332860][T16175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 622.340893][T16175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 622.351082][T16175] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 622.360846][T16175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 622.370219][T16175] [ 622.372582][T16175] Uninit was created at: [ 622.377188][T16175] kmsan_internal_poison_shadow+0x5c/0xf0 [ 622.383339][T16175] kmsan_slab_alloc+0x8e/0xe0 [ 622.388545][T16175] __kmalloc_node_track_caller+0xa4f/0x1470 [ 622.395246][T16175] pskb_expand_head+0x25e/0x1e20 [ 622.401304][T16175] erspan_xmit+0xa04/0x3ea0 [ 622.406052][T16175] xmit_one+0x2b6/0x760 [ 622.422723][T16175] dev_hard_start_xmit+0x196/0x420 [ 622.428441][T16175] sch_direct_xmit+0x57c/0x1a60 [ 622.433458][T16175] __qdisc_run+0x35b/0x490 [ 622.451575][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 622.456672][T16175] dev_queue_xmit+0x4b/0x60 [ 622.461597][T16175] __bpf_redirect+0x1461/0x16b0 [ 622.466729][T16175] bpf_clone_redirect+0x4a1/0x660 [ 622.473116][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 622.478552][T16175] __bpf_prog_run512+0x12e/0x190 [ 622.484800][T16175] bpf_test_run+0x53f/0xe60 [ 622.489940][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 622.495743][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 622.501800][T16175] __se_sys_bpf+0x8e/0xa0 [ 622.516455][T16175] __ia32_sys_bpf+0x4a/0x70 [ 622.521010][T16175] __do_fast_syscall_32+0x127/0x180 [ 622.527753][T16175] do_fast_syscall_32+0x6a/0xc0 [ 622.532693][T16175] do_SYSENTER_32+0x73/0x90 [ 622.537374][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 622.544018][T16175] ===================================================== [ 622.551568][T16175] ===================================================== [ 622.558538][T16175] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 622.566156][T16175] CPU: 0 PID: 16175 Comm: syz-executor.4 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 622.576863][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.586955][T16175] Call Trace: [ 622.590268][T16175] dump_stack+0x24c/0x2e0 [ 622.595248][T16175] kmsan_report+0xfb/0x1e0 [ 622.599982][T16175] __msan_warning+0x5c/0xa0 [ 622.605009][T16175] erspan_xmit+0x21b9/0x3ea0 [ 622.609763][T16175] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 622.616056][T16175] ? validate_xmit_xfrm+0xd5/0x1b90 [ 622.625269][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 622.631132][T16175] ? erspan_tunnel_init+0x470/0x470 [ 622.637386][T16175] xmit_one+0x2b6/0x760 [ 622.641620][T16175] dev_hard_start_xmit+0x196/0x420 [ 622.646992][T16175] sch_direct_xmit+0x57c/0x1a60 [ 622.651907][T16175] __qdisc_run+0x35b/0x490 [ 622.656494][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 622.661576][T16175] dev_queue_xmit+0x4b/0x60 [ 622.666128][T16175] __bpf_redirect+0x1461/0x16b0 [ 622.671134][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.676469][T16175] bpf_clone_redirect+0x4a1/0x660 [ 622.681643][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 622.686627][T16175] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 622.693444][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 622.699565][T16175] ? bpf_csum_level+0x760/0x760 [ 622.704511][T16175] __bpf_prog_run512+0x12e/0x190 [ 622.709510][T16175] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 622.717231][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.722495][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.727829][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 622.733712][T16175] ? __msan_get_context_state+0x9/0x20 [ 622.739217][T16175] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 622.745196][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 622.751690][T16175] ? should_fail+0x72/0x9e0 [ 622.756617][T16175] ? psi_task_change+0x330/0x7e0 [ 622.761673][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.767002][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.772945][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.779228][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 622.785178][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 622.791295][T16175] ? ktime_get+0x390/0x470 [ 622.796124][T16175] ? kmsan_get_metadata+0x4f/0x180 [ 622.801312][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 622.807188][T16175] ? __bpf_prog_run480+0x190/0x190 [ 622.812367][T16175] bpf_test_run+0x53f/0xe60 [ 622.817034][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 622.823182][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 