[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 76.513663][ T32] audit: type=1800 audit(1570436376.564:25): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 76.551897][ T32] audit: type=1800 audit(1570436376.584:26): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 76.572226][ T32] audit: type=1800 audit(1570436376.594:27): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.40' (ECDSA) to the list of known hosts. 2019/10/07 08:19:51 fuzzer started 2019/10/07 08:19:55 dialing manager at 10.128.0.26:41347 2019/10/07 08:19:56 syscalls: 2412 2019/10/07 08:19:56 code coverage: enabled 2019/10/07 08:19:56 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/07 08:19:56 extra coverage: enabled 2019/10/07 08:19:56 setuid sandbox: enabled 2019/10/07 08:19:56 namespace sandbox: enabled 2019/10/07 08:19:56 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/07 08:19:56 fault injection: enabled 2019/10/07 08:19:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/07 08:19:56 net packet injection: enabled 2019/10/07 08:19:56 net device setup: enabled 2019/10/07 08:19:56 concurrency sanitizer: /proc/kcsaninfo does not exist 08:23:53 executing program 0: r0 = socket(0x10000000011, 0x8000000003, 0x0) close(r0) r1 = socket(0x2, 0x10000000000003, 0x0) connect$unix(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8202c0ffffffffffffff"], 0x10) shutdown(r0, 0x0) write(r0, 0x0, 0x0) syzkaller login: [ 334.078550][T11476] IPVS: ftp: loaded support on port[0] = 21 [ 334.218788][T11476] chnl_net:caif_netlink_parms(): no params data found [ 334.283801][T11476] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.291003][T11476] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.299748][T11476] device bridge_slave_0 entered promiscuous mode [ 334.310324][T11476] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.317545][T11476] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.326292][T11476] device bridge_slave_1 entered promiscuous mode [ 334.359308][T11476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.372119][T11476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.406059][T11476] team0: Port device team_slave_0 added [ 334.415221][T11476] team0: Port device team_slave_1 added [ 334.606549][T11476] device hsr_slave_0 entered promiscuous mode [ 334.852521][T11476] device hsr_slave_1 entered promiscuous mode [ 335.022077][T11476] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.029319][T11476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.037115][T11476] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.044436][T11476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.123330][T11476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.143116][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.155268][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.164994][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.177540][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 335.198326][T11476] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.215978][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.225406][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.235637][T11479] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.242884][T11479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.290034][T11476] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.301210][T11476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.317459][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.327143][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.336175][T11479] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.344240][T11479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.352643][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.362820][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.373493][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.383244][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.393651][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.404000][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.413556][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.422746][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.432639][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.441835][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.477173][T11476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.585109][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.594131][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 08:23:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0xaa03b22d1fdfa23d, 0x0) 08:23:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x142, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) 08:23:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)}], 0x1, 0x81806) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x40fdf) 08:23:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000f00)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xe1\xa2\xba\xe5\xf4\x97\xac#*\x1f\x17\xeb\x06\xed\xe5\xdb\x8dr\xa3@!\x16\xc4\xf4\x85\xa7N\xd0*U\xa7\xed\xe1\x8a5tl\xec\xda~l\xbd]\r\xfaI\xa9\xf9\x10\xc8;\xef\xce\xfe\v\xa0(\x8fx\x03\xf1\xf2\x8bh\xd4\xdd\xbc\x1d\x8e', 0x0) write(r3, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) 08:23:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x208007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:23:56 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x8000000000000005, 0x0, 0x2, 0x6}) r3 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1e5e, 0x313, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000270000002700166cfb0538688411aa02e5a58f682c369634254429214bc77c3b44348d76b5"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 336.502385][ T17] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 336.761958][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 336.882041][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.893283][ T17] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 336.906261][ T17] usb 1-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 336.915507][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.925884][ T17] usb 1-1: config 0 descriptor?? 08:23:57 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10000, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x428002, 0x0) write$P9_RMKNOD(r1, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x0, 0x1, 0x1}}, 0x14) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r3 = getuid() clone3(&(0x7f0000000980)={0x20010800, &(0x7f0000000700), &(0x7f0000000740)=0x0, &(0x7f0000000780), 0x18, 0x0, &(0x7f00000007c0)=""/239, 0xef, &(0x7f00000008c0)=""/144}, 0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000ac0)=0xe8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000b00)=0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/null\x00', 0x101000, 0x0) stat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000012c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001300)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000001400)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440)={0x0, 0x0, 0x0}, &(0x7f0000001480)=0xc) r12 = fspick(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', 0x1) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001500)='/dev/kvm\x00', 