[ OK ] Started Getty on tty1. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.251' (ECDSA) to the list of known hosts. 2020/05/24 18:48:58 fuzzer started 2020/05/24 18:48:58 dialing manager at 10.128.0.26:41143 2020/05/24 18:48:58 syscalls: 3055 2020/05/24 18:48:58 code coverage: enabled 2020/05/24 18:48:58 comparison tracing: enabled 2020/05/24 18:48:58 extra coverage: enabled 2020/05/24 18:48:58 setuid sandbox: enabled 2020/05/24 18:48:58 namespace sandbox: enabled 2020/05/24 18:48:58 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/24 18:48:58 fault injection: enabled 2020/05/24 18:48:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/24 18:48:58 net packet injection: enabled 2020/05/24 18:48:58 net device setup: enabled 2020/05/24 18:48:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/24 18:48:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/24 18:48:58 USB emulation: enabled 18:50:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) io_submit(0x0, 0x0, 0x0) syzkaller login: [ 172.352439][ T6824] IPVS: ftp: loaded support on port[0] = 21 18:50:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/1466], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 172.499980][ T6824] chnl_net:caif_netlink_parms(): no params data found [ 172.665460][ T6824] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.672975][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.686792][ T6949] IPVS: ftp: loaded support on port[0] = 21 [ 172.693287][ T6824] device bridge_slave_0 entered promiscuous mode [ 172.722621][ T6824] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.732272][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.741138][ T6824] device bridge_slave_1 entered promiscuous mode 18:50:48 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000001280)=ANY=[@ANYBLOB="77a9e8a4283ec32ee9cb300d825b3278eeb1a8711fa2cf80eefe6d18329894f4b03b7b57f90734dc362c7021979a27c9eca2ab0ad1b601111b59b23332fdc171d2eef3d0172777ac9a1b37cf1a0b574c9dde1f774886b1f2680153402eaa7b7f04eb19378b1b0139a93c167791d1e0dab0d51a64657035a843e24f12a3ce8797bd"], 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x121400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x40) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'xfrm0\x00', 0x4000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7) write$cgroup_int(r4, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000040)) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000001240)={@rand_addr=0x64010100, @private=0xa010100}, 0x8) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) [ 172.813959][ T6824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.842323][ T6824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.968977][ T6824] team0: Port device team_slave_0 added [ 173.030092][ T6824] team0: Port device team_slave_1 added [ 173.074853][ T6824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.081827][ T6824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.112225][ T7065] IPVS: ftp: loaded support on port[0] = 21 [ 173.127547][ T6824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.158497][ T6949] chnl_net:caif_netlink_parms(): no params data found [ 173.170002][ T6824] batman_adv: batadv0: Adding interface: batadv_slave_1 18:50:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x404e20}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000005}, 0xa}], 0x4000000000000d0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 173.177310][ T6824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.204087][ T6824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.368026][ T6824] device hsr_slave_0 entered promiscuous mode 18:50:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) clock_gettime(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc044565d, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x2000, 0x7f, {}, {0x3, 0x0, 0x8, 0x4, 0xfa, 0x2, "1dc22999"}, 0x0, 0x4, @planes=&(0x7f0000000080)={0x3, 0x3, @fd}, 0x800}) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) dup3(r3, r2, 0x0) sendfile(r1, r2, 0x0, 0x7fffffa7) [ 173.523331][ T6824] device hsr_slave_1 entered promiscuous mode [ 173.645136][ T7126] IPVS: ftp: loaded support on port[0] = 21 [ 173.723122][ T6949] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.730207][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.764061][ T6949] device bridge_slave_0 entered promiscuous mode [ 173.785009][ T6949] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.792167][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.813590][ T6949] device bridge_slave_1 entered promiscuous mode [ 173.892429][ T7201] IPVS: ftp: loaded support on port[0] = 21 [ 173.909168][ T6949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 18:50:49 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r1 = dup(r0) sendfile(r0, r1, 0x0, 0x80006) [ 173.965745][ T7065] chnl_net:caif_netlink_parms(): no params data found [ 173.978796][ T6949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.079343][ T6949] team0: Port device team_slave_0 added [ 174.098730][ T6949] team0: Port device team_slave_1 added [ 174.170179][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.193533][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.228674][ T6949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.267726][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.275244][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.302890][ T6949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.340929][ T7330] IPVS: ftp: loaded support on port[0] = 21 [ 174.396524][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.403948][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.411751][ T7065] device bridge_slave_0 entered promiscuous mode [ 174.476598][ T6949] device hsr_slave_0 entered promiscuous mode [ 174.523464][ T6949] device hsr_slave_1 entered promiscuous mode [ 174.572960][ T6949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.580862][ T6949] Cannot create hsr debugfs directory [ 174.596645][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.603907][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.611774][ T7065] device bridge_slave_1 entered promiscuous mode [ 174.688108][ T6824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.779900][ T6824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.842039][ T6824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.913113][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.959325][ T7126] chnl_net:caif_netlink_parms(): no params data found [ 174.979582][ T6824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.047210][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.066136][ T7201] chnl_net:caif_netlink_parms(): no params data found [ 175.120663][ T7065] team0: Port device team_slave_0 added [ 175.132383][ T7065] team0: Port device team_slave_1 added [ 175.247070][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.256744][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.286946][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.302112][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.309698][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.336292][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.399585][ T7126] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.407212][ T7126] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.416254][ T7126] device bridge_slave_0 entered promiscuous mode [ 175.488808][ T7065] device hsr_slave_0 entered promiscuous mode [ 175.533392][ T7065] device hsr_slave_1 entered promiscuous mode [ 175.573165][ T7065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.580724][ T7065] Cannot create hsr debugfs directory [ 175.608475][ T7126] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.615955][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.624232][ T7126] device bridge_slave_1 entered promiscuous mode [ 175.648515][ T7126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.672153][ T7126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.731681][ T7201] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.740017][ T7201] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.751963][ T7201] device bridge_slave_0 entered promiscuous mode [ 175.819592][ T7201] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.827714][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.836833][ T7201] device bridge_slave_1 entered promiscuous mode [ 175.877527][ T7126] team0: Port device team_slave_0 added [ 175.886260][ T7126] team0: Port device team_slave_1 added [ 175.892300][ T6949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.922093][ T6949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.968701][ T6949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.025700][ T7330] chnl_net:caif_netlink_parms(): no params data found [ 176.060976][ T7201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.086385][ T6949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.169943][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.177437][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.204960][ T7126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.219993][ T7201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.261081][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.268419][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.296226][ T7126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.333101][ T7201] team0: Port device team_slave_0 added [ 176.387322][ T7201] team0: Port device team_slave_1 added [ 176.425671][ T6824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.496886][ T7126] device hsr_slave_0 entered promiscuous mode [ 176.573621][ T7126] device hsr_slave_1 entered promiscuous mode [ 176.623123][ T7126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.630737][ T7126] Cannot create hsr debugfs directory [ 176.646454][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.654557][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.681596][ T7201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.700903][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.707979][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.742149][ T7201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.854215][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.861302][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.876197][ T7330] device bridge_slave_0 entered promiscuous mode [ 176.884775][ T7065] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 176.996391][ T7201] device hsr_slave_0 entered promiscuous mode [ 177.063507][ T7201] device hsr_slave_1 entered promiscuous mode [ 177.122963][ T7201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.130712][ T7201] Cannot create hsr debugfs directory [ 177.152129][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.160508][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.169855][ T7330] device bridge_slave_1 entered promiscuous mode [ 177.184156][ T7065] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.280135][ T6824] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.290722][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.300116][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.308690][ T7065] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.385235][ T7065] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.441517][ T7330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.457302][ T7330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.507896][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.517752][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.528717][ T2480] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.536356][ T2480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.581947][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.590445][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.600130][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.608750][ T2848] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.615889][ T2848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.625264][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.641621][ T7330] team0: Port device team_slave_0 added [ 177.665339][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.686146][ T7330] team0: Port device team_slave_1 added [ 177.725693][ T6949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.762929][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.771907][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.782078][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.835833][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.843367][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.872156][ T7330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.888284][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.898140][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.907524][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.917536][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.940552][ T6949] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.953776][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.960768][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.988199][ T7330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.004830][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.012641][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.030969][ T6824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.047109][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.075919][ T7126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.118504][ T7126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.174740][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.187655][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.196866][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.206624][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.215736][ T2552] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.223021][ T2552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.230718][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.240130][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.248842][ T2552] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.256009][ T2552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.264564][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.275045][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.335886][ T7330] device hsr_slave_0 entered promiscuous mode [ 178.383733][ T7330] device hsr_slave_1 entered promiscuous mode [ 178.432817][ T7330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.440389][ T7330] Cannot create hsr debugfs directory [ 178.452855][ T7126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.511826][ T7126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.567014][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.641399][ T7201] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 178.670221][ T7201] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 178.748058][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.759049][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.768985][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.777212][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.785562][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.795408][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.809601][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.818240][ T7201] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 178.878065][ T6824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.886797][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.897695][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.907417][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.928321][ T7201] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.002421][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.011257][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.020396][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.029002][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.042913][ T6949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.065568][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.118347][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.127543][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.174688][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.183925][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.192361][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.199592][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.208000][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.218658][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.227676][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.234955][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.269659][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.278419][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.289256][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.343374][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.351109][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.367979][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.377334][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.386340][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.395214][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.426233][ T6824] device veth0_vlan entered promiscuous mode [ 179.437359][ T6949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.446617][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.458630][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.469659][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.478015][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.487300][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.513230][ T7126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.531496][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.540072][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.549475][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.559653][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.579515][ T6824] device veth1_vlan entered promiscuous mode [ 179.610372][ T7330] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 179.660994][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.670613][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.679128][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.688778][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.698611][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.714364][ T7126] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.726218][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.735990][ T7330] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 179.779557][ T7330] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 179.893078][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.901358][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.912289][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.921227][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.928375][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.938232][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.947151][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.955762][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.962928][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.970678][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.979167][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.986757][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.995603][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.005640][ T7330] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 180.105346][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.114675][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.123929][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.132227][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.145611][ T7201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.162106][ T6949] device veth0_vlan entered promiscuous mode [ 180.171278][ T6824] device veth0_macvtap entered promiscuous mode [ 180.186475][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.196366][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.205139][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.213258][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.234894][ T7201] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.244149][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.262635][ T6949] device veth1_vlan entered promiscuous mode [ 180.272468][ T6824] device veth1_macvtap entered promiscuous mode [ 180.294014][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.302265][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.311308][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.348984][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.358843][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.369409][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.379040][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.388255][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.397806][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.406768][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.413941][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.462366][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.471030][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.479572][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.492495][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.501643][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.519027][ T6824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.549794][ T6949] device veth0_macvtap entered promiscuous mode [ 