622.829962][T16175] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 622.836012][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 622.843303][T16175] ? __msan_get_context_state+0x9/0x20 [ 622.849351][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 622.856551][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.862315][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.868478][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.873764][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 622.879890][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.885331][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 622.891656][T16175] ? kmsan_internal_set_origin+0x85/0xc0 [ 622.897707][T16175] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 622.904527][T16175] ? __msan_instrument_asm_store+0x107/0x130 [ 622.910680][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.916373][T16175] ? kmsan_get_metadata+0x116/0x180 [ 622.921848][T16175] __se_sys_bpf+0x8e/0xa0 [ 622.926418][T16175] __ia32_sys_bpf+0x4a/0x70 [ 622.931499][T16175] __do_fast_syscall_32+0x127/0x180 [ 622.937514][T16175] do_fast_syscall_32+0x6a/0xc0 [ 622.943130][T16175] do_SYSENTER_32+0x73/0x90 [ 622.949177][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 622.955561][T16175] RIP: 0023:0xf7f8b549 [ 622.960101][T16175] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 622.979836][T16175] RSP: 002b:00000000f55435fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 622.988484][T16175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 622.996488][T16175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 623.004603][T16175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 623.013735][T16175] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 623.021858][T16175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 623.029955][T16175] [ 623.032318][T16175] Uninit was created at: [ 623.037170][T16175] kmsan_internal_poison_shadow+0x5c/0xf0 [ 623.043395][T16175] kmsan_slab_alloc+0x8e/0xe0 [ 623.048463][T16175] __kmalloc_node_track_caller+0xa4f/0x1470 [ 623.054402][T16175] pskb_expand_head+0x25e/0x1e20 [ 623.059492][T16175] erspan_xmit+0xa04/0x3ea0 [ 623.064031][T16175] xmit_one+0x2b6/0x760 [ 623.068223][T16175] dev_hard_start_xmit+0x196/0x420 [ 623.073364][T16175] sch_direct_xmit+0x57c/0x1a60 [ 623.078255][T16175] __qdisc_run+0x35b/0x490 [ 623.082741][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 623.087992][T16175] dev_queue_xmit+0x4b/0x60 [ 623.092747][T16175] __bpf_redirect+0x1461/0x16b0 [ 623.097724][T16175] bpf_clone_redirect+0x4a1/0x660 [ 623.102794][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 623.107767][T16175] __bpf_prog_run512+0x12e/0x190 [ 623.112849][T16175] bpf_test_run+0x53f/0xe60 [ 623.117405][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 623.122901][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 623.127803][T16175] __se_sys_bpf+0x8e/0xa0 [ 623.132164][T16175] __ia32_sys_bpf+0x4a/0x70 [ 623.136696][T16175] __do_fast_syscall_32+0x127/0x180 [ 623.142189][T16175] do_fast_syscall_32+0x6a/0xc0 [ 623.147086][T16175] do_SYSENTER_32+0x73/0x90 [ 623.151652][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 623.158049][T16175] ===================================================== [ 623.165814][T16175] ===================================================== [ 623.173130][T16175] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 623.180446][T16175] CPU: 0 PID: 16175 Comm: syz-executor.4 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 623.191065][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.201160][T16175] Call Trace: [ 623.204476][T16175] dump_stack+0x24c/0x2e0 [ 623.208944][T16175] kmsan_report+0xfb/0x1e0 [ 623.213500][T16175] __msan_warning+0x5c/0xa0 [ 623.218044][T16175] erspan_xmit+0x21b9/0x3ea0 [ 623.222680][T16175] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 623.228789][T16175] ? validate_xmit_xfrm+0xd5/0x1b90 [ 623.234181][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 623.240126][T16175] ? erspan_tunnel_init+0x470/0x470 [ 623.245375][T16175] xmit_one+0x2b6/0x760 [ 623.249611][T16175] dev_hard_start_xmit+0x196/0x420 [ 623.254796][T16175] sch_direct_xmit+0x57c/0x1a60 [ 623.259700][T16175] __qdisc_run+0x35b/0x490 [ 623.264167][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 623.269277][T16175] dev_queue_xmit+0x4b/0x60 [ 623.273919][T16175] __bpf_redirect+0x1461/0x16b0 [ 623.278820][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.284094][T16175] bpf_clone_redirect+0x4a1/0x660 [ 623.289647][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 