ready 18:00:39 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xf00}, 0x0) 18:00:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0xa}]}]}]}, @IFLA_IFALIASn={0x4}]}, 0x44}}, 0x0) 18:00:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x8004) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000340)="fd", 0x1}], 0x1) 18:00:39 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x1100}, 0x0) 18:00:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8000, &(0x7f0000000440)=ANY=[@ANYRESDEC]) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:00:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0xa}]}]}]}, @IFLA_IFALIASn={0x4}]}, 0x44}}, 0x0) 18:00:40 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x1402}, 0x0) 18:00:40 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x2000}, 0x0) 18:00:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) mount$9p_virtio(&(0x7f00000001c0)='syz\x00', 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC]) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:00:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0xa}]}]}]}, @IFLA_IFALIASn={0x4}]}, 0x44}}, 0x0) 18:00:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000080)=""/93, &(0x7f0000000140)=0x5d) fchdir(r0) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x9, 0x0, 0x1ff, 0x7) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x44040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x108, 0x5}, 0x40000, 0x0, 0xfffff417, 0x3, 0x0, 0x4, 0x10}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f00000001c0)={0x0, 0x7, 0x100}) creat(&(0x7f0000000040)='./file0\x00', 0xa2) ioctl$TIOCEXCL(r0, 0x540c) 18:00:40 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x2c01}, 0x0) 18:00:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0xa}]}]}]}, @IFLA_IFALIASn={0x4}]}, 0x44}}, 0x0) 18:00:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) r1 = memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) dup3(r3, r2, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="500d605dafd31b982d01000000908fa4da02cefb15baa5942433d28129f1839bf8df8b08020b2ef4010000e579e9fff977ddaabced", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r5, 0x2, 0x2d4, 0x1}, 0x10) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000100)=""/31, 0x1f}], 0x2, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000003100)=ANY=[@ANYBLOB="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"], 0x1004) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000340)={r6, 0x1, 0x6, @local}, 0x10) 18:00:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0xa}]}]}]}, @IFLA_IFALIASn={0x4}]}, 0x44}}, 0x0) 18:00:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) recvfrom$unix(r2, &(0x7f0000000080), 0x0, 0x2000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 18:00:40 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x3f00}, 0x0) 18:00:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, 0x0, 0x0) [ 651.724971][ T29] audit: type=1804 audit(1594576841.053:160): pid=20039 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/287/file0/file0" dev="loop3" ino=340 res=1 18:00:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000880)={&(0x7f00000001c0)=@isdn={0x22, 0x7, 0x7, 0x1f}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000140)="d26e2a73c1c6b4", 0x7}, {&(0x7f0000000240)="9ce097ba30405b02057795935593295b8826db9cad4b3ada27416f10385627eed0e9aa141b1fbcc6a2dab40fd7e2250f9d8a52ed6683d30ba15a42ab9e739f753aff5ca077a8aaa72ac171243f34b06b31d40c31afb08f0abc4436f8f276bdd5ecf72fb3328e44500a770f0340a2016681b6758fd384f0cad990e994d53c3eefde4eac75260995a88b4aa70571d10c2d3b2848158b506e34edceb89efbd10cfedc4c8219a9c7015b326f4b3f8ce1be9d8f71a3fc958700fd75c9eae0113c5b812afe8ba09a6c605c884633d01dee3723837bc8938f42b6021c6053b8614cad3e74a5979d3e14064c6f2643230e206df0d6abf5c71915cf42840654ec8404", 0xfe}, {&(0x7f0000000340)="9b4ea74de67ff17d30a3396d9a6cab54c06c1b7cc9c2044509041b74a1041775d5bb5c47ee14379983176491d10707b270b0335889b53e1868039f509309ddece35e5a1ed93b3f1984edf09045022882a2d991608cf9143454a20314e4cc1ca2d193e53dfcd1c48813bfd17ba0b47f6b23c7ab914b8e3c1d5a22039e30e5f36f4829f274a13dc5c264859ff9f33f14fc", 0x90}, {&(0x7f0000000400)="9a8fbea0336a0781316eb93cda0627", 0xf}, {&(0x7f0000000440)="8d2907becc605ee76d578d29329a2f9b496e87e954e84b839354daac707fe651cedbd4f54d557e846fd177b79e012122b9cea1823e809c140c96483952206ddcd190bb470ae599cbb3124a2b969d6590baacb5a56b2d1d6bafa4826709a58b1ce218664c2555e93b5ae18e99cbb416b6218a44ce2ad12152600fc38b17576cdb2037c9060c3ec586b6b1b7543ba7a97fc8b27e77858f4b076b80f3f310151c0940e2b4d20dcb2f1c25cfb97146af62f14766b3da4aa23fda449e09195d09d2bc8eff8cc9e8f7973d3f55427d6d413177d7f906f723f828a38f84681537e2ca4d123116d169", 0xe5}, {&(0x7f0000000540)="40837dc136907548acdf1f0510241399697a1458e6d4b74436e961a48f47b5e2d9eb10e738d7d723f04a6d3eb7bfd71cbc594fbddd642974ec53e597ed948b4cea150a503b4403d61ba76cbe892292bd744d20232dc50ab7cb44194988b051a94248be904ede70dc10bf5f73e605b6a6ca8f5fcd443f6567ebec1b00e4f80edc083f1626639f2c8b1a57e1502d369144bc85e01a3965217613aad1779f47c05876e48b8b1ea79922dd3c981dbe6d8a72c52a574ef17abbb0cc37d9c29b93afb9f8412b", 0xc3}, {&(0x7f0000000640)="2beb4cc4e909be91d06ee9b56a08199395e2e2c4975614b73cab86995e7535d9d395c1d40891e55c99", 0x29}, {&(0x7f0000000680)="2bfed9b42f46af707d1d5cb4c92faa41f51948906b808c2a991a71ba8defa02d67db1c5469b187c6630df6a06916c1eb1ceeea4760b1596b3e04a8a32b82fe7cbca3cc76d3a8e8785d2d0f33608c9c287c16686eafb7b109ad089a8bc5713f5a5d3442b0e5419cde0cf15e8316d1d270947d33c754c958feaf21caba1f0be51c4fe6b7e3c4fe05187e2cd445ec23fe58b9916774daaed573d570e92f7ca230e3eb86a54af0fb67ef4d2ea5acbb0116333c7f1b5b88", 0xb5}], 0x8, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x3a}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x228}}], 0x90}, 0x4000001) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsync(r0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = creat(0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:00:41 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 18:00:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, 0x0, 0x0) 18:00:41 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x80fe}, 0x0) 18:00:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, 0x0, 0x0) 18:00:41 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xc0fe}, 0x0) 18:00:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) r1 = memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) dup3(r3, r2, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="500d605dafd31b982d01000000908fa4da02cefb15baa5942433d28129f1839bf8df8b08020b2ef4010000e579e9fff977ddaabced", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r5, 0x2, 0x2d4, 0x1}, 0x10) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000100)=""/31, 0x1f}], 0x2, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000003100)=ANY=[@ANYBLOB="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"], 0x1004) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000340)={r6, 0x1, 0x6, @local}, 0x10) 18:00:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000007060103000000000000003c07000004050001000700000024bc0640000640400001ff0000000000"], 0x34}}, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:00:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 18:00:41 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xe803}, 0x0) 18:00:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 18:00:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000280)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xb01, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000080)=""/30, &(0x7f00000000c0)=0x1e) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x0, &(0x7f00000002c0)={@multicast1, @empty}, &(0x7f0000000300)=0x8) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="be8decf8a33097bb16b9100026bd7000fbdbdf2502000000080001000000000008000a00020000000800020002000000ea0002000200c4a224700d2457e0206c6e7683eaee6945dadf30a157007e7c3a0c4b38334ddf5b9ab9aabf8a848d7b52cd68f365c104619a6741b5c6a63fb30c21c1bda63cfc7fe489582fd45313d7cdc1994f3e35a921bb3a69342399aa6167e99a0b3480046b3fb504daa1d8559236673f2b70939f5188a30a34ce"], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x4008001) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0xfffffffffffffe47}, 0x1, 0x0, 0x0, 0x810}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:00:42 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xf401}, 0x0) [ 652.738231][ T29] audit: type=1804 audit(1594576842.073:161): pid=20087 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/289/file0" dev="sda1" ino=15891 res=1 18:00:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x81020, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000080)=0x9) 18:00:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 652.956174][ T29] audit: type=1804 audit(1594576842.283:162): pid=20092 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/276/file0/file0" dev="loop2" ino=342 res=1 [ 653.043757][ T29] audit: type=1804 