0x1000, 0x0) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup.net/syz1\x00', 0x200002, 0x0) r15 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001580)='/dev/urandom\x00', 0x200, 0x0) r16 = getpgrp(0x0) getresuid(&(0x7f00000015c0)=0x0, &(0x7f0000001600), &(0x7f0000001640)) stat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = openat$random(0xffffffffffffff9c, &(0x7f0000001740)='/dev/urandom\x00', 0x8200, 0x0) sendmsg$netlink(r2, &(0x7f0000001840)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001240)=[{&(0x7f0000000140)={0x1c8, 0x33, 0x200, 0x70bd29, 0x25dfdbfd, "", [@generic="e14df96e1ae26c024426e76c1eb0ef8b249c21ac00307f7f2e1b7b9fcaae2655f6c14efd53bbd6356e3ca1f582e9145c7e89b4fa1ebcef42bcbcec5bbd7261ee0beacc72cf50adb915263b8f14030da1aeed37bb2a66d3e4efda92d6ce05ac9c8880d530faa2302161cb0bcbf5db6e47848fbd2a6f764178ca1eafdd8d65617ce5fb10efa9f0bb56dc55d3c7522d904586c4203306a8ea3932b902537b7209fb34a1e7735608ffa70b3cdd51904b5648e079452a16cdaab6c1c828e1080a19bb999589673d6fd3e3ed8a140cbb7a489509e7bbca90b972301044bc47b683bdaacdcacc852a49594d086f967eec251e54e83b5c", @generic="f90652e1c3f89152dcd58de4ea006a82197d", @typed={0xb0, 0x23, @binary="b08c0903be3843b8bebe4a01fa533020a946ed6b44e8f2e4fcb8497c6855e17a35916054e8427bc729629b6457581cf9e202476e5532a36660766688b15a40d7e6308c3d8cbf6e972aa7b80f9dce0526091edd14b5492c378f39ecdeb802aba106548d125fde891090a656931a31cf3c53e1b418214ef575ec20c6f19cf2da895a01bd61c21f51205edd5b7d2e8e213831840615a5a1c715a173b7e330f33caaf7ae69cc8b2ad1248162f207"}]}, 0x1c8}, {&(0x7f0000000340)={0x398, 0x3d, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@generic="e6fd36b3c13b9b9d51580046", @nested={0x1e8, 0x58, [@typed={0x14, 0x2a, @ipv6=@loopback}, @generic="4e5883c6cb820b0e504b367311bebe6a4b9da563fd63690f70caf0a54b097a93ed02fec3d24d447e12dd53f7c3ff2bd090c7123dc0be0fb44dbbc055a2009e8da7815e2df7a0d2780f46a978c34f1bc3653d49a07f5a806521a420030c5d7c92a739450012f940d0e656034957a79bc16a26d3094e5d93e365a7d659e71234aec3fa9e59106448ce1a2a0513906bf099bb8336729ea35ade0be2d1a99227dfa7dca7fc2a516b1ad7458db072e069", @generic="59f35bebd9f9957c5aeb6f786480b97312dbf2509aedecf6dcef773e614fc2cca1a3279530406e6105d5d5469ef86f1d9aa640739e199748136c52397643bd77e26ea1463b9133ffed6de8b7a3831d4b5d093173c7a70773ac18b68a9bc1f02894839a937538ccd6792c3e7e2b7a58ffd404e3d3d047569a84d6ab", @generic="847ba8cc8f7c447d54c2cf240a7a81a9f89b5d4d3d86190b1823e33aac7ac05487c80444c73ff0a6255ad23f3aca9f25a9a74f3eb32399d7e4e93607e1ee5db57a3f58c64f03d0318488a4144e4a52facbe1146dc175924585c8615f20d650681528f98bffadf8a6c395448ca177e8c40c939d867ee0f3d6fe446b58373244811f7fc2d88968dd2a896e6f3468827e3724048477d16fa02325cc0b93d74e", @typed={0x8, 0x3c, @fd=r1}]}, @nested={0x130, 0x7b, [@typed={0x8, 0x49, @uid=r3}, @typed={0x14, 0x1f, @ipv6=@remote}, @generic="a86674b7ecdd5949a16024cce896c0c8430c73fdfef2782cf50f0bbdc9d7a669dfb2726238b88ec51e5a69ba084d040f9657e7a68ec487fb9990bca9564760bf16461de77d8a686e3013be92642b1f8e76c8163c8251dadf48227e25896fa3e04bca0f4a4afef670904650f9890971474db33b178ca948afd9dc53ea69f1a27c3e1b989c484f4461dc9cd84d75228b93f4512d7f8546924188b7022175dd10978726829f8071b50a3fbd4ff193ab294adc3e06d86158f7a2646f6595afd72959c5c3ea82a8ad11df72b98c101e40a24bd78ec52e038488cca3657bea82e02a25f9d277ce4d7f94a0029a13b2faf24ea1369121fa99", @generic="b5f7b8c3a58b6c7bf5a2eccebc0d02f8671ad231ee4680bd"]}, @generic="4eb08159b33410d9884ca109d3a4355d0eebebe8551c6c4d6d0d8ca4470c0648a3a3a71a939af3a107b3776a9fb5d6cb85bf250d9b68ecca32ec13bf432db88c5979b08a55db19ca611581777d98a73bde", @typed={0x8, 0x72, @ipv4=@multicast1}, @typed={0x8, 0x24, @u32=0x6}]}, 0x398}, {&(0x7f0000000b40)={0x2f8, 0x16, 0x10, 0x70bd2d, 0x25dfdbff, "", [@generic="f66dbde9e031d7478a9d6a767b3531c376fca614dc4f657346a5cc884a7988ef173c52798890619fb046422daa465dc24a2916811f14c7bbb32d35b6f4c004df0ae922b6b999045874894cea2cc43bcb52970823b1f8807074", @nested={0x80, 0x5b, [@generic="15d098d8f671ec2afc45c40a2f537e0acaf9467b722dd09d5069124b0534ba74f171d64e65470c5f0aef78fc823a0e3a0d8761e76fd96377a6002b8cc3cb6446fe22da8b68b936b984988670e23b197800422addb48c30bc3337500968a9a26f7937d3f92bb600e6b3f7d64aba890ba53ad0", @typed={0x8, 0x96, @u32=0x7}]}, @nested={0x1f0, 0x26, [@generic="c977f2a09d33d715d0e5dedd5d412e532feaac829166b51468820b422744787b8416fc34b2f76e5a98657cb399fa5bbb3219ddf2dfec99b0723c165ccf9b7211f98883a02cc4a8ed48f8f51b0afd31c6b3eda5559db8b00f0bf78e1252cc0d7a02967c1608e718899f07cad5a22fe5b0a9632f8f49349801e22a1b53967c95a4a79f51622a2e8dd46ec83a3d65d681d9d36e1ecff23e00b3770a25ee2bbae0bb910c5e2294fae97876faa3f1cac2f7e1ea199ef655b2dc888c1b02ea0aec1572994eccc255ec5fdf92acf34060", @typed={0x8, 0x34, @pid=r4}, @typed={0x8, 0x50, @uid=r5}, @generic, @typed={0x8, 0x8, @pid=r6}, @generic="fdfb9394dbedd553e45eed73b246144235ca5141d73d711bc748acb32a9317e6f402cdcfd1b3d006d08bc57ba007e4bab31f38ee233595caac1d0b14f86a2504e8bf805d47e02ea327097d460ad3f25bad50770bdeafa7dea7aeb366cd1e6cace1fa19daf38bcd3d1bb0f5e483c299cc02eaf03de4baf9b4e0adc019ae3099eba5b3c317bb98535d01c2e5cfb506", @generic="f33d4fefd6225199a1f4308e1be98b791e3af577c80230776ba3642d8a6e3f24193455e38ff2e27b8ab750156dafcbbdc4bd42ade1ec61f649f6ce3b9b9b78ab5183e4fc2af4a2f20d288c369d8c70f58f59a053c3319bc6c9c15dada1efa6c2b51652c1ef69fbc118920c77855bac6b7056d77caa98f703bf"]}, @typed={0x1c, 0xe, @str='/proc/capi/capi20ncci\x00'}]}, 0x2f8}, {&(0x7f0000000e40)={0x1c, 0x26, 0x300, 0x70bd26, 0x25dfdbfd, "", [@nested={0xc, 0x3e, [@typed={0x8, 0x45, @ipv4=@remote}]}]}, 0x1c}, {&(0x7f0000000ec0)={0x214, 0x1, 0x400, 0x70bd26, 0x25dfdbfc, "", [@nested={0x5c, 0x3, [@generic="9e9b78163610cb00e1b4894cb9a8408ef594c904ac6fbf13e6bcaa9b8222c9cbfed422f264cc9787ff9ab637ada983868387d7047bb5f58aad23c0912bcb816423049d70f8", @generic="3baf6442ae42e926", @typed={0x8, 0x47, @fd=r7}, @generic]}, @generic="327d86924948d996d9b381bdf5f732794b0f25bfc252af8db3a3c448b90a22cea700feabc41b9b7aaa247740e45d616bda30d4647963c3d26cca93888aed5a1f6f74fa9d0e36a503ba124d5e636f3e6ae73ac19ba508bf70920c1209cf1b23e1c9efa615758e19d4bb3f047d6cf5334b31eac202d33adde915090ff0259fbb25fdfee3a6ae78d02029091f25f617705d55", @typed={0x8, 0x29, @ipv4=@loopback}, @generic="161826236702346cf96ea249a2fb8c6c08c66f3d6cf29663c38b5e7622b783b87e0bc1925b027f11ab2d7749fce213a25af1f56487", @nested={0xd8, 0x5c, [@generic="a819d0a28b44a674f0f142b820ee962dcbd47c672c9e80cde08d982317adba2713a4e1cef39b33a3e990f55b254069f0c71f7cf77acf9937afb92a4c22b226864e62d78944fab7c9788fe31b30eb1e38ad3de62518df1aff2b6c8c9f02f73572cf1ba5ed9921bc10a5becdc1dc7e5929f6bbe8204c20f233d0f75c055a87efa5dcf6573051f5455b83a12ed3dccb2dc9c4d070b25c2cc750093eb7001c0f796db8a6de553259aab688810c0cce0eb486fdca9a632b5ccb185148cfb9ba3e7b8ee01b", @typed={0x8, 0x3f, @u32=0xfe1}, @typed={0x8, 0x35, @u32=0x3f}]}]}, 0x214}, {&(0x7f00000011c0)={0x64, 0x19, 0x9b81b2eab93fbd71, 0x70bd27, 0x25dfdbfe, "", [@generic, @typed={0x8, 0x69, @uid=r8}, @generic="10690778c9ecee78e15521360f6d2d7662aa924492d6c1a0e4bd3f63f0bd6632770c835a28bdc8688a7e5729a0fd561cbe87bda602183dd3aa0ff30255c55fdace1500db", @typed={0x8, 0x7f, @u32}, @generic]}, 0x64}], 0x6, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x30, 0x1, 0x1, [r12, r13, r14, r15, 0xffffffffffffffff, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [r19, r0]}}], 0xa0, 0x880}, 