623.294641][T16175] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 623.300495][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 623.307306][T16175] ? bpf_csum_level+0x760/0x760 [ 623.312493][T16175] __bpf_prog_run512+0x12e/0x190 [ 623.318008][T16175] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 623.326785][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.332154][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.337671][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 623.343853][T16175] ? __msan_get_context_state+0x9/0x20 [ 623.349521][T16175] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 623.355393][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 623.361501][T16175] ? should_fail+0x72/0x9e0 [ 623.366061][T16175] ? psi_task_change+0x330/0x7e0 [ 623.371053][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.376295][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.381556][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.386813][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 623.392680][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 623.398793][T16175] ? ktime_get+0x390/0x470 [ 623.403270][T16175] ? kmsan_get_metadata+0x4f/0x180 [ 623.408510][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 623.414605][T16175] ? __bpf_prog_run480+0x190/0x190 [ 623.419798][T16175] bpf_test_run+0x53f/0xe60 [ 623.424480][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 623.430424][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 623.436381][T16175] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 623.442685][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 623.447762][T16175] ? __msan_get_context_state+0x9/0x20 [ 623.453370][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 623.459864][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.465584][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.471138][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.476481][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 623.482442][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.488152][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 623.494025][T16175] ? kmsan_internal_set_origin+0x85/0xc0 [ 623.499727][T16175] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 623.505842][T16175] ? __msan_instrument_asm_store+0x107/0x130 [ 623.512215][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.517528][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.522770][T16175] __se_sys_bpf+0x8e/0xa0 [ 623.527158][T16175] __ia32_sys_bpf+0x4a/0x70 [ 623.531705][T16175] __do_fast_syscall_32+0x127/0x180 [ 623.537153][T16175] do_fast_syscall_32+0x6a/0xc0 [ 623.542052][T16175] do_SYSENTER_32+0x73/0x90 [ 623.546968][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 623.553614][T16175] RIP: 0023:0xf7f8b549 [ 623.557890][T16175] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 623.578380][T16175] RSP: 002b:00000000f55435fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 623.587820][T16175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 623.595828][T16175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 623.603840][T16175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 623.611847][T16175] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 623.620952][T16175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 623.628981][T16175] [ 623.632109][T16175] Uninit was created at: [ 623.636448][T16175] kmsan_internal_poison_shadow+0x5c/0xf0 [ 623.642311][T16175] kmsan_slab_alloc+0x8e/0xe0 [ 623.647140][T16175] __kmalloc_node_track_caller+0xa4f/0x1470 [ 623.653443][T16175] pskb_expand_head+0x25e/0x1e20 [ 623.659685][T16175] erspan_xmit+0xa04/0x3ea0 [ 623.664505][T16175] xmit_one+0x2b6/0x760 [ 623.668878][T16175] dev_hard_start_xmit+0x196/0x420 [ 623.674593][T16175] sch_direct_xmit+0x57c/0x1a60 [ 623.679614][T16175] __qdisc_run+0x35b/0x490 [ 623.684092][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 623.689617][T16175] dev_queue_xmit+0x4b/0x60 [ 623.694180][T16175] __bpf_redirect+0x1461/0x16b0 [ 623.699072][T16175] bpf_clone_redirect+0x4a1/0x660 [ 623.704135][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 623.709104][T16175] __bpf_prog_run512+0x12e/0x190 [ 623.714072][T16175] bpf_test_run+0x53f/0xe60 [ 623.718613][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 623.724209][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 623.729126][T16175] __se_sys_bpf+0x8e/0xa0 [ 623.733493][T16175] __ia32_sys_bpf+0x4a/0x70 [ 623.738038][T16175] __do_fast_syscall_32+0x127/0x180 [ 