180.563268][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.572006][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.583911][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.593009][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.601925][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.609062][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.617237][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.627005][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.636239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.647197][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.656238][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.679804][ T7126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.692410][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.707084][ T6824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.729327][ T6949] device veth1_macvtap entered promiscuous mode [ 180.737669][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.749950][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.758342][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.768188][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.777943][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.787134][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.796452][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.847392][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.856328][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.891465][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.908406][ T7065] device veth0_vlan entered promiscuous mode [ 180.937315][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.950378][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.967617][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.029974][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.038559][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.048473][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.059213][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.068177][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.076584][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.084826][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.094391][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.103220][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.111827][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.123182][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.131016][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.150835][ T7126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.160855][ T7065] device veth1_vlan entered promiscuous mode [ 181.171486][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.184619][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.197899][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.319798][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.339478][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.352218][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.361986][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.391224][ T7330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.421276][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 18:50:56 executing program 0: syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)={[{@umask={'umask', 0x3d, 0xffffffff}}]}) [ 181.516229][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.526575][ T2551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.595341][ T8086] hfs: umask requires a value [ 181.600242][ T8086] hfs: unable to parse mount options [ 181.633653][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.643677][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.651752][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.662118][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 18:50:56 executing program 0: syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)={[{@umask={'umask', 0x3d, 0xffffffff}}]}) [ 181.694055][ T8086] hfs: umask requires a value [ 181.698792][ T8086] hfs: unable to parse mount options [ 181.766216][ T7330] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.813186][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.863394][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.873757][ T7065] device veth0_macvtap entered promiscuous mode [ 181.904208][ T7201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.921369][ T8097] hfs: umask requires a value [ 181.934815][ T8097] hfs: unable to parse mount options 18:50:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x54}}, 0x0) 18:50:57 executing program 0: syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)={[{@umask={'umask', 0x3d, 0xffffffff}}]}) [ 181.974958][ T7065] device veth1_macvtap entered promiscuous mode [ 182.004082][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 18:50:57 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 182.043538][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.051752][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 18:50:57 executing program 0: syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)={[{@umask={'umask', 0x3d, 0xffffffff}}]}) [ 182.092076][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.127526][ T8106] hfs: umask requires a value [ 182.132272][ T8106] hfs: unable to parse mount options 18:50:57 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks'}, 0x30}], [], 0x78}) [ 182.141371][ T2552] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.148541][ T2552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.210144][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.249309][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.260025][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.282513][ T8117] tmpfs: Bad value for 'nr_blocks' [ 182.294336][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.308636][ T2552] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.315854][ T2552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.331472][ T7126] device veth0_vlan entered promiscuous mode [ 182.348285][ T8117] tmpfs: Bad value for 'nr_blocks' 18:50:57 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks'}, 0x30}], [], 0x78}) [ 182.367796][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.378831][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.402797][ T5] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 182.404163][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.446264][ T7126] device veth1_vlan entered promiscuous mode [ 182.486576][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.531509][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.552672][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.571179][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.578543][ T8131] tmpfs: Bad value for 'nr_blocks' [ 182.600493][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.613623][ T8062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.622583][ T8062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.641656][ T8062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.675545][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.701306][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.720115][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.731431][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.751841][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.761714][ T8062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.777972][ T8062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.789748][ T8062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.807485][ T8062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.820018][ T8062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.833162][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.837085][ T8062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.872886][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 182.910104][ T7126] device veth0_macvtap entered promiscuous mode [ 182.963261][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.972105][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.981749][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.991148][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.000039][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.009727][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.019870][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.029513][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.077956][ T7126] device veth1_macvtap entered promiscuous mode [ 183.084691][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.094280][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.100009][ T7330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.102292][ T5] usb 2-1: Product: syz [ 183.117480][ T5] usb 2-1: Manufacturer: syz [ 183.122076][ T5] usb 2-1: SerialNumber: syz [ 183.124896][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.149576][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.166156][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.174987][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.183842][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.265341][ T7201] device veth0_vlan entered promiscuous mode [ 183.279268][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.287796][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.313457][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.321415][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.369017][ T8109] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 183.372432][ T7330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.428504][ T7201] device veth1_vlan entered promiscuous mode [ 183.458080][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 183.468511][ C0] hrtimer: interrupt took 47008 ns [ 183.484638][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.502328][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 183.540470][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.566270][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 183.584409][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.661437][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.681269][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.690979][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.703333][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.718367][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.728981][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.764143][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 183.797100][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.810542][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 183.829153][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.839943][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 183.859218][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.885853][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.905843][ T8062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.921920][ T8062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.013756][ T8109] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 184.057265][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.075136][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.090213][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.111960][ T2552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 18:50:59 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000001280)=ANY=[@ANYBLOB="77a9e8a4283ec32ee9cb300d825b3278eeb1a8711fa2cf80eefe6d18329894f4b03b7b57f90734dc362c7021979a27c9eca2ab0ad1b601111b59b23332fdc171d2eef3d0172777ac9a1b37cf1a0b574c9dde1f774886b1f2680153402eaa7b7f04eb19378b1b0139a93c167791d1e0dab0d51a64657035a843e24f12a3ce8797bd"], 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x121400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x40) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'xfrm0\x00', 0x4000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7) write$cgroup_int(r4, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000040)) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000001240)={@rand_addr=0x64010100, @private=0xa010100}, 0x8) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) [ 184.180741][ T7201] device veth0_macvtap entered promiscuous mode [ 184.243168][ T5] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 184.249863][ T5] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 184.264716][ T7201] device veth1_macvtap entered promiscuous mode [ 184.286478][ T5] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 184.308768][ T7330] device veth0_vlan entered promiscuous mode [ 184.342070][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 184.379651][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.409928][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 184.463679][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.521365][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 184.618769][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.703279][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 184.773058][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.863625][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.939271][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.968373][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.020127][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.050572][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.068340][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.090366][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 18:51:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x404e20}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000005}, 0xa}], 0x4000000000000d0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 185.115363][ T5] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 185.115805][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.183301][ T5] usb 2-1: USB disconnect, device number 2 [ 185.192009][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.224172][ T5] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 185.238367][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.262785][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.284057][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.306233][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.362364][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.383579][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.406792][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.421967][ T7330] device veth1_vlan entered promiscuous mode [ 185.481772][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.491112][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.499505][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.508798][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.737471][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.750340][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.765717][ T7330] device veth0_macvtap entered promiscuous mode [ 185.831718][ T7330] device veth1_macvtap entered promiscuous mode [ 185.899190][ T8195] FAT-fs (loop4): bogus number of FAT sectors [ 185.906638][ T8195] FAT-fs (loop4): Can't find a valid FAT filesystem [ 185.918032][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.929186][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.940443][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.951387][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.963028][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.973960][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.984043][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.996080][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.005379][ T29] audit: type=1800 audit(1590346261.195:2): pid=8199 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15766 res=0 [ 186.006432][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 186.037180][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.049336][ T29] audit: type=1804 audit(1590346261.235:3): pid=8199 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir633045108/syzkaller.0J4eKa/0/file0/file0" dev="sda1" ino=15766 res=1 [ 186.049513][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.081242][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.099277][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.115997][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.127596][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.142008][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.156432][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.167955][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.179258][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.189612][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.200264][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.210227][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.221419][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.231642][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.242866][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.255771][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.265962][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.271304][ T8195] FAT-fs (loop4): bogus number of FAT sectors [ 186.275945][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.288977][ T8195] FAT-fs (loop4): Can't find a valid FAT filesystem 18:51:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) 18:51:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x22a48ee, 0x0) 18:51:01 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks'}, 0x30}], [], 0x78}) 18:51:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x404e20}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000005}, 0xa}], 0x4000000000000d0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:51:01 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x2bac82e, &(0x7f0000000100)={[{@noacl='noacl'}]}) 18:51:01 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)='u', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 18:51:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '{ppp0self\xbc\x05(mim\x02_type'}]}, 0x21) [ 186.755217][ T8231] tmpfs: Bad value for 'nr_blocks' 18:51:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/40, 0x28}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) [ 186.901102][ T8240] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 18:51:02 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks'}, 0x30}], [], 0x78}) [ 187.027428][ T8234] EXT4-fs (sda1): Mount option "noacl" will be removed by 3.5 [ 187.027428][ T8234] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 187.027428][ T8234] [ 187.142125][ T8234] EXT4-fs (sda1): re-mounted. Opts: noacl, [ 187.171595][ T8246] tmpfs: Bad value for 'nr_blocks' 18:51:02 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks'}, 0x30}], [], 0x78}) [ 187.334752][ T8253] EXT4-fs (sda1): Mount option "noacl" will be removed by 3.5 [ 187.334752][ T8253] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 187.334752][ T8253] 18:51:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x2}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg(r4, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 18:51:02 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) getpid() socket$inet6(0xa, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 187.530971][ T8253] EXT4-fs (sda1): re-mounted. Opts: noacl, 18:51:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x2}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) 18:51:02 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks'}, 0x30}], [], 0x78}) 18:51:03 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) getpid() sched_setattr(0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), 0x0) socket$inet6(0xa, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 18:51:03 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks'}, 0x30}], [], 0x78}) 18:51:03 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks'}, 0x30}], [], 0x78}) 18:51:04 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)='u', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 18:51:04 executing program 2: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) 18:51:04 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) getpid() sched_setattr(0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), 0x0) socket$inet6(0xa, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 18:51:04 executing program 3: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 18:51:04 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks'}, 0x30}], [], 0x78}) 18:51:04 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) getpid() sched_setattr(0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), 0x0) socket$inet6(0xa, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 18:51:04 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks'}, 0x30}], [], 0x78}) 18:51:04 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:51:05 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 189.902965][ T29] audit: type=1800 audit(1590346265.085:4): pid=8341 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="cpuacct.usage_percpu" dev="sda1" ino=15797 res=0 18:51:05 executing program 3: r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x10000000}}}, 0x10) 18:51:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x54}}, 0x0) 18:51:05 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)='u', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 18:51:05 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x290c302a) keyctl$read(0xb, r3, &(0x7f00000003c0)=""/177, 0xfffffffffffffe79) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x290c302a) sendfile(r2, r1, 0x0, 0x100000001) [ 190.409231][ T29] audit: type=1804 audit(1590346265.595:5): pid=8357 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir798330822/syzkaller.CdQH8C/6/cgroup.controllers" dev="sda1" ino=15792 