audit(1594576842.323:163): pid=20098 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/276/file0/file0" dev="loop2" ino=342 res=1 18:00:42 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xfc00}, 0x0) 18:00:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 653.221785][ T29] audit: type=1804 audit(1594576842.553:164): pid=20100 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/290/file0/file0" dev="sda1" ino=15796 res=1 18:00:42 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xfcff}, 0x0) 18:00:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) r1 = memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) dup3(r3, r2, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="500d605dafd31b982d01000000908fa4da02cefb15baa5942433d28129f1839bf8df8b08020b2ef4010000e579e9fff977ddaabced", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r5, 0x2, 0x2d4, 0x1}, 0x10) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000100)=""/31, 0x1f}], 0x2, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000003100)=ANY=[@ANYBLOB="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"], 0x1004) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000340)={r6, 0x1, 0x6, @local}, 0x10) 18:00:42 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xfe80}, 0x0) 18:00:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 18:00:43 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xfec0}, 0x0) 18:00:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 18:00:43 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xff00}, 0x0) 18:00:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0xa}]}]}]}, @IFLA_IFALIASn={0x4}]}, 0x44}}, 0x0) 18:00:43 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xfffc}, 0x0) 18:00:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0xa}]}]}]}, @IFLA_IFALIASn={0x4}]}, 0x44}}, 0x0) 18:00:43 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 18:00:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0xa}]}]}]}, @IFLA_IFALIASn={0x4}]}, 0x44}}, 0x0) 18:00:43 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 18:00:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) r1 = memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) dup3(r3, r2, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="500d605dafd31b982d01000000908fa4da02cefb15baa5942433d28129f1839bf8df8b08020b2ef4010000e579e9fff977ddaabced", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r5, 0x2, 0x2d4, 0x1}, 0x10) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000100)=""/31, 0x1f}], 0x2, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000003100)=ANY=[@ANYBLOB="73797a31dd0a549cdf60b3d32fb563ff90123dd1946237005bdc68d8a5d5dcf0e61fd478af1ecdff770ad37b93b29834b7c30f388ab87248fbefd12850f3bc5f6a7567ab67a57cb0848a155f89ad9addb8c8381c8691bfe877738f2c6c46461d7a9f47fca98b5388e85df9f058f35dd4c1bada4eed6479109c51fbca892a5f7f8812c1040b5882143f559ec5868ce854050f687cecc6b7451c287245c8ecc49ca6b96a3c902cf956f27807d717637f7e39cba7b60a860b4f3795f58186b49f9647432461078980a03c81278b4fd712a62695b5b3f8148a9ee7a68ae1bbca4bc215af71a4356a3399439dab4d113ab28f957520ca0551b45f34e6bc7121d6e4dbd15c66a148aae7364f841205756b69c3a96a591aafde1cf27287e7ab9713e109953b846186638fcc3a05d135dee7cd691975359b7849b2e9ef83013b50da7f600ff39d14a77a3dc1edee0a064fc20ec01f2bb73f095987f21b7f620aef4b6484fd5af09bad69a4ccbd38a9ba2fab660855d602834c1133d205fc92b85bd9cda939d5963b95f28980bb53b7c5e0150db53ea2d2e3406ba32a45ca0b7941e1c362eabaf920ac00585dfe4002a29ec5fa1da978edad20d65929d060ee7752918a9b7b67ec037f02bbad963ac01c49d0f0f7db87bc0f9d72fef4e2d02c5783cf6c3ce03d4f57b19a301ab5670470cbdc961317622e0ddc3bc2597aec58e3cc82dbde6cdf1bf99be355b7c9bdc12cbfcde42c347c2b5cb8354487bdb37e86d956963a80275896005b287b751257663ac74c28058ec69212ec3ae59c42e8dc1fd5d6db899bb2d407e5ccd7511680df0a6db064e64ad8443b6eba4aec030b431480a280c86594944a5df56752ce5291bf524af4973b2c84fee56a00a925104f900c9c4c28294eb2a11a10aadcd877256af30d846d490e20f4083a856f8c7b08b99c74782aa54d3a88bd1b28b55b2a9526dbbf7c2b22d780b26be8d0d08d6c6ee9e4e275bcf0749638735e4186ca50466ab0664b5656b5d967f91358fe92044946a84f780a9d8cc76720863e4a8095b3e46b23714b49ba3b1d68e04d4328accc5c90783dcd829fbe39d692b4d182c46f464c0115aa1496267fa6328d4cbf3e48e15f642c7058dd33e539d68009e53ecd5eebfdbdcf35da51ab8af90f2200f31331868961d77733fcfc46857e82488ff916d2646c50a966b825bc4400be0d88a1b6ee4881c14dec20ee23a409cffe0880ae7e434cea217f4373665067ee3a79e9a5a15bdf2f1c9cb3e88eb1a4057a5aee365d75b5c25dc4c6fc5304ff2ede14c700ea531c780b5db59b31ca28737a93cbcac85c93a3e2e4579410af37a717661ae08a60bcd61bbe84ea5638a5087a489c1a4fed374bbf73c1a76c46633d1983ab20385aa021ec924accf079ceabb658e55e535d8e1add80cc330a4acc0855fad795a7ce0e2b446a663c76c5df8d45ca4b9257ad21b5ba2fbf9492ff6314bff91601d1e77d7c971716293b53c9c80ddb8818d2573fb42c687ba5e32db850363dc19dca28ddfa1f8c8bebdba5af762671bfefc89aa0c306841038be9f006adb2c5c7cf2b1d14b6ca3019b7b730ebe803a486f9a1a7cfeeda9a45633ab61bc4d85e2d745b8c47342b87f9f9be2c67946a0b4b1f1c9606ef5afaf9f23734ee7ee577ac30d39ff517432ccabc82b5516aebd1e34b04e3a6751509924557cb62b7fbda84b6d4824f937762fb489770105f9a8266c2b7ff8f803a0bc6a5456e2cb19c9d8a8b69c1561997215dcb817223cb53fee9f2dbdc7e92f0d86530776e95b26bf1181d2cc8833681809894f32ff2833ea21b35424f93102c51cd22546956dfab4b33074cd6a122a506833f3d4862d640664c6681c3dd331717e0f3c93525ccc562130684a62dd40f4cf9b2c227839e6e9212dc13c7327b45baaf3cc28e9d723f3cd4f6805672362c4bde6ca7371822f4a73a87d075ce5e19322a7ce09c0cdfcc81ba8d3c68ad5db208ede2cb3b447fb1be4ced40288fa4d93630a98ab04c66d59d23b3a52a1d7a1f2acf524a1f69776e76d4d277989a8b72c5789f0c9e9639f50730d7d320f8753723fbcc85f4bb534ff6c268fb93246787bea9505f1663b7fe24dc7c70bae1494b6894a1cf95c5d260700361e6c5e7326606f68e0b84601517c40d8f34a36d347e5a8b81d2fe964eff289d9de666f6a18bfac193986da178f4dcbac1411fa15ef87af720bcb4f0fb696ce031dac182a86ecf8d4795611a0b110279c20083d2a657c3d6f890b3e08b4b1b4758ef6653f5d0d27dae6f92acd34be7ec9fccf67b8911b9720b8acb62fa26e8525fd8aba2152225950e52d88307b454c4490fb84f3fcf7bc5efb98d1cda885e0edff137ab73d57c5720be504ea84bcb9aff6b2fda787d87f3fb047212a382d499ad5db16a75cb12a6a95240cd1c3d36360fff8c5f64bb8c8d3fdfe87699de8bf0e28f930fd31f8c872682a1b983a17d6b1df532c75fef81a8578cb6bacdc33943f912879a4c34455adbe6ae04ab4a1cb0d6f1dbdd3a5f30c379335cff4bf70b1f0262eb18723e009fe34d35b6822983df722035fa7e1477435903a8bd3bfb5baf62b0d09feb6acf103c9ed9669d98e3f859f330db29c9bc8b0eb9c93c7df9fb0545ae8f16c37ebcf45e5726665c7c6338741172ace576797760de6225eb75672d3edf6006a7dadedbd674e19b0e3569ffaf2679de572ba564c246c5bec37df0cb560cdceb5647b07f8f14df49e24cab5483862f0bbab0cf2f294841eead4a5ea7aeb6ad9b10231cc4c68991f451e057cb29f3cfe796c1a98f4de06a73c1c377ce1675bdea7896e5f97dcbecb8432b89092d5b3cf0b1dc0d6f4261c7116b41fe5abb4674e7a096203b3307c92d806ae6fcf9132001b976f3a7a4fb502573122eef387f9c674fffd7cfc017d986e45337d2e2336b605f9639dd25d7f8890688ebecdb05449d823cbdd7927f7760ab60d7d8101da219eb440f60efc264abd70d9c45df2fea734130b04a868329de4431f77a39f91bc3852e0a4ec75cfd7565751a011edb182428e0480d0fce7fdb1ac830287e4e80bf0f22c1ff888b75dcf47b25abda60b9123d16a8ecfa3360c0cfd5e7c2dbd9df83432a2eb90042f56a950d83f443f9ea14ec9d3e7d9ecbf5153a9536ee64953226acc9a5284f81ec8c2b4a32b793c5a5e519bc56a7d2266372281697b0cdceb4edb9f46cc5a2fae8c740913a690a5506a0c63e333e2d92a07f6d36dcfdb5db10fd55289a2b3fa52a7ca05504944aaa8d95cccc1dacf9e5b86c62a9582edeb4cf0122dc8d17afb89e735560441a6285333e7fdc2d505fd7918c3a73f3f9e20ddc948d13d51564592a4533e4a4c0ea97a7fe5e20aedb578dc70fe5e3ce7347bafd14c271f4397de37275c55f5109ed25118e0195cdfd8c0d038f9ee9548c2144d58638a033a110b88babd6766792e94ede6c29ce430e9e51f20365e8637faf0b4bd2ebf9a1a7a6c37fdecabadb3d616af0a2f2002e8d0036a951e70835f815c696df9b5614af4c00e1e09a91b265cdc4abea017ba57bad212cfac18539d1ee1d940d00bf2128fea7e536f018e1edcdaaba1b356a63fbea7244cb03fbf5cdef2960c161955d5c766f815427fdd184b84e3db9bbde7bb45366312071ed50b4d1a98c5d08202e881a921457764b6b9d64597a3fda677ea48caf37a818c60ae38c70e19eee7971659f75f51a7d3b6fc226f8fcce38deaf4056f57d2abd4f182d2d76aaa02ad19de40a99616551d843c6a7b33a2214d2f6e2d4224d14aa41c451576a66c8fd22334d588561243b62e3c584961a087ad62f9175e267b2f687d6108829371cbe4e87a09b68c9a0293f22c0f30dc911023e429f898e8d139c44283ac0a1b400c23515267d2e85d10c4ef5da0dac1ed6f11954d32deacfbfd353246dbbdc0ca8caba30a44e83ab1cc37b2df7130e2165e7210432972fd113b9ac1b5c5f78b51cd7dbcdb79d2dfd456413743eefece9c887e049b7d94e4d5ea002fc287b74bbe2e0aa4310e68a12fac5aa3ce2a16dc4c68fbfc3e43e0fabd0be1e2d91f0d68190c78b253d597a593c04ee7905cc43c182c94783d67c404c234dbb590262a65633ab26847a51545aa5b4e88ebd579a270fa4bf2c4871a0662d82fec2398f1415e38a33a1bbb1e5451991b1e17cefcacfd71d1794c87087053d419bc2bb6700c08e0c74b83d6e0a7f7b980bec2f3acd6d1bb18f391f5889b6ea4ef486b09802f3acdf7575fd9c9e50ff17d5c21bad36671361dc123a380b201b9f09caf2dd8d3af82b8d4a99b8a4137fe38473ecf967a283105da37f82aaad695fc2198fe9167409d966d01f7e7a0bdac55152eedc2e337fe8154d28b840200d63e123aae831c3f20e8ff6004ea8e9a3734f5efd0a6c1f4da5566817ccd08b8ea041476e0f9c3f5a0061add1883b006af1d70cd57727d69a82b548dfe774bfc39ff0c8fb4a9747bd888736bd373db1e180aa21b883b050021226dae7e