623.743279][T16175] do_fast_syscall_32+0x6a/0xc0 [ 623.748171][T16175] do_SYSENTER_32+0x73/0x90 [ 623.753491][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 623.759861][T16175] ===================================================== [ 623.767191][T16175] ===================================================== [ 623.775392][T16175] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 623.782882][T16175] CPU: 0 PID: 16175 Comm: syz-executor.4 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 623.795079][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.805170][T16175] Call Trace: [ 623.809382][T16175] dump_stack+0x24c/0x2e0 [ 623.814289][T16175] kmsan_report+0xfb/0x1e0 [ 623.818768][T16175] __msan_warning+0x5c/0xa0 [ 623.823311][T16175] erspan_xmit+0x21b9/0x3ea0 [ 623.827945][T16175] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 623.834233][T16175] ? validate_xmit_xfrm+0xd5/0x1b90 [ 623.839741][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 623.845616][T16175] ? erspan_tunnel_init+0x470/0x470 [ 623.851093][T16175] xmit_one+0x2b6/0x760 [ 623.855389][T16175] dev_hard_start_xmit+0x196/0x420 [ 623.860549][T16175] sch_direct_xmit+0x57c/0x1a60 [ 623.866331][T16175] __qdisc_run+0x35b/0x490 [ 623.871782][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 623.877050][T16175] dev_queue_xmit+0x4b/0x60 [ 623.881734][T16175] __bpf_redirect+0x1461/0x16b0 [ 623.886728][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.891984][T16175] bpf_clone_redirect+0x4a1/0x660 [ 623.897143][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 623.902208][T16175] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 623.908063][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 623.914258][T16175] ? bpf_csum_level+0x760/0x760 [ 623.919176][T16175] __bpf_prog_run512+0x12e/0x190 [ 623.924519][T16175] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 623.932071][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.937704][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.942960][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 623.948997][T16175] ? __msan_get_context_state+0x9/0x20 [ 623.954614][T16175] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 623.960560][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 623.966765][T16175] ? should_fail+0x72/0x9e0 [ 623.971690][T16175] ? psi_task_change+0x330/0x7e0 [ 623.976812][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.982079][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.987357][T16175] ? kmsan_get_metadata+0x116/0x180 [ 623.992695][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 623.998547][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 624.004667][T16175] ? ktime_get+0x390/0x470 [ 624.009154][T16175] ? kmsan_get_metadata+0x4f/0x180 [ 624.014310][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 624.020269][T16175] ? __bpf_prog_run480+0x190/0x190 [ 624.025429][T16175] bpf_test_run+0x53f/0xe60 [ 624.029985][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 624.035867][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 624.041388][T16175] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 624.048056][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 624.052971][T16175] ? __msan_get_context_state+0x9/0x20 [ 624.058568][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 624.064774][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.070120][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.076527][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.082025][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 624.087918][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.093338][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 624.099214][T16175] ? kmsan_internal_set_origin+0x85/0xc0 [ 624.104888][T16175] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 624.111348][T16175] ? __msan_instrument_asm_store+0x107/0x130 [ 624.117484][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.122756][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.127993][T16175] __se_sys_bpf+0x8e/0xa0 [ 624.132369][T16175] __ia32_sys_bpf+0x4a/0x70 [ 624.136935][T16175] __do_fast_syscall_32+0x127/0x180 [ 624.142271][T16175] do_fast_syscall_32+0x6a/0xc0 [ 624.147181][T16175] do_SYSENTER_32+0x73/0x90 [ 624.151813][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 624.158191][T16175] RIP: 0023:0xf7f8b549 [ 624.162379][T16175] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 624.182041][T16175] RSP: 002b:00000000f55435fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 624.190518][T16175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 