res=1 18:51:07 executing program 2: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) 18:51:07 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:51:07 executing program 3: r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x10000000}}}, 0x10) 18:51:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x54}}, 0x0) 18:51:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) 18:51:07 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)='u', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 18:51:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x54}}, 0x0) 18:51:07 executing program 3: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) 18:51:07 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x181, 0x2, 0x0, 0x0, 0x200}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x10000000) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="f2ff00f5f874a0875c33b29125c699bb59628bcd2c2643b106ea18d545c15df6934bee7219cd0454e87efb38505d15899db3bd0a288d60d945b1e3c974687f65a425e52a371df80d4c11e6e6d98dd8d96ce60c520d8b92c0eab61e", @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="643d00003fcf"]) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xd}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0x0) 18:51:07 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[], [], 0x78}) 18:51:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x54}}, 0x0) 18:51:08 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x181, 0x2, 0x0, 0x0, 0x200}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x10000000) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="f2ff00f5f874a0875c33b29125c699bb59628bcd2c2643b106ea18d545c15df6934bee7219cd0454e87efb38505d15899db3bd0a288d60d945b1e3c974687f65a425e52a371df80d4c11e6e6d98dd8d96ce60c520d8b92c0eab61e", @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="643d00003fcf"]) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xd}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0x0) [ 192.972097][ T8402] tmpfs: Unknown parameter 'x' 18:51:11 executing program 2: r0 = socket(0x1e, 0x5, 0x0) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x10) 18:51:11 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x54}}, 0x0) 18:51:11 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[], [], 0x78}) 18:51:11 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x181, 0x2, 0x0, 0x0, 0x200}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x10000000) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="f2ff00f5f874a0875c33b29125c699bb59628bcd2c2643b106ea18d545c15df6934bee7219cd0454e87efb38505d15899db3bd0a288d60d945b1e3c974687f65a425e52a371df80d4c11e6e6d98dd8d96ce60c520d8b92c0eab61e", @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="643d00003fcf"]) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xd}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0x0) 18:51:11 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 18:51:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05040040000000000109022400010000000009040000050301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) 18:51:11 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x54}}, 0x0) [ 196.505736][ T8433] tmpfs: Unknown parameter 'x' 18:51:11 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[], [], 0x78}) 18:51:11 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x181, 0x2, 0x0, 0x0, 0x200}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x10000000) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="f2ff00f5f874a0875c33b29125c699bb59628bcd2c2643b106ea18d545c15df6934bee7219cd0454e87efb38505d15899db3bd0a288d60d945b1e3c974687f65a425e52a371df80d4c11e6e6d98dd8d96ce60c520d8b92c0eab61e", @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="643d00003fcf"]) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xd}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0x0) 18:51:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000001058041350000000000009090224000100"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044802, &(0x7f0000000240)=ANY=[]) 18:51:11 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x54}}, 0x0) [ 196.717330][ T8452] tmpfs: Unknown parameter 'x' 18:51:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x54}}, 0x0) 18:51:12 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) [ 196.755055][ T2552] usb 4-1: new high-speed USB device number 2 using dummy_hcd 18:51:12 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="eb52c2e3bbbbaaaaaaaaaaaa8100000086dd60f954f700150653f195d583be600d238b5968e3e8a0f2f9ef7648118804cc2fc8bd653c511435ed6308a97082e491d91d35d23794"], 0x4f) write$P9_RREAD(r1, &(0x7f00000001c0)={0xb}, 0xb) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 18:51:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x54}}, 0x0) [ 196.962838][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd 18:51:12 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) [ 197.123020][ T2552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 18:51:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x54}}, 0x0) [ 197.167614][ T2552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.212562][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 197.220292][ T2552] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 197.252954][ T23] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 197.278510][ T2552] usb 4-1: New USB device found, idVendor=056a, idProduct=0004, bcdDevice= 0.40 [ 197.308975][ T2552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.342936][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.361881][ T2552] usb 4-1: config 0 descriptor?? [ 197.380661][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 197.502852][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.523272][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 197.632902][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.661082][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 197.752912][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.779791][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 197.875988][ T2552] wacom 0003:056A:0004.0001: unknown main item tag 0x0 [ 197.884260][ T2552] wacom 0003:056A:0004.0001: Unknown device_type for 'HID 056a:0004'. Ignoring. [ 197.962867][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.992668][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 198.090032][ T2552] usb 4-1: USB disconnect, device number 2 [ 198.096741][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.131519][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 198.232975][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.255619][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 198.365254][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.389662][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 198.432578][ T23] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 198.469922][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.505532][ T23] usb 3-1: config 0 descriptor?? [ 198.852533][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 199.232879][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.266499][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.322536][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 199.362477][ T23] usb 4-1: New USB device found, idVendor=056a, idProduct=0004, bcdDevice= 0.40 [ 199.371542][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.418186][ T23] usb 4-1: config 0 descriptor?? 18:51:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700), 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r4, 0x2008002) sendfile(r2, r4, 0x0, 0x200fff) 18:51:14 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 18:51:14 executing program 4: socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x54}}, 0x0) 18:51:14 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="eb52c2e3bbbbaaaaaaaaaaaa8100000086dd60f954f700150653f195d583be600d238b5968e3e8a0f2f9ef7648118804cc2fc8bd653c511435ed6308a97082e491d91d35d23794"], 0x4f) write$P9_RREAD(r1, &(0x7f00000001c0)={0xb}, 0xb) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) [ 199.712640][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 199.718749][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 199.766767][ T23] usb 4-1: USB disconnect, device number 3 [ 199.831567][ T29] audit: type=1800 audit(1590346275.015:6): pid=8538 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15852 res=0 18:51:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000001058041350000000000009090224000100"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044802, &(0x7f0000000240)=ANY=[]) 18:51:15 executing program 4: socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x54}}, 0x0) [ 200.171663][ T23] usb 3-1: USB disconnect, device number 2 18:51:15 executing program 4: socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x54}}, 0x0) [ 200.692500][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 200.962654][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 201.004716][ T23] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 201.119482][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.142551][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.232711][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.252487][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.332810][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.352022][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.488559][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.509934][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.602816][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.617524][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.712772][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.727446][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.822814][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.841295][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.932933][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.947952][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.968583][ T23] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 201.987792][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.010856][ T23] usb 3-1: config 0 descriptor?? 