0xc93a2b04d5434821) stat(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000001940)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000001980)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000019c0)={r20, r21}) r22 = openat$full(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/full\x00', 0x800, 0x0) bind(r22, &(0x7f0000001a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x80) r23 = socket(0x2, 0x7, 0x6c) bind$rds(r23, &(0x7f0000001ac0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) [ 337.399688][T11519] IPVS: ftp: loaded support on port[0] = 21 [ 337.412651][ T17] hid (null): report_id 0 is invalid [ 337.418325][ T17] hid (null): global environment stack underflow [ 337.439974][ T17] hid-generic 0003:1E5E:0313.0001: report_id 0 is invalid [ 337.447737][ T17] hid-generic 0003:1E5E:0313.0001: item 0 0 1 8 parsing failed [ 337.455990][ T17] hid-generic: probe of 0003:1E5E:0313.0001 failed with error -22 [ 337.598905][T11519] chnl_net:caif_netlink_parms(): no params data found [ 337.624493][ T17] usb 1-1: USB disconnect, device number 2 [ 337.682052][T11519] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.689524][T11519] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.698344][T11519] device bridge_slave_0 entered promiscuous mode [ 337.709095][T11519] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.716425][T11519] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.725193][T11519] device bridge_slave_1 entered promiscuous mode [ 337.759499][T11519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.773426][T11519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.808430][T11519] team0: Port device team_slave_0 added [ 337.818019][T11519] team0: Port device team_slave_1 added [ 337.887413][T11519] device hsr_slave_0 entered promiscuous mode [ 338.052551][T11519] device hsr_slave_1 entered promiscuous mode [ 338.172043][T11519] debugfs: Directory 'hsr0' with parent '/' already present! [ 338.202280][T11519] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.212009][T11519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.219888][T11519] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.227530][T11519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.315580][T11519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.338838][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.349512][T11479] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.359880][T11479] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.372516][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 338.395259][T11519] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.413568][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.423767][T11479] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.431468][T11479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.493245][T11519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 338.504173][T11519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.523459][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.532986][T11479] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.540346][T11479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.550898][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.561198][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 338.570899][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.580604][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 338.595796][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 338.604712][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 338.638167][T11519] 8021q: adding VLAN 0 to HW filter on device batadv0 08:23:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0xe31, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b88fe130907639e}}, 0xb8}, 0x8}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x80820, 0x0) ioctl$CAPI_INSTALLED(r1, 0x80024322) 08:23:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa982}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000740)=""/74) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {0x0, r4}}, 0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4], 0x0, 0x617}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)=[&(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000180)='/dev/kvm\x00', &(0x7f0000000240)='/dev/kvm\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='uservboxnet0^wlan0vboxnet1selfself\x00', &(0x7f0000000400)='/dev/kvm\x00', &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', &(0x7f00000004c0)='/dev/kvm\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='#(vmnet0\t\x00', &(0x7f00000005c0)='\x00']) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_GET_NR_MMU_PAGES(r7, 0xae45, 0x3) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat(r8, &(0x7f00000006c0)='./file0\x00', 0x100100, 0x1) ioctl$IMCLEAR_L2(r9, 0x80044946, &(0x7f0000000700)=0xfff) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r11, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110600, 0xffffffffffffffff}}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000680)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r11, 0x0, 0x2, 0x4}}, 0x20) 08:23:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x7b, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) r4 = dup2(r1, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000000080)=""/79) dup3(r4, r2, 0x0) [ 338.916534][T11538] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 08:23:59 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0xe, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x47}, [@ldst={0x3, 0x3, 0x0, 0x7, 0x0, 0x0, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x6, 0x0, 0x9, 0x8, 0x30, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @generic={0xfd, 0x3, 0x7, 0x0, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @alu={0x7, 0x1, 0x1, 0xe, 0x6, 0x20, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000001200), 0x10}, 0x70) 08:23:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f000072eff0)=[{&(0x7f0000000400)="480000001500257f09004b01fcfc8c860a0600000017e0060000e30900000000000000000000ffff5bf109000000ed5e0000008e0d8615004b76006203005b000000000000000000", 0x1e0}], 0x10000000000000f8) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='\x04\x00\x00\x00/cas\x00', 0x624000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000540)="3900000011000904680707002b0000000700ff07010000c86425cd7652eb83e39bc8f29b3f001a00f35eb7f5e600"/57, 0x39}], 0x1) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000540)="3900000011000904680707002b0000000700ff07010000c86425cd7652eb83e39bc8f29b3f001a00f35eb7f5e600"/57, 0x39}], 0x1) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000140)) init_module(&(0x7f0000000000)='trusted\'*\'', 0xa, &(0x7f0000000040)='.