624.199395][T16175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 624.207666][T16175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 624.215759][T16175] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 624.223782][T16175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 624.231819][T16175] [ 624.234161][T16175] Uninit was created at: [ 624.238424][T16175] kmsan_internal_poison_shadow+0x5c/0xf0 [ 624.244188][T16175] kmsan_slab_alloc+0x8e/0xe0 [ 624.248901][T16175] __kmalloc_node_track_caller+0xa4f/0x1470 [ 624.254841][T16175] pskb_expand_head+0x25e/0x1e20 [ 624.259841][T16175] erspan_xmit+0xa04/0x3ea0 [ 624.264537][T16175] xmit_one+0x2b6/0x760 [ 624.268738][T16175] dev_hard_start_xmit+0x196/0x420 [ 624.273898][T16175] sch_direct_xmit+0x57c/0x1a60 [ 624.278803][T16175] __qdisc_run+0x35b/0x490 [ 624.283272][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 624.288368][T16175] dev_queue_xmit+0x4b/0x60 [ 624.292922][T16175] __bpf_redirect+0x1461/0x16b0 [ 624.297815][T16175] bpf_clone_redirect+0x4a1/0x660 [ 624.302889][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 624.307873][T16175] __bpf_prog_run512+0x12e/0x190 [ 624.312943][T16175] bpf_test_run+0x53f/0xe60 [ 624.317593][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 624.323127][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 624.328385][T16175] __se_sys_bpf+0x8e/0xa0 [ 624.334321][T16175] __ia32_sys_bpf+0x4a/0x70 [ 624.338872][T16175] __do_fast_syscall_32+0x127/0x180 [ 624.344577][T16175] do_fast_syscall_32+0x6a/0xc0 [ 624.349481][T16175] do_SYSENTER_32+0x73/0x90 [ 624.354050][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 624.360430][T16175] ===================================================== [ 624.367903][T16175] ===================================================== [ 624.375002][T16175] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 624.382552][T16175] CPU: 0 PID: 16175 Comm: syz-executor.4 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 624.392840][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.403629][T16175] Call Trace: [ 624.406936][T16175] dump_stack+0x24c/0x2e0 [ 624.411850][T16175] kmsan_report+0xfb/0x1e0 [ 624.416422][T16175] __msan_warning+0x5c/0xa0 [ 624.421171][T16175] erspan_xmit+0x21b9/0x3ea0 [ 624.425990][T16175] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 624.432210][T16175] ? validate_xmit_xfrm+0xd5/0x1b90 [ 624.438100][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 624.444062][T16175] ? erspan_tunnel_init+0x470/0x470 [ 624.449457][T16175] xmit_one+0x2b6/0x760 [ 624.453673][T16175] dev_hard_start_xmit+0x196/0x420 [ 624.459739][T16175] sch_direct_xmit+0x57c/0x1a60 [ 624.464646][T16175] __qdisc_run+0x35b/0x490 [ 624.469226][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 624.474305][T16175] dev_queue_xmit+0x4b/0x60 [ 624.479120][T16175] __bpf_redirect+0x1461/0x16b0 [ 624.484127][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.489380][T16175] bpf_clone_redirect+0x4a1/0x660 [ 624.494463][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 624.499447][T16175] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 624.505321][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 624.511442][T16175] ? bpf_csum_level+0x760/0x760 [ 624.516526][T16175] __bpf_prog_run512+0x12e/0x190 [ 624.521600][T16175] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 624.529222][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.534952][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.540381][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 624.546431][T16175] ? __msan_get_context_state+0x9/0x20 [ 624.552055][T16175] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 624.558374][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 624.564507][T16175] ? should_fail+0x72/0x9e0 [ 624.569163][T16175] ? psi_task_change+0x330/0x7e0 [ 624.574255][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.587672][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.593100][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.598468][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 624.604941][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 624.615358][T16175] ? ktime_get+0x390/0x470 [ 624.620653][T16175] ? kmsan_get_metadata+0x4f/0x180 [ 624.627978][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 624.634314][T16175] ? __bpf_prog_run480+0x190/0x190 [ 624.639831][T16175] bpf_test_run+0x53f/0xe60 [ 624.644425][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 624.651373][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 