18:51:17 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000140)={@void, @void, @eth={@multicast, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f954f7", 0x15, 0x6, 0x0, @empty, @loopback, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"e6"}}}}}}}}, 0x4f) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 18:51:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, 0x0, 0x0) 18:51:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700), 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r4, 0x2008002) sendfile(r2, r4, 0x0, 0x200fff) 18:51:17 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 18:51:17 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="eb52c2e3bbbbaaaaaaaaaaaa8100000086dd60f954f700150653f195d583be600d238b5968e3e8a0f2f9ef7648118804cc2fc8bd653c511435ed6308a97082e491d91d35d23794"], 0x4f) write$P9_RREAD(r1, &(0x7f00000001c0)={0xb}, 0xb) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 18:51:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, 0x0, 0x0) [ 202.649173][ T29] audit: type=1800 audit(1590346277.835:7): pid=8581 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15857 res=0 18:51:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, 0x0, 0x0) 18:51:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 18:51:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 18:51:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x2}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg(r4, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 18:51:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 18:51:18 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) [ 203.729660][ T5] usb 3-1: USB disconnect, device number 3 18:51:19 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:51:19 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {}, [{0x2, 0x0, 0xee00}]}, 0x2c, 0x0) 18:51:19 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="eb52c2e3bbbbaaaaaaaaaaaa8100000086dd60f954f700150653f195d583be600d238b5968e3e8a0f2f9ef7648118804cc2fc8bd653c511435ed6308a97082e491d91d35d23794"], 0x4f) write$P9_RREAD(r1, &(0x7f00000001c0)={0xb}, 0xb) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 18:51:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 18:51:19 executing program 3: r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x10000000}, 0x10000000}}, 0x10) 18:51:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 18:51:19 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000002) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 18:51:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 18:51:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) [ 204.346594][ T8657] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:51:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x54}}, 0x0) 18:51:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 18:51:19 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 18:51:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 18:51:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x54}}, 0x0) [ 204.759150][ T8669] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:51:20 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="eb52c2e3bbbbaaaaaaaaaaaa8100000086dd60f954f700150653f195d583be600d238b5968e3e8a0f2f9ef7648118804cc2fc8bd653c511435ed6308a97082e491d91d35d23794"], 0x4f) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 18:51:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 18:51:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 18:51:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x54}}, 0x0) 18:51:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 18:51:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) [ 205.274841][ T8691] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:51:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x20, 0x12, 0xe3b}, 0x20}}, 0x0) 18:51:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 18:51:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) 18:51:20 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 18:51:20 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60f954f7001506"], 0x4f) write$P9_RREAD(r1, &(0x7f00000001c0)={0xb}, 0xb) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 18:51:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 18:51:21 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="eb52c2e3bbbbaaaaaaaaaaaa8100000086dd60f954f700150653f195d583be600d238b5968e3e8a0f2f9ef7648118804cc2fc8bd653c511435ed6308a97082e491d91d35d23794"], 0x4f) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 18:51:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x20, 0x12, 0xe3b}, 0x20}}, 0x0) 18:51:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 18:51:21 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 18:51:21 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGSTRING(r0, 0xc0104811, &(0x7f0000000240)=ANY=[]) 18:51:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x20, 0x12, 0xe3b}, 0x20}}, 0x0) 18:51:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 18:51:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 18:51:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}]}, 0x4c}}, 0x0) 18:51:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:22 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="eb52c2e3bbbbaaaaaaaaaaaa8100000086dd60f954f700150653f195d583be600d238b5968e3e8a0f2f9ef7648118804cc2fc8bd653c511435ed6308a97082e491d91d35d23794"], 0x4f) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 18:51:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}]}, 0x4c}}, 0x0) 18:51:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r3, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66656c66bc05286d4a"], 0x21) 18:51:22 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) [ 207.345254][ T8771] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 18:51:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}]}, 0x4c}}, 0x0) 18:51:22 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 18:51:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x54}}, 0x0) 18:51:23 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x54}}, 0x0) 18:51:23 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$P9_RREAD(r1, &(0x7f00000001c0)={0xb}, 0xb) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 18:51:23 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x54}}, 0x0) 18:51:24 executing program 3: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000000)={0x0, 0x100, 0x4, 0x937a, 0x101, 0x1}) 18:51:24 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 18:51:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 18:51:24 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x48, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x48}}, 0x0) 18:51:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x48, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x48}}, 0x0) 18:51:24 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x48, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x48}}, 0x0) 18:51:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x48, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x48}}, 0x0) 18:51:24 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$P9_RREAD(r1, &(0x7f00000001c0)={0xb}, 0xb) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 18:51:24 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x48, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x48}}, 0x0) 18:51:25 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) creat(&(0x7f0000000140)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 18:51:25 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000083a0901800000000400010902240001000000000904000009030000000921130b000122220009058103"], 0x0) close(0xffffffffffffffff) open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) close(0xffffffffffffffff) open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\"\x00\x00\x00', @ANYRESHEX=r1], 0x0}, 0x0) 18:51:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x48, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x48}}, 0x0) 18:51:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 18:51:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 18:51:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x7, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r2, 0x2, &(0x7f0000000780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x1}, 0x0]) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba000000000000e9ff00000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x49}}, 0x0) 18:51:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) [ 210.610455][ T8886] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 210.628340][ T8886] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:51:25 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$P9_RREAD(r1, &(0x7f00000001c0)={0xb}, 0xb) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 18:51:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) [ 210.695271][ T8886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.729784][ T5] usb 4-1: new high-speed USB device number 4 using dummy_hcd 18:51:26 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) [ 210.819321][ T8886] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 210.892508][ T8886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 18:51:26 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) creat(&(0x7f0000000140)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) [ 211.018994][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 211.142688][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.170306][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.205719][ T5] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 211.332708][ T5] usb 4-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 211.346267][ T5] usb 4-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 211.382882][ T5] usb 4-1: Product: syz [ 211.407855][ T5] usb 4-1: config 0 descriptor?? [ 211.666795][ T29] audit: type=1800 audit(1590346286.855:8): pid=8872 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15835 res=0 [ 211.724234][ T29] audit: type=1800 audit(1590346286.895:9): pid=8872 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15835 res=0 [ 211.954597][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x3 [ 211.962031][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x3 [ 211.969940][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x3 [ 211.977799][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x3 [ 211.985630][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x3 [ 211.993558][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x3 [ 212.000964][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x3 [ 212.008901][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x3 [ 212.019278][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x3 [ 212.027205][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x3 [ 212.035035][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x3 [ 212.043459][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x3 [ 212.050879][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x3 [ 212.058784][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x3 [ 212.066613][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x3 [ 212.074473][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x3 [ 212.082057][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x0 [ 212.089971][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x0 [ 212.098022][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x0 [ 212.105851][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x0 [ 212.113668][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x0 [ 212.121075][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x0 [ 212.128895][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x0 [ 212.136977][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x0 [ 212.144795][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x0 [ 212.152895][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x0 [ 212.160302][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x0 [ 212.180017][ T5] hid-generic 0003:093A:8001.0002: unknown main item tag 0x0 [ 212.192467][ T5] hid-generic 0003:093A:8001.0002: hidraw0: USB HID vb.13 Device [syz] on usb-dummy_hcd.3-1/input0 [ 212.223008][ T5] usb 4-1: USB disconnect, device number 4 [ 212.932432][ T8137] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 213.172457][ T8137] usb 4-1: Using ep0 maxpacket: 8 [ 213.295421][ T8137] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.307461][ T8137] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.318507][ T8137] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 213.402734][ T8137] usb 4-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 213.411965][ T8137] usb 4-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 213.421065][ T8137] usb 4-1: Product: syz [ 213.429589][ T8137] usb 4-1: config 0 descriptor?? 