\xc5%user\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSBRK(r5, 0x5427) 08:23:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r3}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={r3, 0x3f}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r4, 0x5}, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000000)="f5066a0f2e"}], 0x2, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$inet(r8, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) splice(r6, 0x0, r8, 0x0, 0x10005, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000540)="3900000011000904680707002b0000000700ff07010000c86425cd7652eb83e39bc8f29b3f001a00f35eb7f5e600"/57, 0x39}], 0x1) close(r9) 08:23:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket(0x200000000010, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x1, 0x0, 0x3, 0xc, 0xfff8, 0x5}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r3}, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={r3, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 08:23:59 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000040)=""/15) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x5}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 08:23:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x223, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x2a0000010}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1709, 0x0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x0, 0x0) socket$tipc(0x1e, 0x8000000005, 0x0) shutdown(0xffffffffffffffff, 0x2) dup2(r3, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x200000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0xe4f6daf2a5379a16, 0x0) ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f0000000180)) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0) [ 339.672739][ C1] hrtimer: interrupt took 33739 ns [ 340.032329][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 340.038932][ C0] protocol 88fb is buggy, dev hsr_slave_1 08:24:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x7, @pix={0x1}}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x10, &(0x7f00000001c0)={&(0x7f00000002c0)=""/235, 0xeb}}, 0x10) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x0, 0x8000}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:24:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x56a, 0xe5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4f0882, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="001aee"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 340.872379][ T12] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 341.272246][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.283877][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 341.297915][ T12] usb 1-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.40 [ 341.307836][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.362253][ T12] usb 1-1: config 0 descriptor?? [ 341.858007][ T12] wacom 0003:056A:00E5.0002: unknown main item tag 0x0 [ 341.887168][ T12] wacom 0003:056A:00E5.0002: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.0-1/input0 [ 342.059257][ T17] usb 1-1: USB disconnect, device number 3 08:24:02 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x64, 0x1, 0x7}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="2bd92d907689c3d93d2f620243257b57d239bbdb30be4f8cd1e1390ad82038d2e11ed96767e789afcf49b7670d1379a5e4e9375b284f0af1805e199efba30d71208c4e690d77b42d855c5a356019a425980e523372445f0c7ebd114c63c9996a1c38ac7561ae3445ac3b3efae8c768ea923e4fbbc4caa34262b1863acdc6ccd93b5251adae", 0x85) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x100, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x404000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)={0x1}) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x2, 0x3c) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000200)={0x4, 0xfffffffe, 0x400, 0x5}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x0, 0x0) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x110, r1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r5 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x280) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000300)) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x500, 0x0) ioctl$PPPIOCGDEBUG(r6, 0x80047441, &(0x7f0000000380)) chdir(&(0x7f00000003c0)='./file0\x00') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='mountstats\x00') accept4$inet6(r7, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x1c, 0x80000) r8 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x0, 0x103021) ioctl$SNDRV_TIMER_IOCTL_STOP(r8, 0x54a1) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000500)='/proc/capi/capi20\x00', 0x800, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000540)) connect$rds(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) syz_usb_connect$cdc_ncm(0x5, 0x78, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x4, 0x20, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x1, "18aa9f6e3b"}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0xff, 0x9, 0x33}, {0x6, 0x24, 0x1a, 0x1}, [@obex={0x5, 0x24, 0x15, 0x64}]}, {{0x9, 0x5, 0x81, 0x3, 0x5c, 0x10, 0x3, 0x2}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x0, 0x1}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x2, "", {{{0x9, 0x5, 0x82, 0x2, 0x247, 0x2, 0x2, 0x61}}, {{0x9, 0x5, 0x3, 0x2, 0x103, 0x2, 0x7, 0x7}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x310, 0x81, 0x2, 0xba, 0x18, 0x7}, 0x20, &(0x7f0000000680)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "3e467dff4a412f446f7db2609d760f8d"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xf, 0x4, 0x1ff}]}, 0x5, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x240a}}, {0x66, &(0x7f0000000740)=@string={0x66, 0x3, "3e7a4730561d4d84ef6b841d2907fdde7679aa8d79c31d72eecc7b17669be7b17f98e417d6b9b0080bf628ee480452e2462559aa1eaa555656814b0b0a3753cec854abe9b3116267aff58ede9c622316751f8ec57a1d614ebdab96067867b3d7ff7d1384"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x40f}}, {0xcf, &(0x7f0000000800)=@string={0xcf, 0x3, "2b9f6bb9a80c5da75518668eba4e1dfd8fcff494bcb14f83da94ece82f0c1b64d6acaad3423ce613aa30b3ae3a97b6e81f3ed1e8c1e18d76d9442dd27096ea62c5b408bb0e425cff33172cd4d132d5fb70ae5c1656444f3e002533bbbe6b0898b4bb46fd415c6f83d4dc9d5937148fd5284f57b4907192d026fb76de9313226e4fbf49cd1527053a4f684bf5c291817e9f0b655b900e0628ecc1bc3c984f59f9c722c99573307884c5bda1076174690596ab3b4515e7c606880734f59928095aa7e2bc267f70d01fbdb1059414"}}]}) setxattr$trusted_overlay_nlink(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='trusted.overlay.nlink\x00', &(0x7f0000000a00)={'U-', 0x3ff}, 0x28, 0x2e22d7e2f84a2081) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000000a80)=""/91) ioctl$TCGETX(r9, 0x5432, &(0x7f0000000b00)) [ 342.842933][ T17] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 343.202941][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.214289][ T17] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 343.227281][ T17] usb 1-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.40 [ 343.236463][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.313040][ T17] usb 1-1: config 0 descriptor?? [ 343.333041][T11589] IPVS: ftp: loaded support on port[0] = 21 [ 343.503514][T11589] chnl_net:caif_netlink_parms(): no params data found [ 343.564651][T11589] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.572322][T11589] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.581056][T11589] device bridge_slave_0 entered promiscuous mode [ 343.593237][T11589] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.600505][T11589] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.609382][T11589] device bridge_slave_1 entered promiscuous mode [ 343.643877][T11589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 