624.657001][T16175] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 624.663929][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 624.668757][T16175] ? __msan_get_context_state+0x9/0x20 [ 624.674262][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 624.681330][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.687054][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.692415][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.697773][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 624.703640][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.709025][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 624.715168][T16175] ? kmsan_internal_set_origin+0x85/0xc0 [ 624.721040][T16175] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 624.727704][T16175] ? __msan_instrument_asm_store+0x107/0x130 [ 624.734189][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.739433][T16175] ? kmsan_get_metadata+0x116/0x180 [ 624.744892][T16175] __se_sys_bpf+0x8e/0xa0 [ 624.749803][T16175] __ia32_sys_bpf+0x4a/0x70 [ 624.754381][T16175] __do_fast_syscall_32+0x127/0x180 [ 624.759654][T16175] do_fast_syscall_32+0x6a/0xc0 [ 624.765957][T16175] do_SYSENTER_32+0x73/0x90 [ 624.770842][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 624.777653][T16175] RIP: 0023:0xf7f8b549 [ 624.781762][T16175] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 624.802404][T16175] RSP: 002b:00000000f55435fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 624.810880][T16175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 624.818917][T16175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 624.827053][T16175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 624.835157][T16175] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 624.846646][T16175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 624.854672][T16175] [ 624.857096][T16175] Uninit was created at: [ 624.861374][T16175] kmsan_internal_poison_shadow+0x5c/0xf0 [ 624.867156][T16175] kmsan_slab_alloc+0x8e/0xe0 [ 624.871881][T16175] __kmalloc_node_track_caller+0xa4f/0x1470 [ 624.877830][T16175] pskb_expand_head+0x25e/0x1e20 [ 624.882862][T16175] erspan_xmit+0xa04/0x3ea0 [ 624.887591][T16175] xmit_one+0x2b6/0x760 [ 624.891918][T16175] dev_hard_start_xmit+0x196/0x420 [ 624.897174][T16175] sch_direct_xmit+0x57c/0x1a60 [ 624.902071][T16175] __qdisc_run+0x35b/0x490 [ 624.906556][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 624.911828][T16175] dev_queue_xmit+0x4b/0x60 [ 624.916382][T16175] __bpf_redirect+0x1461/0x16b0 [ 624.921297][T16175] bpf_clone_redirect+0x4a1/0x660 [ 624.926384][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 624.931366][T16175] __bpf_prog_run512+0x12e/0x190 [ 624.936352][T16175] bpf_test_run+0x53f/0xe60 [ 624.940916][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 624.946445][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 624.951257][T16175] __se_sys_bpf+0x8e/0xa0 [ 624.955635][T16175] __ia32_sys_bpf+0x4a/0x70 [ 624.960179][T16175] __do_fast_syscall_32+0x127/0x180 [ 624.965840][T16175] do_fast_syscall_32+0x6a/0xc0 [ 624.972148][T16175] do_SYSENTER_32+0x73/0x90 [ 624.977064][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 624.983468][T16175] ===================================================== [ 624.990893][T16175] ===================================================== [ 624.997879][T16175] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 625.004883][T16175] CPU: 0 PID: 16175 Comm: syz-executor.4 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 625.015189][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.025278][T16175] Call Trace: [ 625.028579][T16175] dump_stack+0x24c/0x2e0 [ 625.032973][T16175] kmsan_report+0xfb/0x1e0 [ 625.037493][T16175] __msan_warning+0x5c/0xa0 [ 625.042034][T16175] erspan_xmit+0x21b9/0x3ea0 [ 625.046926][T16175] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 625.053040][T16175] ? validate_xmit_xfrm+0xd5/0x1b90 [ 625.058297][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 625.064252][T16175] ? erspan_tunnel_init+0x470/0x470 [ 625.069504][T16175] xmit_one+0x2b6/0x760 [ 625.073714][T16175] dev_hard_start_xmit+0x196/0x420 [ 625.078939][T16175] sch_direct_xmit+0x57c/0x1a60 [ 625.083844][T16175] __qdisc_run+0x35b/0x490 [ 625.088311][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 625.093418][T16175] dev_queue_xmit+0x4b/0x60 [ 625.098146][T16175] __bpf_redirect+0x1461/0x16b0 [ 625.103053][T16175] ? kmsan_get_metadata+0x116/0x180 [ 625.108394][T16175] bpf_clone_redirect+0x4a1/0x660 [ 625.113480][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 