08274cc93159d6066d3e72f3fd34736ea85f7dc78ee8c36830943e04af8d83e5af98d6def9ca57dfdd159be408e8d243e75a18268b15df9b463df096cabb51f22eb353ccab03919a5e57d87fd5f6333b8b9ff08b282bb2e63d225088fc6685a1fe9b2fb40dc271986140f643595196acf992f5b8e72cf4f88f785b5de5b2eb08c10671a07c994fc06207460d1980e3ed84c5ac6a882930c9db22776381c06599e0b8da81efd9c2380903ef5a50d4bca473e213c4c59bb3156f708c51b536323eb1e58ccf697bd0ad91714da07d5faa69b67ed5f09de485a6c2102168b04a43501695eca171d336c4e2c34be76407ce5fde4ba13e7042fb8d8346fdf9dc24f1ffb849c51f48cc2ad3d4f9340bc6537c171f38d4a76cff83ece3baa76eef3b775369656a5faa6708d1d149a1b6b702631b8a425825c58a261c1bf542305d454f9648aa8ef3dc1b3b0900a978a2ff12606637d90fa15597d90a3ccf5224719a7d4d42ee7720784cc3a3279b5af4c31821a4f650344bd325906d445eb1c8bda5d99f1c4d670e7513e36505985822a86889ccb0b8c0f15e3e8cfc9633c35e00ab766c89f36a9bb2f333b0f816f06ebbe19a2f7ef0a957dd1094969f7a390c1c74773c56759b036175c98be81ef344255fd1bc80e8e4c417a74a6628b9a2537bb558d5148d14d21135e3170d02adb8d5b2422bf1d44141b69fc0f9a719c2cc3c36925361de22e050abf07fa9c367e6f93d28db8e5280f914379dd094c9d4897147cf4a20d822d8bbe3df7cb0d85bad88cd54fa046f1588d077bf7b4e3bf2cc0b4401db67867b5731553fd09096cdcba4c818c27266c29896f8a3770f01cb9a10ae90698d84a241fa2b9d4749aec24f58e50826adbfb605093cb4f33866a00a8247fdd03ccd2e2e152a046d83e043b9b08fe9c0f93474f22454ae29a3f52e23ddf95bb78003856bf5f0d9eb536fb3995533e7020b7a7f93c764da70d3489eecd5418298caaea4b7194fa8f5d696be935eb22071cf4c2e8330566e5804437bd9f6106892c3f188605d6668ac6e6ec6bcd45fa2dc9bc0f79cfc41febe3985662e793b4b22e3cc55301b78d7c9fd977413a0f8da063574a3e77c04c05ff035141c1c2b7cd9c11a22e974e4e42e41e26a51e91cb186c8f6c8bfbc4189a28dd2410cf8cb1e6a8ff010865b063ba13f992257d3daa4e02709c4ec9a2de2c2168e8faaef95c8d10b37850a64c0cb7871430c91ed8cc5b0a1612c0f407e188001f11db28ad038718c181f606d110d863dd91c580de562871294f2f4b83c"], 0x1004) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000340)={r6, 0x1, 0x6, @local}, 0x10) 18:00:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0xa}]}]}]}, @IFLA_IFALIASn={0x4}]}, 0x44}}, 0x0) 18:00:43 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x3000000}, 0x0) 18:00:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0xa}]}]}]}, @IFLA_IFALIASn={0x4}]}, 0x44}}, 0x0) 18:00:44 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18:00:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0xa}]}]}]}, @IFLA_IFALIASn={0x4}]}, 0x44}}, 0x0) 18:00:44 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x6000000}, 0x0) 18:00:44 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x7000000}, 0x0) 18:00:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14}]}]}]}]}, 0x40}}, 0x0) 18:00:44 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x8000000}, 0x0) 18:00:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14}]}]}]}]}, 0x40}}, 0x0) 18:00:44 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xa000000}, 0x0) 18:00:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) r1 = memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) dup3(r3, r2, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="500d605dafd31b982d01000000908fa4da02cefb15baa5942433d28129f1839bf8df8b08020b2ef4010000e579e9fff977ddaabced", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r5, 0x2, 0x2d4, 0x1}, 0x10) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000100)=""/31, 0x1f}], 0x2, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team_slave_1\x00'}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000003100)=ANY=[@ANYBLOB="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"], 0x1004) 18:00:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14}]}]}]}]}, 0x40}}, 0x0) 18:00:44 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xe000000}, 0x0) 18:00:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_IFALIASn={0x4}]}, 0x24}}, 0x0) 18:00:44 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xf000000}, 0x0) 18:00:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_IFALIASn={0x4}]}, 0x24}}, 0x0) 18:00:45 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 18:00:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_IFALIASn={0x4}]}, 0x24}}, 0x0) 18:00:45 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_disconnect(r0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000200)={0x0, 0x1}) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x1ff) sched_setparam(r1, &(0x7f0000000080)=0x9) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x54c, 0x3d5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x5, "e152"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002205000000a733414076e6449473cd0188b0e1b0f597e9c9b03b5e6391fd083578d7191c6a12fec5b27f5f3b402e3915c5d04ad82cafe80f7a910e9cafec59d9f3e02b710b04140518cb04220d77c7d70b4077a6371d44b0fa106099baeb53ff8eafccadd57df251eccad987a5b1fee6bf60b6d10a1228d7a85a16173e728b5ac8d84873d08e6d74cff825b31cf50ad700"/160], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RFSYNC(r4, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:00:45 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x14020000}, 0x0) 18:00:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_IFALIASn={0x4}]}, 0x28}}, 0x0) 18:00:45 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 18:00:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) r1 = memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) dup3(r3, r2, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="500d605dafd31b982d01000000908fa4da02cefb15baa5942433d28129f1839bf8df8b08020b2ef4010000e579e9fff977ddaabced", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r5, 0x2, 0x2d4, 0x1}, 0x10) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000100)=""/31, 0x1f}], 0x2, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team_slave_1\x00'}) 18:00:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_IFALIASn={0x4}]}, 0x28}}, 0x0) [ 656.295469][ T5] usb 6-1: new high-speed USB device number 90 using dummy_hcd 18:00:45 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x2c010000}, 0x0) 18:00:45 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 18:00:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_IFALIASn={0x4}]}, 0x28}}, 0x0) 18:00:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_IFALIASn={0x4}]}, 0x2c}}, 0x0) 18:00:46 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0x40000000}, 0x0) [ 656.675592][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.702951][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 656.756844][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.788286][ T5] usb 6-1: config 0 descriptor?? [ 656.816672][T20247] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 18:00:46 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xe8030000}, 0x0) [ 657.039058][ T5] usb 6-1: USB disconnect, device number 90 18:00:46 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:00:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_IFALIASn={0x4}]}, 0x2c}}, 0x0) 18:00:46 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xf4010000}, 0x0) 18:00:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) r1 = memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) dup3(r3, r2, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="500d605dafd31b982d01000000908fa4da02cefb15baa5942433d28129f1839bf8df8b08020b2ef4010000e579e9fff977ddaabced", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r5, 0x2, 0x2d4, 0x1}, 0x10) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000100)=""/31, 0x1f}], 0x2, 0xfffffffffffffffe) 18:00:46 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xfc000000}, 0x0) [ 657.416740][T20272] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 18:00:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_IFALIASn={0x4}]}, 0x2c}}, 0x0) 18:00:46 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xfcff0000}, 0x0) [ 657.635638][ T7430] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 657.687018][T20281] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 18:00:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x30}}, 0x0) 18:00:47 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xfe800000}, 0x0) [ 657.935652][T20287] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 18:00:47 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xfec00000}, 0x0) 18:00:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x30}}, 0x0) [ 658.043834][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.085641][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.122374][ T7430] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 18:00:47 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xfeffffff}, 0x0) [ 658.139550][T20295] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 658.152524][ T7430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.222098][ T7430] usb 6-1: config 0 descriptor?? [ 658.575475][ T7430] usbhid 6-1:0.0: can't add hid device: -71 [ 658.581640][ T7430] usbhid: probe of 6-1:0.0 failed with error -71 [ 658.631835][ T7430] usb 6-1: USB disconnect, device