08:24:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x101000) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0xffffffff00000000) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xf7cd99f63b76997e, 0x28812, r0, 0x0) [ 343.695483][T11589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.732716][ T17] usbhid 1-1:0.0: can't add hid device: -71 [ 343.738905][ T17] usbhid: probe of 1-1:0.0 failed with error -71 08:24:03 executing program 0: r0 = socket$kcm(0x10, 0x803, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000017c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000000)={0x22, 0x3, 0x0, {0x0, 0x1, 0x0, '-'}}, 0x22) [ 343.760612][T11589] team0: Port device team_slave_0 added [ 343.779945][T11589] team0: Port device team_slave_1 added [ 343.787180][ T17] usb 1-1: USB disconnect, device number 4 [ 343.888405][T11589] device hsr_slave_0 entered promiscuous mode [ 343.933571][T11589] device hsr_slave_1 entered promiscuous mode [ 343.973085][T11589] debugfs: Directory 'hsr0' with parent '/' already present! [ 344.023925][T11589] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.031129][T11589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.038901][T11589] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.046248][T11589] bridge0: port 1(bridge_slave_0) entered forwarding state 08:24:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$alg(r3, 0x0, 0x0, 0xe8f77c73b784f65) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200c200a}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xa4, r5, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa0}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7f}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PORT={0x1d0, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4800}, 0x1000) sendmmsg$inet(r1, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_tos_u8={{0x14}}, @ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x8, 0x4, [@multicast2]}]}}}], 0x30}}], 0x24, 0x0) 08:24:04 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000000)={0x10, 0xfffffffffffffff5, 0x2}, 0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x23) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f00000000c0)={0x1, 0x0, {0x3a0, 0x7, 0x3, 0x93}}) [ 344.288067][T11589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.353295][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.363502][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.388928][ T12] bridge0: port 2(bridge_slave_1) entered disabled state 08:24:04 executing program 0: ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00'}) r0 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440), 0x100000000000012e}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags=0x2}) [ 344.411620][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 344.446387][T11589] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.490768][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.500353][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.509311][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.516547][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.595209][T11589] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.606180][T11589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.622630][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.632039][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.640924][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.648148][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.657373][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.667333][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.677099][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.686913][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 08:24:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r1 = creat(&(0x7f0000000000)='.\x00', 0x1) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, 0x2, 0x1, 0x9}, 0xa) [ 344.696151][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.705904][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.715472][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.724605][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.734087][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.743254][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.913913][T11615] bond0: (slave bond_slave_1): Releasing backup interface [ 345.109876][T11589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.123965][T11616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.138030][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 345.147107][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 345.192821][T11615] bond0: (slave bond_slave_1): Releasing backup interface [ 345.379155][T11616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.486988][T11623] Unknown ioctl 8836 [ 345.523343][T11623] Unknown ioctl 26129 [ 345.529993][T11623] QAT: Invalid ioctl 08:24:05 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='\x1edei;\x00', 0x1000, 0x2780) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) fanotify_init(0x48, 0x1000) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000240)={0x0, 0xf4662dcb8280ff31, "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"}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)={0x0, @frame_sync}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) clone(0x40108000, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r3) io_setup(0xb, &(0x7f0000000240)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0x12f}]) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x104800) io_cancel(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x7, r5, &(0x7f0000001280)="007d89a1ac7da7c8efbe24d5f8c755e72c27e55e8b8b8117256b423518e8404a1f5eb985e7c2acf1b6b3f920db94720e40ab9c7694f201cf7e85a73ea3f65094b88962533561392b9a93523727538c965346a285c3f21eb2933a4b6e14fcd12c53f761a5e63745b21a131219ab1d8ed2342e6b1d5fded2124a031358050dd83d0a73e38d188e0318111aa33b066d85298a7b7d6204861589019f20b85ea0b6c0cbd39a124887804ccdd14cfbf91565e8b3567b97ca35f19b", 0xb8, 0x401, 0x0, 0x7, r0}, &(0x7f0000001340)) [ 345.842924][ T2894] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 345.898075][T11626] IPVS: ftp: loaded support on port[0] = 21 [ 346.093704][ T2894] usb 3-1: Using ep0 maxpacket: 16 [ 346.124440][T11627] IPVS: ftp: loaded support on port[0] = 21 [ 346.302561][ T2894] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 583 [ 346.312785][ T2894] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 259 08:24:06 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000540)="3900000011000904680707002b0000000700ff07010000c86425cd7652eb83e39bc8f29b3f001a00f35eb7f5e600"/57, 0x39}], 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r4, 0x800443d2, &(0x7f0000000080)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]}) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x7b) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x6) ioctl$int_in(r0, 0x8000008004500b, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x89, 0x24801) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)) [ 346.532221][ T2894] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.541497][ T2894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.549990][ T2894] usb 3-1: Product: 