18:51:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x7, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r2, 0x2, &(0x7f0000000780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x1}, 0x0]) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba000000000000e9ff00000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x49}}, 0x0) 18:51:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:28 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) creat(&(0x7f0000000140)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 18:51:28 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="eb52c2e3bbbbaaaaaaaaaaaa8100000086dd60f954f700150653f195d583be600d238b5968e3e8a0f2f9ef7648118804cc2fc8bd653c511435ed6308a97082e491d91d35d23794"], 0x4f) write$P9_RREAD(r1, &(0x7f00000001c0)={0xb}, 0xb) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 18:51:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 18:51:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000100)=0xae, 0x4) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x2000002) fallocate(r3, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@loopback}, {@in6=@ipv4={[0xe0], [], @dev}, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) [ 213.672424][ T8137] usbhid 4-1:0.0: can't add hid device: -71 [ 213.688732][ T8137] usbhid: probe of 4-1:0.0 failed with error -71 18:51:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) [ 213.719582][ T8137] usb 4-1: USB disconnect, device number 5 [ 213.778108][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.830804][ T8963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 18:51:29 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="eb52c2e3bbbbaaaaaaaaaaaa8100000086dd60f954f700150653f195d583be600d238b5968e3e8a0f2f9ef7648118804cc2fc8bd653c511435ed6308a97082e491d91d35d23794"], 0x4f) write$P9_RREAD(r1, &(0x7f00000001c0)={0xb}, 0xb) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 18:51:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:29 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="eb52c2e3bbbbaaaaaaaaaaaa8100000086dd60f954f700150653f195d583be600d238b5968e3e8a0f2f9ef7648118804cc2fc8bd653c511435ed6308a97082e491d91d35d23794"], 0x4f) write$P9_RREAD(r1, &(0x7f00000001c0)={0xb}, 0xb) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 18:51:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:29 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105804135000000000000909022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "7f8b6549892e018c19deca5c0c723200caa717d9"}, 0x15, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x20}}) 18:51:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:29 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="eb52c2e3bbbbaaaaaaaaaaaa8100000086dd60f954f700150653f195d583be600d238b5968e3e8a0f2f9ef7648118804cc2fc8bd653c511435ed6308a97082e491d91d35d23794"], 0x4f) write$P9_RREAD(r1, &(0x7f00000001c0)={0xb}, 0xb) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 18:51:29 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) ftruncate(0xffffffffffffffff, 0x2008001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 18:51:29 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 18:51:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000100)=0xae, 0x4) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x2000002) fallocate(r3, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@loopback}, {@in6=@ipv4={[0xe0], [], @dev}, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) 18:51:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="eb52c2e3bbbbaaaaaaaaaaaa8100000086dd60f954f700150653f195d583be600d238b5968e3e8a0f2f9ef7648118804cc2fc8bd653c511435ed6308a97082e491d91d35d23794"], 0x4f) write$P9_RREAD(r1, &(0x7f00000001c0)={0xb}, 0xb) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 18:51:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:51:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) [ 215.012475][ T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd 18:51:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="eb52c2e3bbbbaaaaaaaaaaaa8100000086dd60f954f700150653f195d583be600d238b5968e3e8a0f2f9ef7648118804cc2fc8bd653c511435ed6308a97082e491d91d35d23794"], 0x4f) write$P9_RREAD(r1, &(0x7f00000001c0)={0xb}, 0xb) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) [ 215.262329][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 215.302693][ T5] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 215.382845][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 215.404847][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.432407][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.452639][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 215.552700][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 215.572575][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.602366][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.612154][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 215.709636][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 215.721036][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.733700][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.743986][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 215.842763][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 215.855255][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.869191][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.880146][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 215.992746][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 216.003667][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.015103][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.025258][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 216.112651][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 216.123610][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.135728][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.146498][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 216.232442][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 216.243337][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.255887][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.266050][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 216.352662][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 216.363636][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.375015][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.384945][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 216.398021][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 216.407238][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.420609][ T5] usb 5-1: config 0 descriptor?? [ 216.895847][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0003/input/input8 [ 216.914846][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0003/input/input9 [ 217.015846][ T5] kye 0003:0458:5013.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 217.314676][ T2551] usb 5-1: USB disconnect, device number 2 [ 217.331228][ T2551] ================================================================== [ 217.339611][ T2551] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 217.347025][ T2551] Read of size 8 at addr ffff8880a3902150 by task kworker/1:2/2551 [ 217.354906][ T2551] [ 217.357354][ T2551] CPU: 1 PID: 2551 Comm: kworker/1:2 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 217.366880][ T2551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.377032][ T2551] Workqueue: usb_hub_wq hub_event [ 217.382043][ T2551] Call Trace: [ 217.385316][ T2551] dump_stack+0x18f/0x20d [ 217.389636][ T2551] ? __mutex_lock+0x1033/0x13c0 [ 217.394463][ T2551] ? __mutex_lock+0x1033/0x13c0 [ 217.399294][ T2551] print_address_description.constprop.0.cold+0xd3/0x413 [ 217.406292][ T2551] ? mousedev_destroy+0x20/0xa0 [ 217.411139][ T2551] ? __input_unregister_device+0x1b0/0x430 [ 217.416930][ T2551] ? input_unregister_device+0xb4/0xf0 [ 217.422989][ T2551] ? hidinput_disconnect+0x15e/0x3d0 [ 217.428248][ T2551] ? hid_disconnect+0x13f/0x1a0 [ 217.433099][ T2551] ? vprintk_func+0x97/0x1a6 [ 217.437679][ T2551] ? __mutex_lock+0x1033/0x13c0 [ 217.442515][ T2551] kasan_report.cold+0x1f/0x37 [ 217.447273][ T2551] ? __mutex_lock+0x1033/0x13c0 [ 217.452111][ T2551] __mutex_lock+0x1033/0x13c0 [ 217.456779][ T2551] ? print_usage_bug+0x240/0x240 [ 217.461696][ T2551] ? mousedev_cleanup+0x21/0x180 [ 217.466610][ T2551] ? trace_hardirqs_off+0x50/0x220 [ 217.471788][ T2551] ? mutex_trylock+0x2c0/0x2c0 [ 217.476533][ T2551] ? mark_held_locks+0x9f/0xe0 [ 217.481273][ T2551] ? kfree+0x1eb/0x2b0 [ 217.486100][ T2551] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 217.492070][ T2551] ? kfree_const+0x51/0x60 [ 217.496475][ T2551] ? dev_attr_show+0x90/0x90 [ 217.501131][ T2551] ? mousedev_cleanup+0x21/0x180 [ 217.506045][ T2551] mousedev_cleanup+0x21/0x180 [ 217.510798][ T2551] mousedev_destroy+0x28/0xa0 [ 217.515468][ T2551] __input_unregister_device+0x1b0/0x430 [ 217.521089][ T2551] input_unregister_device+0xb4/0xf0 [ 217.526356][ T2551] hidinput_disconnect+0x15e/0x3d0 [ 217.531446][ T2551] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 217.537147][ T2551] hid_disconnect+0x13f/0x1a0 [ 217.541819][ T2551] hid_device_remove+0x186/0x240 [ 217.546740][ T2551] ? hid_compare_device_paths+0xc0/0xc0 [ 217.552264][ T2551] device_release_driver_internal+0x231/0x500 [ 217.558311][ T2551] bus_remove_device+0x2dc/0x4a0 [ 217.563228][ T2551] device_del+0x481/0xd30 [ 217.567539][ T2551] ? device_link_add_missing_supplier_links+0x370/0x370 [ 217.574573][ T2551] ? mark_held_locks+0x9f/0xe0 [ 217.579318][ T2551] ? _raw_spin_unlock_irq+0x1f/0x80 [ 217.584514][ T2551] hid_destroy_device+0xe1/0x150 [ 217.589467][ T2551] usbhid_disconnect+0x9f/0xe0 [ 217.594213][ T2551] usb_unbind_interface+0x1bd/0x8a0 [ 217.599423][ T2551] ? __pm_runtime_idle+0xd1/0x320 [ 217.604427][ T2551] ? usb_autoresume_device+0x60/0x60 [ 217.609735][ T2551] device_release_driver_internal+0x432/0x500 [ 217.615796][ T2551] bus_remove_device+0x2dc/0x4a0 [ 217.620723][ T2551] device_del+0x481/0xd30 [ 217.625051][ T2551] ? device_link_add_missing_supplier_links+0x370/0x370 [ 217.631978][ T2551] ? usb_remove_ep_devs+0x3e/0x80 [ 217.636983][ T2551] ? remove_intf_ep_devs+0x13f/0x1d0 [ 217.642263][ T2551] usb_disable_device+0x211/0x690 [ 217.647289][ T2551] usb_disconnect+0x284/0x8d0 [ 217.651948][ T2551] hub_event+0x17ca/0x38f0 [ 217.656362][ T2551] ? hub_port_debounce+0x260/0x260 [ 217.661467][ T2551] ? usermodehelper_read_trylock+0xf0/0x2d0 [ 217.667358][ T2551] ? debug_smp_processor_id+0x2f/0x185 [ 217.672802][ T2551] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 217.678342][ T2551] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 217.684325][ T2551] process_one_work+0x965/0x16a0 [ 217.689246][ T2551] ? lock_release+0x800/0x800 [ 217.693903][ T2551] ? pwq_dec_nr_in_flight+0x310/0x310 [ 217.699257][ T2551] ? rwlock_bug.part.0+0x90/0x90 [ 217.704201][ T2551] worker_thread+0x96/0xe20 [ 217.708719][ T2551] ? process_one_work+0x16a0/0x16a0 [ 217.713917][ T2551] kthread+0x3b5/0x4a0 [ 217.717978][ T2551] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 217.723704][ T2551] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 217.729406][ T2551] ret_from_fork+0x24/0x30 [ 217.733825][ T2551] [ 217.736136][ T2551] Allocated by task 5: [ 217.740633][ T2551] save_stack+0x1b/0x40 [ 217.744782][ T2551] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 217.750449][ T2551] kmem_cache_alloc_trace+0x153/0x7d0 [ 217.755943][ T2551] mousedev_create+0x90/0xa20 [ 217.760627][ T2551] mousedev_connect+0x20/0x280 [ 217.765376][ T2551] input_attach_handler+0x194/0x200 [ 217.770603][ T2551] input_register_device.cold+0xf5/0x246 [ 217.776215][ T2551] hidinput_connect+0x4f8f/0xdb30 [ 217.781214][ T2551] hid_connect+0x96b/0xbc0 [ 217.785698][ T2551] hid_hw_start+0xa2/0x130 [ 217.790102][ T2551] kye_probe+0x44/0x536 [ 217.794242][ T2551] hid_device_probe+0x2be/0x3f0 [ 217.799222][ T2551] really_probe+0x281/0x6d0 [ 217.803717][ T2551] driver_probe_device+0xfe/0x1d0 [ 217.809087][ T2551] __device_attach_driver+0x1c2/0x220 [ 217.814467][ T2551] bus_for_each_drv+0x162/0x1e0 [ 217.819316][ T2551] __device_attach+0x21a/0x360 [ 217.824060][ T2551] bus_probe_device+0x1e4/0x290 [ 217.828903][ T2551] device_add+0xaf1/0x1900 [ 217.833472][ T2551] hid_add_device+0x33c/0x9a0 [ 217.838131][ T2551] usbhid_probe+0xac8/0xff0 [ 217.843048][ T2551] usb_probe_interface+0x305/0x7a0 [ 217.848139][ T2551] really_probe+0x281/0x6d0 [ 217.852635][ T2551] driver_probe_device+0xfe/0x1d0 [ 217.857651][ T2551] __device_attach_driver+0x1c2/0x220 [ 217.863020][ T2551] bus_for_each_drv+0x162/0x1e0 [ 217.867843][ T2551] __device_attach+0x21a/0x360 [ 217.872583][ T2551] bus_probe_device+0x1e4/0x290 [ 217.877431][ T2551] device_add+0xaf1/0x1900 [ 217.881825][ T2551] usb_set_configuration+0xec5/0x1740 [ 217.887200][ T2551] usb_generic_driver_probe+0x9d/0xe0 [ 217.892550][ T2551] usb_probe_device+0xc6/0x1f0 [ 217.897464][ T2551] really_probe+0x281/0x6d0 [ 217.901961][ T2551] driver_probe_device+0xfe/0x1d0 [ 217.906965][ T2551] __device_attach_driver+0x1c2/0x220 [ 217.912314][ T2551] bus_for_each_drv+0x162/0x1e0 [ 217.917140][ T2551] __device_attach+0x21a/0x360 [ 217.921885][ T2551] bus_probe_device+0x1e4/0x290 [ 217.926744][ T2551] device_add+0xaf1/0x1900 [ 217.931245][ T2551] usb_new_device.cold+0x753/0x103d [ 217.936425][ T2551] hub_event+0x1eca/0x38f0 [ 217.940939][ T2551] process_one_work+0x965/0x16a0 [ 217.945882][ T2551] worker_thread+0x96/0xe20 [ 217.950430][ T2551] kthread+0x3b5/0x4a0 [ 217.954505][ T2551] ret_from_fork+0x24/0x30 [ 217.958945][ T2551] [ 217.961252][ T2551] Freed by task 2551: [ 217.965216][ T2551] save_stack+0x1b/0x40 [ 217.969363][ T2551] __kasan_slab_free+0xf7/0x140 [ 217.974217][ T2551] kfree+0x109/0x2b0 [ 217.978088][ T2551] device_release+0x71/0x200 [ 217.983003][ T2551] kobject_put+0x1c8/0x2f0 [ 217.987452][ T2551] cdev_device_del+0x69/0x80 [ 217.992139][ T2551] mousedev_destroy+0x20/0xa0 [ 217.996816][ T2551] __input_unregister_device+0x1b0/0x430 [ 218.002452][ T2551] input_unregister_device+0xb4/0xf0 [ 218.007733][ T2551] hidinput_disconnect+0x15e/0x3d0 [ 218.012837][ T2551] hid_disconnect+0x13f/0x1a0 [ 218.017501][ T2551] hid_device_remove+0x186/0x240 [ 218.022430][ T2551] device_release_driver_internal+0x231/0x500 [ 218.028498][ T2551] bus_remove_device+0x2dc/0x4a0 [ 218.033429][ T2551] device_del+0x481/0xd30 [ 218.037734][ T2551] hid_destroy_device+0xe1/0x150 [ 218.042664][ T2551] usbhid_disconnect+0x9f/0xe0 [ 218.047406][ T2551] usb_unbind_interface+0x1bd/0x8a0 [ 218.052652][ T2551] device_release_driver_internal+0x432/0x500 [ 218.058758][ T2551] bus_remove_device+0x2dc/0x4a0 [ 218.063677][ T2551] device_del+0x481/0xd30 [ 218.067984][ T2551] usb_disable_device+0x211/0x690 [ 218.073007][ T2551] usb_disconnect+0x284/0x8d0 [ 218.077659][ T2551] hub_event+0x17ca/0x38f0 [ 218.082069][ T2551] process_one_work+0x965/0x16a0 [ 218.086983][ T2551] worker_thread+0x96/0xe20 [ 218.091470][ T2551] kthread+0x3b5/0x4a0 [ 218.095519][ T2551] ret_from_fork+0x24/0x30 [ 218.099928][ T2551] [ 218.102254][ T2551] The buggy address belongs to the object at ffff8880a3902000 [ 218.102254][ T2551] which belongs to the cache kmalloc-2k of size 2048 [ 218.116308][ T2551] The buggy address is located 336 bytes inside of [ 218.116308][ T2551] 2048-byte region [ffff8880a3902000, ffff8880a3902800) [ 218.129674][ T2551] The buggy address belongs to the page: [ 218.135298][ T2551] page:ffffea00028e4080 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 218.145785][ T2551] flags: 0xfffe0000000200(slab) [ 218.150725][ T2551] raw: 00fffe0000000200 ffffea00028c4208 ffffea00023836c8 ffff8880aa000e00 [ 218.159418][ T2551] raw: 0000000000000000 ffff8880a3902000 0000000100000001 0000000000000000 [ 218.168019][ T2551] page dumped because: kasan: bad access detected [ 218.174499][ T2551] [ 218.176810][ T2551] Memory state around the buggy address: [ 218.182421][ T2551] ffff8880a3902000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 218.190487][ T2551] ffff8880a3902080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 218.198553][ T2551] >ffff8880a3902100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 218.206589][ T2551] ^ [ 218.213240][ T2551] ffff8880a3902180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 218.221276][ T2551] ffff8880a3902200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 218.229510][ T2551] ================================================================== [ 218.237642][ T2551] Disabling lock debugging due to kernel taint [ 218.253761][ T2551] Kernel panic - not syncing: panic_on_warn set ... [ 218.260392][ T2551] CPU: 1 PID: 2551 Comm: kworker/1:2 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 218.271361][ T2551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.281461][ T2551] Workqueue: usb_hub_wq hub_event [ 218.286491][ T2551] Call Trace: [ 218.289790][ T2551] dump_stack+0x18f/0x20d [ 218.294132][ T2551] ? __mutex_lock+0xf50/0x13c0 [ 218.298989][ T2551] panic+0x2e3/0x75c [ 218.302897][ T2551] ? __warn_printk+0xf3/0xf3 [ 218.307498][ T2551] ? preempt_schedule_common+0x5e/0xc0 [ 218.312957][ T2551] ? __mutex_lock+0x1033/0x13c0 [ 218.317816][ T2551] ? __mutex_lock+0x1033/0x13c0 [ 218.322667][ T2551] ? preempt_schedule_thunk+0x16/0x18 [ 218.328138][ T2551] ? trace_hardirqs_on+0x55/0x230 [ 218.333140][ T2551] ? __mutex_lock+0x1033/0x13c0 [ 218.338021][ T2551] ? __mutex_lock+0x1033/0x13c0 [ 218.342853][ T2551] end_report+0x4d/0x53 [ 218.347195][ T2551] kasan_report.cold+0xd/0x37 [ 218.351975][ T2551] ? __mutex_lock+0x1033/0x13c0 [ 218.356810][ T2551] __mutex_lock+0x1033/0x13c0 [ 218.362293][ T2551] ? print_usage_bug+0x240/0x240 [ 218.367251][ T2551] ? mousedev_cleanup+0x21/0x180 [ 218.372203][ T2551] ? trace_hardirqs_off+0x50/0x220 [ 218.377301][ T2551] ? mutex_trylock+0x2c0/0x2c0 [ 218.382073][ T2551] ? mark_held_locks+0x9f/0xe0 [ 218.386877][ T2551] ? kfree+0x1eb/0x2b0 [ 218.390944][ T2551] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 218.396920][ T2551] ? kfree_const+0x51/0x60 [ 218.401365][ T2551] ? dev_attr_show+0x90/0x90 [ 218.405936][ T2551] ? mousedev_cleanup+0x21/0x180 [ 218.410854][ T2551] mousedev_cleanup+0x21/0x180 [ 218.415615][ T2551] mousedev_destroy+0x28/0xa0 [ 218.420309][ T2551] __input_unregister_device+0x1b0/0x430 [ 218.425930][ T2551] input_unregister_device+0xb4/0xf0 [ 218.431202][ T2551] hidinput_disconnect+0x15e/0x3d0 [ 218.436304][ T2551] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 218.441846][ T2551] hid_disconnect+0x13f/0x1a0 [ 218.446501][ T2551] hid_device_remove+0x186/0x240 [ 218.451429][ T2551] ? hid_compare_device_paths+0xc0/0xc0 [ 218.456957][ T2551] device_release_driver_internal+0x231/0x500 [ 218.463001][ T2551] bus_remove_device+0x2dc/0x4a0 [ 218.467919][ T2551] device_del+0x481/0xd30 [ 218.472233][ T2551] ? device_link_add_missing_supplier_links+0x370/0x370 [ 218.479146][ T2551] ? mark_held_locks+0x9f/0xe0 [ 218.483888][ T2551] ? _raw_spin_unlock_irq+0x1f/0x80 [ 218.489096][ T2551] hid_destroy_device+0xe1/0x150 [ 218.494016][ T2551] usbhid_disconnect+0x9f/0xe0 [ 218.498760][ T2551] usb_unbind_interface+0x1bd/0x8a0 [ 218.503936][ T2551] ? __pm_runtime_idle+0xd1/0x320 [ 218.508953][ T2551] ? usb_autoresume_device+0x60/0x60 [ 218.514234][ T2551] device_release_driver_internal+0x432/0x500 [ 218.520278][ T2551] bus_remove_device+0x2dc/0x4a0 [ 218.525195][ T2551] device_del+0x481/0xd30 [ 218.529506][ T2551] ? device_link_add_missing_supplier_links+0x370/0x370 [ 218.537390][ T2551] ? usb_remove_ep_devs+0x3e/0x80 [ 218.542507][ T2551] ? remove_intf_ep_devs+0x13f/0x1d0 [ 218.547803][ T2551] usb_disable_device+0x211/0x690 [ 218.552857][ T2551] usb_disconnect+0x284/0x8d0 [ 218.557518][ T2551] hub_event+0x17ca/0x38f0 [ 218.562014][ T2551] ? hub_port_debounce+0x260/0x260 [ 218.567107][ T2551] ? usermodehelper_read_trylock+0xf0/0x2d0 [ 218.573108][ T2551] ? debug_smp_processor_id+0x2f/0x185 [ 218.578661][ T2551] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 218.584192][ T2551] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 218.590190][ T2551] process_one_work+0x965/0x16a0 [ 218.595184][ T2551] ? lock_release+0x800/0x800 [ 218.599846][ T2551] ? pwq_dec_nr_in_flight+0x310/0x310 [ 218.605202][ T2551] ? rwlock_bug.part.0+0x90/0x90 [ 218.610119][ T2551] worker_thread+0x96/0xe20 [ 218.614748][ T2551] ? process_one_work+0x16a0/0x16a0 [ 218.619940][ T2551] kthread+0x3b5/0x4a0 [ 218.623997][ T2551] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 218.629706][ T2551] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 218.635415][ T2551] ret_from_fork+0x24/0x30 [ 218.641301][ T2551] Kernel Offset: disabled [ 218.645629][ T2551] Rebooting in 86400 seconds..