number 91 [ 659.065336][ T7430] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 659.425421][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.446136][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.464259][ T7430] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 659.481946][ T7430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.515698][ T7430] usb 6-1: config 0 descriptor?? [ 659.995495][ T7430] wacom 0003:056A:0331.002E: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 660.192412][ T5] usb 6-1: USB disconnect, device number 92 [ 660.917297][T20332] udc-core: couldn't find an available UDC or it's busy [ 660.924286][T20332] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 18:00:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x30}}, 0x0) 18:00:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) dup3(r2, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="500d605dafd31b982d01000000908fa4da02cefb15baa5942433d28129f1839bf8df8b08020b2ef4010000e579e9fff977ddaabced", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={r4, 0x2, 0x2d4, 0x1}, 0x10) 18:00:50 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xff000000}, 0x0) 18:00:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) fsmount(r1, 0x1, 0xe) creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000380)={0x3, &(0x7f00000001c0)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000400)={r2, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0xd7, 0x6800, 0x397, 0x3, 0x6], 0x45, 0x3, 0x0, &(0x7f0000000580)=[0x0, 0x3, 0x0], 0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000080)={r2, 0xc}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:00:50 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') fchdir(r0) r2 = creat(0x0, 0x2) fallocate(r2, 0x0, 0x0, 0x28120000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000380)={0x3, &(0x7f00000001c0)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000400)={r3, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0xd7, 0x6800, 0x397, 0x3, 0x6], 0x45, 0x3, 0x0, &(0x7f0000000580)=[0x0, 0x3, 0x0], 0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000001c0)={r3, 0x1}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000200)=@short={0xb, @remote, @netrom, 0x1, @null}, &(0x7f0000000240)=0x1c, 0x80000) pwrite64(r4, &(0x7f0000000440)="da4c2a2091dafe168dc536c55113cb690522266dacca4ff19a26bf1f5b260d8a399101ae09e4522373399c134ea2df8050a5ed139059a78ec03082ebc60f3e25a2fdaa19fb5700bd35eb1636b4d0d7ba28e8d6a691d7e67da3a72dbc827c4058db21469c0ab20860becc4d7e16d13b24b43501f0eb774c961b22d9d21a0ed21729dec805e8e62a75650fe893138fc38b9be6379d95cc58b9279974c6076460a9bcb9a7da71535babc3519158eb2432a8e7242f6a5aa516ba030addf8acd464a5391ef0f48df9eb0fc7899fc489541b600e2ef6b3872805d4b73e38c727adfc120e400915e2de7205493d61356b9b0625", 0xf0, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:00:50 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x8}, 0x7, 0x84, &(0x7f0000000000)="798d1eb089d9df9b69ffbe3f016b196d994856592dbf", 0x16, 0x3, 0x6, 0x49, 0xa927, 0xa9bf, &(0x7f00000000c0)="e2286f4fff000f5e3b429de3b4367d20cba2aaaf0c66e5b595ea3c06add2d882b967ddb99f945d96135bad87f8ba898b97f7cc6e86027fec1aed19f57aa6bbfde1a48667064ec6d30b10d5c00433c54ac08a178a6b38c281036fcf8682fe984caf8ecf343b65dc5765140f05269dc38c9fc6", [{0x9, 0x5, 0x6}, {0xffff03ef, 0x9, 0x600000}, {0x8, 0x1000, 0x3}, {0x6, 0x7, 0x8841}, {0x40, 0x8001, 0xfffff7d8}, {0x3f, 0x5, 0x7}, {0x2, 0x4, 0x2}, {0xc052, 0x103, 0xfffffffe}, {0xfffffffd, 0x6, 0x2}, {0x9, 0xfffffff8, 0x7fff}, {0x1, 0x9, 0x91000000}, {0x81, 0x0, 0x3}, {0x90, 0x1d1, 0x480000}, {0x1, 0x45a, 0x20}, {0x4, 0x7, 0xe132}, {0xac4e, 0x4, 0x5}, {0x20, 0x100}, {0x4743, 0x1, 0xfffffff7}, {0x8000, 0xab6, 0x3ff}, {0x400, 0x549d}, {0x8bc5, 0x0, 0x1f}, {0x9, 0x4, 0xfff}, {0xc89, 0x6, 0x4}, {0x0, 0x94e0, 0x6}, {0x0, 0x6}, {0xffffffe0, 0x0, 0x81}, {0x28, 0x4, 0x8}, {0xffff9a2f, 0x9485, 0x8}, {0x6, 0x9e, 0x409}, {0x2b00, 0x4, 0x415}, {0x5, 0x1f, 0x59}, {0x0, 0x1, 0x6}, {0x7e8, 0x2, 0x8733}, {0xe8b4, 0x95}, {0xc6, 0x5, 0x1}, {0x5, 0x7, 0xc239}, {0x3ff, 0x9, 0x2}, {0x877, 0xffffffc0}, {0xffff7fff, 0x0, 0x3}, {0x1000, 0x8, 0x280}, {0xb6, 0x0, 0x5}, {0x3, 0x7, 0x80000000}, {0xfff, 0x8, 0x100}, {0x5, 0x9}, {0x7, 0x3, 0x8}, {0x4000009, 0x5, 0x10001}, {0x5, 0x1, 0x9}, {0x2, 0x603, 0xff}, {0x5, 0x6, 0x7fffffff}, {0x1, 0x2, 0xac}, {0x40, 0xfffffffc, 0x5}, {0x9, 0xb14, 0x5}, {0x800, 0x101, 0x1}, {0x6, 0x6, 0x7fffffff}, {0xb23, 0x148, 0x5}, {0xdf, 0xfffffffa, 0x79}, {0x40, 0x5, 0x7}, {0x1, 0x55, 0x1000}, {0x1fe, 0x1, 0x8000}, {0x0, 0xf8e4, 0x1f}, {0x4, 0x80, 0x1}, {0x6, 0x20, 0x1f}, {0x1f, 0x9, 0x7fffffff}, {0x22, 0x6, 0x6}, {0x652, 0x5, 0x101}, {0x10001, 0x6, 0x7}, {0xdd86, 0x6, 0x80000000}, {0x5c, 0xffffffff, 0x20}, {0x4004, 0x9, 0x1}, {0x6, 0xa6, 0x1}, {0xfffffff8, 0x6, 0x7da2}, {0x9, 0xff, 0x1f}, {0x1, 0x5301, 0xff}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 660.976416][ T5] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 661.084703][T20348] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 18:00:50 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 661.232475][ T29] audit: type=1804 audit(1594576850.563:165): pid=20358 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/291/file0/file0" dev="loop3" ino=343 res=1 18:00:50 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xfffffffe}, 0x0) 18:00:50 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f00000001c0)=@md5={0x1, "eea8a68fb65b9b13fe5bd1510bfb7e48"}, 0x11, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) finit_module(r2, &(0x7f0000000080)='msdos\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x3, 0xe52}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:00:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a05006174000404090a0200027400f801", 0x51}], 0x1010414, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0xff) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:00:50 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x180a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x5001c, 0x1000, 0x0, 0x0, 0x8000000, 0x7}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 661.382369][ T29] audit: type=1804 audit(1594576850.623:166): pid=20360 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/277/file0/file0" dev="loop2" ino=344 res=1 [ 661.505460][ T5] usb 6-1: device descriptor read/64, error -71 18:00:50 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x2) [ 661.657788][T20377] FAT-fs (loop2): bogus number of reserved sectors [ 661.780112][T20377] FAT-fs (loop2): Can't find a valid FAT filesystem 18:00:51 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x3) [ 661.862426][ T29] audit: type=1804 audit(1594576851.193:167): pid=20381 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/292/file0/file0" dev="loop3" ino=345 res=1 18:00:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) dup3(r2, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="500d605dafd31b982d01000000908fa4da02cefb15baa5942433d28129f1839bf8df8b08020b2ef4010000e579e9fff977ddaabced", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) 18:00:51 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x180a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x5001c, 0x1000, 0x0, 0x0, 0x8000000, 0x7}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 18:00:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x70) [ 661.985624][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.021092][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.069139][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 662.106699][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.148543][ T5] usb 6-1: config 0 descriptor?? 18:00:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r2}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r2, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000280)=0x10) creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x24000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x6, 0x0, 0x0, 0x4, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x5118, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfff9}, r3, 0xffffffffffffffff, r4, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x521000, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000140)={0xd, 0x50e1e0cc}) [ 662.495406][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 662.501480][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 662.527017][ T5] usb 6-1: USB disconnect, device number 93 [ 662.989532][ T5] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 663.385375][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.396360][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.407830][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 663.417868][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.430015][ T5] usb 6-1: config 0 descriptor?? [ 663.914779][ T5] wacom 0003:056A:0331.002F: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 664.109944][ T8051] usb 6-1: USB disconnect, device number 94 [ 664.885250][ T2666] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 665.245532][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.256470][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.266462][ T2666] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 665.275732][ T2666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.291881][ T2666] usb 6-1: config 0 descriptor?? 