稾ぇᵖ葍毯ᶄܩ祶趪썹爝쳮᝻魦뇧顿៤맖ࢰш╆꩙ꨞ噕腖ୋ㜊칓哈ᆳ杢抜ᘣή얎ᵺ乡ꮽږ杸ힳ緿萓 [ 346.566399][ T2894] usb 3-1: Manufacturer: ␊ [ 346.571087][ T2894] usb 3-1: SerialNumber: Џ 08:24:06 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000200)={0xb, 0x77, 0x2, 0x200}, 0xb) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_buf(r1, 0x29, 0xe9, &(0x7f00000000c0)=""/212, &(0x7f00000001c0)=0xd4) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000280)=ANY=[@ANYBLOB="1201368b023f7d082505a1a44000010203010902480001013800000904000000020600f00a2406000008cf228e3f0805240010000d240f0100000000020000000007240a00f00f619afcd5383df97b8dad931244d9a04da0eb6583e4f92bbfe4443d2000f6b2a9eecdfeac2cced9b19c3d71e6466e2334b4f1e2b4cd69f02a2da9e5578abbc897e24aff22968e9d4b7a8c212756f6d7e18324724a8d87f8eab65f04b7bac45909b0f89d0389e737030eb30c0d4d"], &(0x7f0000002640)=ANY=[@ANYBLOB="00000000000000000000000005000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="008fd86ca0398faaabada2640000"], @ANYBLOB="0300000000000000000000004d178effd2b7ea8b00"/40]) [ 346.952278][ T2894] cdc_ncm 3-1:1.0: bind() failure [ 347.003848][ T2894] cdc_ncm 3-1:1.1: bind() failure [ 347.025160][ T2894] usb 3-1: USB disconnect, device number 2 [ 347.033920][ T12] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 347.291906][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 347.338078][T11623] Unknown ioctl 8836 [ 347.357899][T11640] Unknown ioctl 26129 [ 347.372767][T11640] QAT: Invalid ioctl [ 347.462382][ T12] usb 1-1: unable to get BOS descriptor or descriptor too short [ 347.552262][ T12] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 347.561138][ T12] usb 1-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 347.571639][ T12] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x24, skipping [ 347.582308][ T12] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 347.671916][T11514] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 347.832143][ T12] usb 1-1: string descriptor 0 read error: -22 [ 347.832322][ T12] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.847591][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.965784][ T12] usb 1-1: bad CDC descriptors 08:24:08 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x2, 0x3, 0x7f, 0x3, 0x0, 0x2, 0x0, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x5, @perf_config_ext={0x43a, 0x2}, 0xa00, 0x2, 0x200, 0x5, 0x1, 0x1b000, 0x40}, 0x0, 0xe, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x380000, 0x0, 0x0, 0xa72}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000280)={0x2, r5}) r6 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x0, 0x2) write$FUSE_NOTIFY_POLL(r6, &(0x7f0000000200)={0x18, 0x1, 0x0, {0x5}}, 0x18) ioctl$int_in(r2, 0x800060c0045005, &(0x7f0000000000)=0x40000) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0xf32) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 08:24:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f00000002c0)=0x7e00000) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000440)={0x54, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r5, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 348.180271][ T12] usb 1-1: USB disconnect, device number 5 08:24:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0xef) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)="f903", 0x2) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffffb5, 0xc0, 0x0, 0xfeffffff00000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:24:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x0, 0x1, 0x0, 0x0, 0x401}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x668, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x801, 0x1, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x0, 0x1a, [{0x0, 0x7}, {0x0, 0x18}, {0x0, 0x1c}, {0x0, 0x2}, {0x0, 0x2}]}]}, 0xb}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r1) io_setup(0xb, &(0x7f0000000240)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000540)="3900000011000904680707002b0000000700ff07010000c86425cd7652eb83e39bc8f29b3f001a00f35eb7f5e600"/57, 0x39}], 0x1) r4 = dup(r3) io_cancel(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x7427, r0, &(0x7f00000000c0)="79a1b6cc4fa8a5146a844ce3ccc1eec82730e6bca167be627c3c3b8583d5071dd1eb4513f6daadf3c5e36863e059d6ebb207b041ff14890dfb8d7f9b3c1470b42ba22e4b02967cf5a4cd59075a7b5ba721960e1ddc2ec7f905002d502da2cfc4457f388dfa048f31e5e6c7880fe250fba9768aed7fa019b8240c6c0a7a2a1315efbfa5d4c5c3d9271042211549696c7dab8d349d985a66b1616b91281bbb3c276e4004f915833a8ef2a14d9b214f5cc04c508b8a9f0bed049cd10d12f96a2a35af7b839ede1fa4d07f00e1825a35c3f625fee675d887e0e2d1aa5ad0316da4ed68b94b08bb", 0xe5, 0x6, 0x0, 0x1, r4}, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) 08:24:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507008000"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PIO_CMAP(r8, 0x4b71, &(0x7f0000000140)={0x401, 0xff, 0x8, 0x5f, 0x2, 0xb43}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x401, 0x0, 0x0, 0x0, 0x0, 0x5}}, @TCA_CBQ_RTAB={0x404}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, r6, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) [ 348.961955][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd 08:24:09 executing program 2: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r2) getgroups(0x4, &(0x7f0000000140)=[0x0, r0, 0x0, 0x0]) getgid() r3 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) r4 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) r5 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r4, 0x49b, r5) unshare(0x60020000) [ 349.087096][T11665] IPVS: ftp: loaded support on port[0] = 21 [ 349.212304][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 349.272085][ T31] usb 1-1: device descriptor read/all, error -71 08:24:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc, 0x29, @dev}, @IFLA_PROTO_DOWN={0x8, 0x27, 0x80}]}, 0x34}}, 0x8000) [ 349.317658][T11667] IPVS: ftp: loaded support on port[0] = 21 [ 349.373363][T11669] netlink: 'syz-executor.0': attribute type 41 has an invalid length. [ 349.381675][T11669] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 08:24:09 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100006a7392107a1418e0fc5400000001090224040100000000090400000262b30a0009058d1f000000ffd2440703060000000000c544c8332749a7975d94af381d090b1a8d41336dc64cfedfae86d7773f93a58f76be91786d9b6e58471328e3f09c50c3b2a90d4ad7fb99e843ff15794e0dd94172eb991213086bb14379e4"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000540)="3900000011000904680707002b0000000700ff07010000c86425cd7652eb83e39bc8f29b3f001a00f35eb7f5e600"/57, 0x39}], 0x1) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000540)="3900000011000904680707002b0000000700ff07010000c86425cd7652eb83e39bc8f29b3f001a00f35eb7f5e600"/57, 0x39}], 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x642120, 0x0) r4 = dup2(r2, r3) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10a0100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4054}, 0x4000) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000180)}) 08:24:09 executing program 2: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x26}}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000540)="3900000011000904680707002b0000000700ff07010000c86425cd7652eb83e39bc8f29b3f001a00f35eb7f5e600"/57, 0x39}], 