625.118557][T16175] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 625.124418][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 625.130613][T16175] ? bpf_csum_level+0x760/0x760 [ 625.135516][T16175] __bpf_prog_run512+0x12e/0x190 [ 625.140504][T16175] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 625.148381][T16175] ? kmsan_get_metadata+0x116/0x180 [ 625.153995][T16175] ? kmsan_get_metadata+0x116/0x180 [ 625.168888][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 625.174750][T16175] ? __msan_get_context_state+0x9/0x20 [ 625.180267][T16175] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 625.186137][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 625.192443][T16175] ? should_fail+0x72/0x9e0 [ 625.197081][T16175] ? psi_task_change+0x330/0x7e0 [ 625.202072][T16175] ? kmsan_get_metadata+0x116/0x180 [ 625.207350][T16175] ? kmsan_get_metadata+0x116/0x180 [ 625.213260][T16175] ? kmsan_get_metadata+0x116/0x180 [ 625.218505][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 625.225513][T16175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 625.231625][T16175] ? ktime_get+0x390/0x470 [ 625.236365][T16175] ? kmsan_get_metadata+0x4f/0x180 [ 625.241522][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 625.247464][T16175] ? __bpf_prog_run480+0x190/0x190 [ 625.252619][T16175] bpf_test_run+0x53f/0xe60 [ 625.257178][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 625.263147][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 625.268664][T16175] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 625.275118][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 625.279943][T16175] ? __msan_get_context_state+0x9/0x20 [ 625.285454][T16175] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 625.291580][T16175] ? kmsan_get_metadata+0x116/0x180 [ 625.296822][T16175] ? kmsan_get_metadata+0x116/0x180 [ 625.302062][T16175] ? kmsan_get_metadata+0x116/0x180 [ 625.307313][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 625.313171][T16175] ? kmsan_get_metadata+0x116/0x180 [ 625.318509][T16175] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 625.324370][T16175] ? kmsan_internal_set_origin+0x85/0xc0 [ 625.330164][T16175] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 625.336631][T16175] ? __msan_instrument_asm_store+0x107/0x130 [ 625.343464][T16175] ? kmsan_get_metadata+0x116/0x180 [ 625.348740][T16175] ? kmsan_get_metadata+0x116/0x180 [ 625.354102][T16175] __se_sys_bpf+0x8e/0xa0 [ 625.358496][T16175] __ia32_sys_bpf+0x4a/0x70 [ 625.363046][T16175] __do_fast_syscall_32+0x127/0x180 [ 625.369183][T16175] do_fast_syscall_32+0x6a/0xc0 [ 625.376271][T16175] do_SYSENTER_32+0x73/0x90 [ 625.380830][T16175] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 625.391897][T16175] RIP: 0023:0xf7f8b549 [ 625.396000][T16175] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 625.415828][T16175] RSP: 002b:00000000f55435fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 625.424371][T16175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 625.432391][T16175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 625.440489][T16175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 625.448518][T16175] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 625.456529][T16175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 625.464785][T16175] [ 625.467397][T16175] Uninit was created at: [ 625.471925][T16175] kmsan_internal_poison_shadow+0x5c/0xf0 [ 625.483111][T16175] kmsan_slab_alloc+0x8e/0xe0 [ 625.488123][T16175] __kmalloc_node_track_caller+0xa4f/0x1470 [ 625.494076][T16175] pskb_expand_head+0x25e/0x1e20 [ 625.499063][T16175] erspan_xmit+0xa04/0x3ea0 [ 625.503614][T16175] xmit_one+0x2b6/0x760 [ 625.507899][T16175] dev_hard_start_xmit+0x196/0x420 [ 625.513147][T16175] sch_direct_xmit+0x57c/0x1a60 [ 625.518130][T16175] __qdisc_run+0x35b/0x490 [ 625.522601][T16175] __dev_queue_xmit+0x26ad/0x4600 [ 625.527693][T16175] dev_queue_xmit+0x4b/0x60 [ 625.532330][T16175] __bpf_redirect+0x1461/0x16b0 [ 625.537223][T16175] bpf_clone_redirect+0x4a1/0x660 [ 625.542316][T16175] ___bpf_prog_run+0x2b78/0xb950 [ 625.547312][T16175] __bpf_prog_run512+0x12e/0x190 [ 625.552378][T16175] bpf_test_run+0x53f/0xe60 [ 625.556934][T16175] bpf_prog_test_run_skb+0x1914/0x3500 [ 625.562457][T16175] __do_sys_bpf+0xbe6f/0x1aba0 [ 625.567265][T16175] __se_sys_bpf+0x8e/0xa0 [ 625.571767][T16175] __ia32_sys_bpf+0x4a/0x70 [ 625.576886][T16175] __do_fast_syscall_32+0x127/0x180 [ 625.582306][T16175] do_fast_syscall_32+0x6a/0xc0 [ 625.588083][T16175] do_SYSENTER_32+0x73/0x90