18:00:54 executing program 5: r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x22a, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) dup3(r4, r2, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:00:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) dup3(r2, r1, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) 18:00:54 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x4) 18:00:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x45, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x2040, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0xc00, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {r3, r4/1000+10000}}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ocfs2_control\x00', 0x507302, 0x0) read$alg(r5, &(0x7f00000002c0)=""/4096, 0x1000) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000200)) r6 = dup3(0xffffffffffffffff, r1, 0x80000) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000001340)=0x1) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:00:54 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x180a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x5001c, 0x1000, 0x0, 0x0, 0x8000000, 0x7}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 18:00:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:00:54 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x6) [ 665.515384][ T2666] usbhid 6-1:0.0: can't add hid device: -71 [ 665.521757][ T2666] usbhid: probe of 6-1:0.0 failed with error -71 [ 665.573946][ T2666] usb 6-1: USB disconnect, device number 95 18:00:55 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x180a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x5001c, 0x1000, 0x0, 0x0, 0x8000000, 0x7}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 18:00:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syncfs(r2) r3 = creat(0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 665.748418][ T29] audit: type=1804 audit(1594576855.083:168): pid=20493 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/294/file0/file0" dev="loop3" ino=347 res=1 18:00:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="66b8808b5ecb0f23d80f21f86635800000b00f23f80f01c5260f380020bad004ed660fc775030f01c465f20f2db79b3ce42236f3aeb8fd000f00d8", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xa9ac33775997eceb, 0x0, [0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 665.869820][ T29] audit: type=1804 audit(1594576855.153:169): pid=20507 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/280/file0/file0" dev="sda1" ino=16110 res=1 18:00:55 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x7) 18:00:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f00000000c0)='./file0\x00', 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 665.917435][ T29] audit: type=1804 audit(1594576855.203:170): pid=20494 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/280/file0/file0" dev="sda1" ino=16110 res=1 [ 665.985234][ T2666] usb 6-1: new low-speed USB device number 96 using dummy_hcd [ 666.235240][ T2666] usb 6-1: Invalid ep0 maxpacket: 64 [ 666.253242][ T29] audit: type=1804 audit(1594576855.583:171): pid=20524 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/281/file0/file0" dev="loop2" ino=349 res=1 [ 666.395370][ T2666] usb 6-1: new low-speed USB device number 97 using dummy_hcd [ 666.645329][ T2666] usb 6-1: Invalid ep0 maxpacket: 64 [ 666.651792][ T2666] usb usb6-port1: attempt power cycle [ 667.365177][ T2666] usb 6-1: new low-speed USB device number 98 using dummy_hcd [ 667.455454][ T2666] usb 6-1: Invalid ep0 maxpacket: 64 [ 667.605260][ T2666] usb 6-1: new low-speed USB device number 99 using dummy_hcd [ 667.705588][ T2666] usb 6-1: Invalid ep0 maxpacket: 64 [ 667.711198][ T2666] usb usb6-port1: unable to enumerate USB device 18:00:57 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0022858037788bcde46576"], 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:00:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) syz_mount_image$ocfs2(&(0x7f0000000080)='ocfs2\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x10001, 0x1, &(0x7f0000000140)=[{&(0x7f0000000280)="77a4dfb09162c1912fc82992f61d730530219a17bc4538d0184c38ad20ba84f7a8de037475c84bfac8a712aeb97425da57e1d4440da30ab6f8e9caa927cd7b08f8c5b3209501139ee5ae20204abd5f875772f1a6c6d5b85ee060f7fc68fbe031da78ac80b7b75a5a38743ceeec7e6e221941113f729fa2542fbf12ad6d00fc149f6ff3e285c3b19a7e7bad0fec752a6c5aba5d6c5c681f39798ef13edef56fe2aab64f23002a25a2", 0xa8, 0x1f}], 0x8400, &(0x7f00000001c0)='@\x00') creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:00:57 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000a93000/0x2000)=nil) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="8800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0180000004030000600012800e00010069703665727370616e0000004c000280060010"], 0x88}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 18:00:57 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x8) 18:00:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) dup3(r2, r1, 0x0) 18:00:57 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) fchmod(r1, 0x100) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 668.644811][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 668.672104][T20564] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 18:00:58 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xa) [ 668.814518][ T29] audit: type=1804 audit(1594576858.143:172): pid=20569 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/282/file0/file0" dev="loop2" ino=350 res=1 [ 668.852251][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 668.871281][T20566] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 18:00:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) bind$pptp(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000280)={0x6, 0x2}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = clone3(&(0x7f0000000a80)={0x1000, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900), {0xd}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f0000000940)=""/242, &(0x7f0000000a40)=[0x0, 0x0, r2], 0x3}, 0x58) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000b00)=r3) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 668.912677][ T29] audit: type=1804 audit(1594576858.153:173): pid=20569 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/282/file0/file0" dev="loop2" ino=350 res=1 18:00:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, r2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 668.941767][ T29] audit: type=1804 audit(1594576858.223:174): pid=20572 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/296/file0/file0" dev="loop3" ino=351 res=1 18:00:58 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:00:58 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xe) [ 669.085312][ T7430] usb 6-1: new high-speed USB device number 100 using dummy_hcd 18:00:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x60, 0x140c, 0x321, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x9}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000045) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000280)={0x0, @reserved}) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 669.446542][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.477966][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.534996][ T7430] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 669.592431][ T7430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.603261][ T29] audit: type=1804 audit(1594576858.943:175): pid=20605 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/284/file0/file0" dev="loop2" ino=354 res=1 [ 669.662264][ T7430] usb 6-1: config 0 descriptor?? [ 670.015247][ T7430] usbhid 6-1:0.0: can't add hid device: -71 [ 670.021340][ T7430] usbhid: probe of 6-1:0.0 failed with error -71 [ 670.057225][ T7430] usb 6-1: USB disconnect, device number 100 [ 670.495287][ T7430] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 670.855360][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.866440][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.877593][ T7430] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 670.887446][ T7430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.901590][ T7430] usb 6-1: config 0 descriptor?? [ 671.645325][ T7430] usbhid 6-1:0.0: can't add hid device: -71 [ 671.651426][ T7430] usbhid: probe of 6-1:0.0 failed with error -71 [ 671.664930][ T7430] usb 6-1: USB disconnect, device number 101 [ 672.355176][ T7430] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 672.715367][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.729998][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.743244][ T7430] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 672.757720][ T7430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.767747][ T7430] usb 6-1: config 0 descriptor?? 