0x1) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="a4c63f2e4031331df5786b08393a2dfcc1945c0bdec445bb2d71b2013d8fa6ae2ff401a5c6f09289c160d698db7cb835b3a6394c5f2f4940cc07d97643c1c13eba4dd074b4bb28b197b3602ccea3ffecd1dc4025dbd2762aa526305bf9f84d5c95199ccdaafec8f4266aaa3f4ae525da7b52c6362f5a6ac3bf321dee7706d360d4e1baf769374963018b21013edff833f0b75365209f63112197a5d7a37f5398ec17067a264b021370949046b0a7e97ee5584b9823028897dc8b56afb4b155ac97da0ebf58295409583cc7f2554f9ba3cbc5cf921edea70c", 0xd8}], 0x1, 0x0) 08:24:09 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)={{0x12, 0x1, 0x0, 0xa, 0xe1, 0xce, 0x10, 0x4fc, 0xffff, 0xbe3b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x7e, 0x0, 0x0, 0x96, 0x37, 0x5d}}]}}]}}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), 0x4) [ 350.172144][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 350.272047][T11514] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 350.412148][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 350.512181][T11514] usb 3-1: Using ep0 maxpacket: 16 [ 350.532324][ T31] usb 1-1: config index 0 descriptor too short (expected 1060, got 36) [ 350.540757][ T31] usb 1-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config [ 350.551255][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.562514][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.575466][ T31] usb 1-1: New USB device found, idVendor=147a, idProduct=e018, bcdDevice=54.fc [ 350.585749][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 08:24:10 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0xc081) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000040)=""/129, &(0x7f0000000100)=0x81) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000180)) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xd8d}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000280)={r3, 0x800, 0x6}, 0x8) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x2200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@remote, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000440)={@ipv4={[], [], @empty}, 0x4b, r5}) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000540)={'security\x00'}, &(0x7f00000005c0)=0x54) r8 = syz_open_dev$media(&(0x7f0000000600)='/dev/media#\x00', 0x98, 0x200000) ioctl$USBDEVFS_CLAIMINTERFACE(r8, 0x8004550f, &(0x7f0000000640)=0x80000001) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x112302, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r9, 0x8040ae69, &(0x7f00000006c0)={0x8, 0x378, 0x80000001, 0x1, 0x1}) read(r2, &(0x7f0000000700)=""/37, 0x25) r10 = syz_open_dev$cec(&(0x7f0000000740)='/dev/cec#\x00', 0x1, 0x2) getsockopt$IPT_SO_GET_INFO(r10, 0x0, 0x40, &(0x7f0000000780)={'raw\x00'}, &(0x7f0000000800)=0x54) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000840)='/dev/btrfs-control\x00', 0x401000, 0x0) sendto$unix(r11, &(0x7f0000000880)="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", 0xff, 0x40, 0x0, 0x0) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'dummy0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f00000009c0)={'team0\x00', r13}) r15 = syz_open_dev$vbi(&(0x7f0000000ac0)='/dev/vbi#\x00', 0x1, 0x2) r16 = syz_genetlink_get_family_id$team(&(0x7f0000000b40)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000bc0)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@remote}}, &(0x7f0000000cc0)=0xe8) accept4(0xffffffffffffffff, &(0x7f0000000d00)=@can={0x1d, 0x0}, &(0x7f0000000d80)=0x80, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'sit0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001140)={@local, 0x0}, &(0x7f0000001180)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001200)={@loopback, @initdev, 0x0}, &(0x7f0000001240)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000014c0)={0x0, @loopback, @local}, &(0x7f0000001500)=0xc) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000001540)={@initdev, 0x0}, &(0x7f0000001580)=0x14) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f00000016c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001b00)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001c00)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r15, &(0x7f0000002400)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0xd91efbf6fec0691d}, 0xc, &(0x7f00000023c0)={&(0x7f0000001c40)={0x75c, r16, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r17}, {0x1e8, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xccf}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r21}}}]}}, {{0x8, 0x1, r5}, {0x244, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3ea8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x800000}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x5, 0xa0, 0x6, 0x2}, {0x5ec9, 0xff, 0x6, 0x81}, {0xff01, 0x7f, 0x42, 0x7}, {0x7, 0xbc, 0x8}, {0x4, 0x8, 0x4d, 0x5}, {0x2, 0x6, 0x3f, 0x8}, {0x6, 0x62, 0x40, 0x6}, {0x6, 0x4, 0xfd, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r23}, {0x7c, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r24}, {0x7c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r25}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r26}, {0x1b0, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r27}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r28}}}]}}]}, 0x75c}, 0x1, 0x0, 0x0, 0x40}, 0x2000) [ 350.663044][ T31] usb 1-1: config 0 descriptor?? [ 350.673551][T11514] usb 3-1: config 3 has an invalid interface number: 126 but max is 0 [ 350.682011][T11514] usb 3-1: config 3 has no interface number 0 [ 350.688208][T11514] usb 3-1: New USB device found, idVendor=04fc, idProduct=ffff, bcdDevice=be.3b [ 350.697489][T11514] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.817651][T11514] gspca_main: sunplus-2.14.0 probing 04fc:ffff [ 350.935222][ T31] usb 1-1: USB disconnect, device number 7 [ 351.022501][T11514] gspca_sunplus: reg_w_riv err -71 [ 351.027673][T11514] ===================================================== [ 351.034621][T11514] BUG: KMSAN: uninit-value in gspca_dev_probe2+0xe93/0x2230 [ 351.041915][T11514] CPU: 1 PID: 11514 Comm: kworker/1:2 Not tainted 5.3.0-rc7+ #0 [ 351.049543][T11514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.059621][T11514] Workqueue: usb_hub_wq hub_event [ 351.064653][T11514] Call Trace: [ 351.068048][T11514] dump_stack+0x191/0x1f0 [ 351.072402][T11514] kmsan_report+0x13a/0x2b0 [ 351.076925][T11514] __msan_warning+0x73/0xe0 [ 351.081455][T11514] sd_init+0x5b6f/0x5e60 [ 351.086334][T11514] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 351.092248][T11514] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 351.098417][T11514] ? sd_config+0x37d/0x710 [ 351.102854][T11514] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 351.108758][T11514] ? sd_config+0x710/0x710 [ 351.113190][T11514] gspca_dev_probe2+0xe93/0x2230 [ 351.118161][T11514] gspca_dev_probe+0x346/0x3b0 [ 351.122952][T11514] sd_probe+0x8d/0xa0 [ 351.126946][T11514] ? i2c_write+0xe40/0xe40 [ 351.131389][T11514] usb_probe_interface+0xd19/0x1310 [ 351.136615][T11514] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 351.142571][T11514] ? usb_register_driver+0x7d0/0x7d0 [ 351.147874][T11514] really_probe+0x1373/0x1dc0 [ 351.152585][T11514] driver_probe_device+0x1ba/0x510 [ 351.157728][T11514] __device_attach_driver+0x5b8/0x790 [ 