18:01:02 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xf) 18:01:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) 18:01:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x10001, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:02 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x166, &(0x7f00000000c0)=[{&(0x7f0000000380)="9949db8ccea8655bee13e665d6599e7e3c91b107bedabdda14f48d6a0160f8206c980ef6be8922b36af8b4b88f1f5b1e8ed824de29ec8d120c03d0562e935da4e40af142ff279d08cade1b755c2776d772e2880a707388f04108d24138d8fd027fb6165337d420ee69b42b5b4eac9b1a9ff14820e2", 0x0, 0xd8}, {&(0x7f00000002c0)="70f982b5df8e3be681d575c9ff8cc7f0224a929f41de81937ba9773a6e20c1585e452c526e62ee7f700b018e757b0ba81cb11b3439905476904c85bf3108257fe45d35cd3089ff65c32279f1a1a63c6af793ccbe535e3902920bdf0f58a803f7fe8d6d275fb0fa87a309540b798fd13ac2c841f7178e3eba33000b0c90d17bd9e47d167d5146301d2ad5f5c37ac724c8bee675b51a07ef741116edb58741d3140b67a75f4fd598fa03b7728614bae394", 0x0, 0x7}], 0x8, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80, 0x142, 0x11}, 0x18) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000001c0)=""/238) 18:01:02 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902240001030000006c06f1725cc0415b0009210000000122050009000000000000003b"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x104d000, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0xb9}}, {@mode={'mode', 0x3d, 0xe}}], [{@measure='measure'}]}) [ 672.985404][ T7430] usbhid 6-1:0.0: can't add hid device: -71 [ 672.991824][ T7430] usbhid: probe of 6-1:0.0 failed with error -71 18:01:02 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x11) [ 673.052669][T20655] FAT-fs (loop3): bogus number of reserved sectors [ 673.068365][ T7430] usb 6-1: USB disconnect, device number 102 [ 673.144207][T20655] FAT-fs (loop3): Can't find a valid FAT filesystem [ 673.246072][ T29] audit: type=1804 audit(1594576862.583:176): pid=20657 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/285/file0/file0" dev="loop2" ino=355 res=1 [ 673.332901][ T29] audit: type=1804 audit(1594576862.633:177): pid=20677 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/285/file0/file0" dev="loop2" ino=355 res=1 [ 673.370768][T20655] FAT-fs (loop3): bogus number of reserved sectors 18:01:02 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfc) 18:01:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x79212d, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x81000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000180)={0x0, 0xfffffffffffffd73}, 0x1, 0x0, 0x0, 0x48054}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x100, 0x70bd2d, 0x0, {0x0, 0x0, 0x48, 0x0, 0x0, 0x4000}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_NET_NS_FD={0x0, 0x1c, r2}]}, 0xffffffffffffff97}, 0x1, 0x81000000, 0x0, 0x48050}, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="07d68fcdfc00"/21, @ANYRES16=0x0, @ANYBLOB="080028bd7000fedbdf25190000002000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766972745f77696669000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) [ 673.399427][T20655] FAT-fs (loop3): Can't find a valid FAT filesystem [ 673.476511][ T29] audit: type=1804 audit(1594576862.803:178): pid=20667 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/298/file0" dev="sda1" ino=16168 res=1 [ 673.499377][ T7430] usb 6-1: new high-speed USB device number 103 using dummy_hcd 18:01:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x40) [ 673.640352][ T29] audit: type=1804 audit(1594576862.953:179): pid=20685 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/286/file0/file0" dev="loop2" ino=356 res=1 18:01:03 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x12c) 18:01:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) 18:01:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 18:01:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)) 18:01:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000140)={0x7, {0x4, 0x0, 0x4, 0x20}}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x20000, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e20, 0x2, @mcast1, 0xffffffff}}}, 0x84) [ 673.867555][ T29] audit: type=1804 audit(1594576862.963:180): pid=20685 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/286/file0/file0" dev="loop2" ino=356 res=1 [ 673.905415][ T7430] usb 6-1: config 3 has an invalid descriptor of length 108, skipping remainder of the config [ 673.940911][ T7430] usb 6-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 673.971170][ T7430] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 673.988736][ T7430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.148147][ T29] audit: type=1804 audit(1594576863.483:181): pid=20714 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/287/file0/file0" dev="loop2" ino=358 res=1 [ 674.241184][ T29] audit: type=1804 audit(1594576863.533:182): pid=20711 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/300/file0/file0" dev="loop3" ino=359 res=1 [ 674.279706][ T2666] usb 6-1: USB disconnect, device number 103 [ 674.875113][ T2666] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 675.235474][ T2666] usb 6-1: config 3 has an invalid descriptor of length 108, skipping remainder of the config [ 675.245906][ T2666] usb 6-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 675.257427][ T2666] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 675.268264][ T2666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:01:05 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) 18:01:06 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0xa) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000000)={{0x0, 0x0, @reserved="d4cfdec486ed04b073a04e2c4ede3fcfb5c722b253d5895d666531d86a7fd23d"}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r3 = syz_usb_connect(0x7, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:01:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x37) 18:01:06 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x1f4) 18:01:06 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x5, 0x0, 0x4, 0x100, 0x7cec412a, {0x0, 0xea60}, {0x5, 0x1, 0x9, 0xb4, 0x2, 0x7f, "e6c17ce5"}, 0x100, 0x4, @offset=0x73a, 0xffffffff, 0x0, r0}) fstat(r1, &(0x7f0000000240)) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x1674c19f, 0x6, 0x2, "da148ccc456b29fdf0005769bd342fa93ac21dab7f8eeabf15338e834e276d16", 0x3247504d}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = creat(0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x28120000) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) socket(0x1e, 0x4, 0x0) [ 677.247490][ T2666] usb 6-1: USB disconnect, device number 104 18:01:06 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x214) 18:01:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) [ 677.489218][ T29] audit: type=1804 audit(1594576866.823:183): pid=20765 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/288/file0/file0" dev="loop2" ino=360 res=1 18:01:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f00000011c0)=0x4) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0xf, 0x1}}, 0x1000, 0x8, &(0x7f00000001c0)="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"}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001380)='/dev/zero\x00', 0x400080, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x20, 0x1411, 0x8, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}}, 0x8000) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x241b0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1a) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getsockname$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:07 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x300) [ 677.815184][ T2666] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 677.890686][ T29] audit: type=1804 audit(1594576867.223:184): pid=20800 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/289/file0/file0" dev="loop2" ino=364 res=1 [ 678.225312][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.245263][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.265110][ T2666] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 678.274299][ T2666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.312407][ T2666] usb 6-1: config 0 descriptor?? [ 678.646892][ T2666] usbhid 6-1:0.0: can't add hid device: -71 [ 678.652999][ T2666] usbhid: probe of 6-1:0.0 failed with error -71 [ 678.662546][ T2666] usb 6-1: USB disconnect, device number 105 18:01:08 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) read$FUSE(r0, &(0x7f0000000800), 0x1000) [ 679.565033][ T5] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 679.955430][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.966379][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.978542][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 679.988000][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.998998][ T5] usb 6-1: config 0 descriptor?? 