351.163135][T11514] bus_for_each_drv+0x28e/0x3b0 [ 351.168004][T11514] ? deferred_probe_work_func+0x400/0x400 [ 351.173756][T11514] __device_attach+0x489/0x750 [ 351.178552][T11514] device_initial_probe+0x4a/0x60 [ 351.183594][T11514] bus_probe_device+0x131/0x390 [ 351.188472][T11514] device_add+0x25b5/0x2df0 [ 351.193011][T11514] usb_set_configuration+0x309f/0x3710 [ 351.198599][T11514] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 351.204784][T11514] generic_probe+0xe7/0x280 [ 351.209317][T11514] ? usb_choose_configuration+0xae0/0xae0 [ 351.215055][T11514] usb_probe_device+0x146/0x200 [ 351.219926][T11514] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 351.225839][T11514] ? usb_register_device_driver+0x470/0x470 [ 351.231744][T11514] really_probe+0x1373/0x1dc0 [ 351.236451][T11514] driver_probe_device+0x1ba/0x510 [ 351.241599][T11514] __device_attach_driver+0x5b8/0x790 [ 351.246996][T11514] bus_for_each_drv+0x28e/0x3b0 [ 351.251864][T11514] ? deferred_probe_work_func+0x400/0x400 [ 351.257610][T11514] __device_attach+0x489/0x750 [ 351.262401][T11514] device_initial_probe+0x4a/0x60 [ 351.267441][T11514] bus_probe_device+0x131/0x390 [ 351.272316][T11514] device_add+0x25b5/0x2df0 [ 351.276855][T11514] usb_new_device+0x23e5/0x2fb0 [ 351.281740][T11514] hub_event+0x581d/0x72f0 [ 351.286218][T11514] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 351.292328][T11514] ? led_work+0x720/0x720 [ 351.296667][T11514] ? led_work+0x720/0x720 [ 351.301012][T11514] process_one_work+0x1572/0x1ef0 [ 351.306075][T11514] worker_thread+0x111b/0x2460 [ 351.310874][T11514] kthread+0x4b5/0x4f0 [ 351.314956][T11514] ? process_one_work+0x1ef0/0x1ef0 [ 351.320166][T11514] ? kthread_blkcg+0xf0/0xf0 [ 351.324799][T11514] ret_from_fork+0x35/0x40 [ 351.329222][T11514] [ 351.331551][T11514] Uninit was created at: [ 351.335804][T11514] kmsan_internal_poison_shadow+0x53/0x100 [ 351.341617][T11514] kmsan_slab_alloc+0xaa/0x120 [ 351.346388][T11514] kmem_cache_alloc_trace+0x8c5/0xd20 [ 351.351768][T11514] gspca_dev_probe2+0x30d/0x2230 [ 351.356711][T11514] gspca_dev_probe+0x346/0x3b0 [ 351.361483][T11514] sd_probe+0x8d/0xa0 [ 351.365474][T11514] usb_probe_interface+0xd19/0x1310 [ 351.370683][T11514] really_probe+0x1373/0x1dc0 [ 351.375369][T11514] driver_probe_device+0x1ba/0x510 [ 351.380491][T11514] __device_attach_driver+0x5b8/0x790 [ 351.385871][T11514] bus_for_each_drv+0x28e/0x3b0 [ 351.390735][T11514] __device_attach+0x489/0x750 [ 351.395507][T11514] device_initial_probe+0x4a/0x60 [ 351.400539][T11514] bus_probe_device+0x131/0x390 [ 351.405399][T11514] device_add+0x25b5/0x2df0 [ 351.409915][T11514] usb_set_configuration+0x309f/0x3710 [ 351.415390][T11514] generic_probe+0xe7/0x280 [ 351.419903][T11514] usb_probe_device+0x146/0x200 [ 351.424763][T11514] really_probe+0x1373/0x1dc0 [ 351.429455][T11514] driver_probe_device+0x1ba/0x510 [ 351.434576][T11514] __device_attach_driver+0x5b8/0x790 [ 351.439964][T11514] bus_for_each_drv+0x28e/0x3b0 [ 351.444825][T11514] __device_attach+0x489/0x750 [ 351.449599][T11514] device_initial_probe+0x4a/0x60 [ 351.454631][T11514] bus_probe_device+0x131/0x390 [ 351.459488][T11514] device_add+0x25b5/0x2df0 [ 351.463998][T11514] usb_new_device+0x23e5/0x2fb0 [ 351.468855][T11514] hub_event+0x581d/0x72f0 [ 351.473718][T11514] process_one_work+0x1572/0x1ef0 [ 351.478744][T11514] worker_thread+0x111b/0x2460 [ 351.483511][T11514] kthread+0x4b5/0x4f0 [ 351.487585][T11514] ret_from_fork+0x35/0x40 [ 351.491993][T11514] ===================================================== [ 351.498917][T11514] Disabling lock debugging due to kernel taint [ 351.505067][T11514] Kernel panic - not syncing: panic_on_warn set ... [ 351.511666][T11514] CPU: 1 PID: 11514 Comm: kworker/1:2 Tainted: G B 5.3.0-rc7+ #0 [ 351.520770][T11514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.530850][T11514] Workqueue: usb_hub_wq hub_event [ 351.535875][T11514] Call Trace: [ 351.539188][T11514] dump_stack+0x191/0x1f0 [ 351.543543][T11514] panic+0x3c9/0xc1e [ 351.547478][T11514] kmsan_report+0x2a2/0x2b0 [ 351.551999][T11514] __msan_warning+0x73/0xe0 [ 351.556514][T11514] sd_init+0x5b6f/0x5e60 [ 351.560955][T11514] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 351.566867][T11514] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 351.573034][T11514] ? sd_config+0x37d/0x710 [ 351.577467][T11514] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 351.583374][T11514] ? sd_config+0x710/0x710 [ 351.587807][T11514] gspca_dev_probe2+0xe93/0x2230 [ 351.592773][T11514] gspca_dev_probe+0x346/0x3b0 [ 351.597569][T11514] sd_probe+0x8d/0xa0 [ 351.601564][T11514] ? i2c_write+0xe40/0xe40 [ 351.606004][T11514] usb_probe_interface+0xd19/0x1310 [ 351.611231][T11514] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 351.617140][T11514] ? usb_register_driver+0x7d0/0x7d0 [ 351.622438][T11514] really_probe+0x1373/0x1dc0 [ 351.627153][T11514] driver_probe_device+0x1ba/0x510 [ 351.632290][T11514] __device_attach_driver+0x5b8/0x790 [ 351.637694][T11514] bus_for_each_drv+0x28e/0x3b0 [ 351.642560][T11514] ? deferred_probe_work_func+0x400/0x400 [ 351.648320][T11514] __device_attach+0x489/0x750 [ 351.653107][T11514] device_initial_probe+0x4a/0x60 [ 351.658146][T11514] bus_probe_device+0x131/0x390 [ 351.663014][T11514] device_add+0x25b5/0x2df0 [ 351.667643][T11514] usb_set_configuration+0x309f/0x3710 [ 351.673134][T11514] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 351.679227][T11514] generic_probe+0xe7/0x280 [ 351.683746][T11514] ? usb_choose_configuration+0xae0/0xae0 [ 351.689482][T11514] usb_probe_device+0x146/0x200 [ 351.694341][T11514] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 351.700242][T11514] ? usb_register_device_driver+0x470/0x470 [ 351.706146][T11514] really_probe+0x1373/0x1dc0 [ 351.710848][T11514] driver_probe_device+0x1ba/0x510 [ 351.715985][T11514] __device_attach_driver+0x5b8/0x790 08:24:11 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0xfd, 0x3, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@dev}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_mreq(r5, 0x0, 0x40, &(0x7f00000000c0)={@remote, @loopback}, &(0x7f0000000100)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, r7}) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={r8, 0x0, r9}) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 351.721376][T11514] bus_for_each_drv+0x28e/0x3b0 [ 351.726232][T11514] ? deferred_probe_work_func+0x400/0x400 [ 351.731972][T11514] __device_attach+0x489/0x750 [ 351.736766][T11514] device_initial_probe+0x4a/0x60 [ 351.741812][T11514] bus_probe_device+0x131/0x390 [ 351.746678][T11514] device_add+0x25b5/0x2df0 [ 351.751209][T11514] usb_new_device+0x23e5/0x2fb0 [ 351.756095][T11514] hub_event+0x581d/0x72f0 [ 351.760570][T11514] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 351.766470][T11514] ? led_work+0x720/0x720 [ 351.770809][T11514] ? led_work+0x720/0x720 [ 351.775148][T11514] process_one_work+0x1572/0x1ef0 [ 351.780202][T11514] worker_thread+0x111b/0x2460 [ 351.785002][T11514] kthread+0x4b5/0x4f0 [ 351.789074][T11514] ? process_one_work+0x1ef0/0x1ef0 [ 351.794286][T11514] ? kthread_blkcg+0xf0/0xf0 [ 351.798887][T11514] ret_from_fork+0x35/0x40 [ 351.804843][T11514] Kernel Offset: disabled [ 351.809217][T11514] Rebooting in 86400 seconds..