18:01:09 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:01:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) connect$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000080)={0x6, 'wg1\x00', {0x1}, 0x2}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:09 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x3e8) 18:01:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) memfd_create(0x0, 0x0) read$FUSE(r0, &(0x7f0000000800), 0x1000) [ 680.365127][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 680.372551][ T5] usbhid: probe of 6-1:0.0 failed with error -71 18:01:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:09 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x600) [ 680.409096][ T5] usb 6-1: USB disconnect, device number 106 18:01:09 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x700) [ 680.596095][ T29] audit: type=1804 audit(1594576869.923:185): pid=20863 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/290/file0/file0" dev="loop2" ino=365 res=1 18:01:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x101, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 680.706641][ T29] audit: type=1804 audit(1594576869.963:186): pid=20863 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/290/file0/file0" dev="loop2" ino=365 res=1 [ 680.782393][ T29] audit: type=1804 audit(1594576869.973:187): pid=20864 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/303/file0/file0" dev="loop3" ino=366 res=1 [ 680.890520][ T5] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 680.930764][ T29] audit: type=1804 audit(1594576870.263:188): pid=20876 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/291/file0/file0" dev="loop2" ino=367 res=1 [ 681.335284][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.355159][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.375003][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 681.384068][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.408686][ T5] usb 6-1: config 0 descriptor?? [ 681.755221][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 681.761307][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 681.771587][ T5] usb 6-1: USB disconnect, device number 107 18:01:11 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:11 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) open_tree(r0, &(0x7f0000000080)='./file1\x00', 0x81101) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 682.245564][ T5] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 682.264126][ T29] audit: type=1804 audit(1594576871.593:189): pid=20906 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/304/file0/file0" dev="loop3" ino=368 res=1 [ 682.635332][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.652994][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.666179][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 682.676790][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.693954][ T5] usb 6-1: config 0 descriptor?? [ 683.209389][ T5] wacom 0003:056A:0331.0030: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 683.411247][ T5] usb 6-1: USB disconnect, device number 108 [ 684.185261][ T23] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 684.575335][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.586346][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.597496][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 684.607873][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.621662][ T23] usb 6-1: config 0 descriptor?? 18:01:14 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) clock_getres(0x6, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:01:14 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xa00) 18:01:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file1\x00', 0x1d4) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) poll(&(0x7f0000000080)=[{r1, 0x2020}], 0x1, 0x7fff) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:14 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 684.835050][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 684.841422][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 684.906711][ T23] usb 6-1: USB disconnect, device number 109 18:01:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/capi/capi20\x00', 0x202100, 0x0) statx(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x2000, 0x809, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x6, 0x5, 0xfc, 0xe2, 0x0, 0x87, 0x404, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x47, 0x4, @perf_config_ext={0xb8de}, 0x40, 0x0, 0x8000, 0x0, 0x1, 0x20cf, 0x7}, 0x0, 0xc, r3, 0x8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000740)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) 18:01:14 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xe00) 18:01:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:14 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xf00) [ 685.295072][ T23] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 685.387551][ T29] audit: type=1804 audit(1594576874.723:190): pid=20986 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/293/file0/file0" dev="loop2" ino=372 res=1 18:01:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80000) [ 685.665202][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.700506][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.721458][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 685.731169][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.740351][ T29] audit: type=1804 audit(1594576875.073:191): pid=20995 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/294/file0/file0" dev="loop2" ino=373 res=1 [ 685.776654][ T23] usb 6-1: config 0 descriptor?? [ 686.115198][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 686.121271][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 686.156811][ T23] usb 6-1: USB disconnect, device number 110 [ 686.614982][ T23] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 686.836751][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 686.975093][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.986480][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.996750][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 687.006073][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.019896][ T23] usb 6-1: config 0 descriptor?? [ 687.520212][ T23] wacom 0003:056A:0331.0031: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 687.721473][ T23] usb 6-1: USB disconnect, device number 111 [ 688.494959][ T5] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 688.865260][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.876540][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.888409][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 688.900198][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.914195][ T5] usb 6-1: config 0 descriptor?? 18:01:18 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x8}, 0x16, 0x2) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000000), 0x2) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:01:18 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000080)=0x1) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:18 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x1100) 18:01:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:18 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x240440, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$isdn(r3, &(0x7f0000000140)={0x22, 0x83, 0x81, 0x6}, 0x6) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:18 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 689.125038][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 689.134442][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 689.179390][ T5] usb 6-1: USB disconnect, device number 112 [ 689.275267][ T29] audit: type=1804 audit(1594576878.613:192): pid=21069 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/295/file0/file0" dev="loop2" ino=374 res=1 18:01:18 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x1402) [ 689.337846][ T29] audit: type=1804 audit(1594576878.653:193): pid=21074 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/306/file0/file0" dev="sda1" ino=16240 res=1 18:01:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:18 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000280)="0400000900000a0e666174000404090a020002c73d5f95b904eb720fee2907b23a845f8d90c49e65d3f0eeadcd5f8015d1245d91c92f11e014b7d30179913c8290de144b6bb97b9b1e9acd558b92e959becf34bbcce66e718797242a15c0641b068243c0f148c3f37e6b8c1e9a785dc59566fa91cc30788e8c2655e2f4d5b91edd3da4ff914c961aa255e7d4fc6f6f7defcbc202cdfb8ec49b51935e3c8db89789", 0xa1}, {&(0x7f0000000340)="4802096d319e71d28685befe7ba9221bf040380eb476397d33afb13d6904a1b28eb2c8514e4de5d927ffc9ed0df3d8dda083382025e2b0d309127132593aff4d2b03b20d482a43936af7cfc4b55d26da52ddbec1ea781a7ae04d9b952928ef6650e2003b2ae0b77d543bd914cc8722e062726e267cc709d7cd6e082a8190f5e0d6300bad787c2fb9ef16cc62701af860b98a64c928e2", 0x96, 0x80000001}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) lseek(r2, 0x1, 0x4) fchdir(r0) r3 = creat(0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:18 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x2000) [ 689.614673][T21084] FAT-fs (loop3): invalid media value (0x5f) [ 689.647465][T21084] FAT-fs (loop3): Can't find a valid FAT filesystem 18:01:19 executing program 1: lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000000800), 0x1000) [ 689.667765][ T5] usb 6-1: new high-speed USB device number 113 using dummy_hcd 18:01:19 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x2c01) [ 689.960818][T21084] FAT-fs (loop3): invalid media value (0x5f) [ 689.969291][T21084] FAT-fs (loop3): Can't find a valid FAT filesystem [ 690.049306][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.076321][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.104606][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 690.158030][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.173620][ T5] usb 6-1: config 0 descriptor?? [ 690.530181][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 690.537707][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 690.570673][ T5] usb 6-1: USB disconnect, device number 113 [ 690.994949][ T5] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 691.372045][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.383288][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.401737][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 691.412466][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.433501][ T5] usb 6-1: config 0 descriptor?? [ 691.941634][ T5] wacom 0003:056A:0331.0032: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 692.138288][ T5] usb 6-1: USB disconnect, device number 114 [ 692.914927][ T8051] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 693.285122][ T8051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.296235][ T8051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.306190][ T8051] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 693.315447][ T8051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.329240][ T8051] usb 6-1: config 0 descriptor?? 18:01:22 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x3f00) 18:01:22 executing program 1: lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000000800), 0x1000) 18:01:22 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) recvfrom$ax25(r0, &(0x7f0000000080)=""/22, 0x16, 0x40, &(0x7f00000001c0)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:22 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) fchdir(r0) r2 = dup2(0xffffffffffffffff, r0) r3 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r3, 0x20, 0x70bd2b, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, r3, 0x100, 0x70bd2d, 0xfffffeff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4002000) perf_event_open(&(0x7f00000012c0)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffb}, 0x0, 0x4, r2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:22 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 693.545282][ T8051] usbhid 6-1:0.0: can't add hid device: -71 [ 693.551515][ T8051] usbhid: probe of 6-1:0.0 failed with error -71 18:01:22 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 693.592925][ T8051] usb 6-1: USB disconnect, device number 115 18:01:23 executing program 1: lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000000800), 0x1000) 18:01:23 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x4000) 18:01:23 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r6, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={r6, 0xe, 0xca}, &(0x7f0000000840)=ANY=[@ANYRESDEC=r5, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC=r2, @ANYRESHEX=r3, @ANYBLOB="b1816c8c63c47e596ccdb530ebed4d83f2192bb46468b7f983269c75ed180646ee50f3a99940a53a86a9deb60aa906670425f317d736928686274b1be2557a8e92a783804d91f386f70d1d7fdade1241cef7f9771ab53804da10a31470e2428bd2cba8d0fbe88b04c61114e5163e96cc07dab9561519817b99c7742deeaa03861c4e771b677f0bb28819d6b7e39a2c043e8b984ed203dc37345a10254919368d27f8703b083e7eb0db028eae172859d3b3014c6a0cedae22cb30ff861309e7e0c53c09968b2d765e09c015632d43358e9057797f", @ANYRESHEX], &(0x7f0000000180)="2d990c8d8e8a97a3222e1c069633", &(0x7f0000000500)=""/202) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r6, @ANYRESHEX], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000058dae32002b5d679e74a37aefc26aee7d17d9d45fa46cf69bc098cb4fb245bce8f4d9d5106b34d82e09d794fcac9a61c242beea5f264141dec7ef68f888bfd8db0770c3ee7b471baa2f14d35dd69048b0a16e3489feb0682db0cb0290757d5da0c228efe049129"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) [ 693.728079][ T29] audit: type=1804 audit(1594576883.063:194): pid=21178 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/308/file0/file0" dev="loop3" ino=375 res=1 18:01:23 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffbfffff, 0x0, &(0x7f0000000180), 0x20000, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x2080, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:23 executing program 1: r0 = syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:23 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x80fe) 18:01:23 executing program 1: r0 = syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 694.194941][ T8051] usb 6-1: new high-speed USB device number 116 using dummy_hcd 18:01:23 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 694.272967][ T29] audit: type=1804 audit(1594576883.603:195): pid=21200 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/297/file0/file0" dev="sda1" ino=16272 res=1 18:01:23 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xc0fe) 18:01:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x65) uselib(&(0x7f0000000080)='./file0\x00') 18:01:23 executing program 1: r0 = syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) [ 694.565206][ T8051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.649236][ T8051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.693013][ T29] audit: type=1804 audit(1594576884.023:196): pid=21236 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/298/file0/file0" dev="loop2" ino=377 res=1 [ 694.754153][ T8051] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 694.787629][ T8051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.828060][ T29] audit: type=1804 audit(1594576884.023:197): pid=21239 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/310/file0/file0" dev="loop3" ino=376 res=1 [ 694.861032][ T8051] usb 6-1: config 0 descriptor?? [ 694.892694][ T29] audit: type=1804 audit(1594576884.053:198): pid=21240 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/298/file0/file0" dev="loop2" ino=377 res=1 [ 695.235107][ T8051] usbhid 6-1:0.0: can't add hid device: -71 [ 695.241187][ T8051] usbhid: probe of 6-1:0.0 failed with error -71 [ 695.262954][ T8051] usb 6-1: USB disconnect, device number 116 [ 695.744922][ T8051] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 696.014844][ T8051] usb 6-1: device descriptor read/64, error 18 [ 696.404968][ T8051] usb 6-1: device descriptor read/64, error 18 [ 696.674883][ T8051] usb 6-1: new high-speed USB device number 118 using dummy_hcd 18:01:26 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xe803) 18:01:26 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x80000001, 0x80, 0x20, 0x2}}) prctl$PR_GET_SECCOMP(0x15) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 18:01:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400100900000a0e666174000404090a0200027400f801", 0x17}], 0x251804, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000001340)={{0x77359400}, {0x77359400}}, &(0x7f0000001380)) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) ioprio_set$pid(0x2, r2, 0x4007) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080), 0x84800) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000001280)=0x1) timer_create(0x6, &(0x7f00000000c0)={0x0, 0x200, 0x0, @thr={&(0x7f00000001c0)="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", &(0x7f00000011c0)="3fce98b06d0b1e54251bbd103ca2456d450b1865f3b91c19e73c3654c62c237c766738b822a8e5b082bfdb50ba4b99593afaca1963e1724a263d7cf428e0e09d526f7e98c7cdebe7b60301cc2efedc804bcccb6316e97d6b109ab5624e109f99a890847da69e7af2dc692e5af29aad6be7c9fb16f2fc8d1cd4d48646197706e672373a41"}}, &(0x7f0000000140)=0x0) timer_delete(r3) 18:01:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x4, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r8, &(0x7f0000000000)) r9 = timerfd_create(0x0, 0x80800) r10 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r10, &(0x7f0000000000)) sendmsg$unix(r5, &(0x7f0000002480)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000100)="418c3be31429c38f7d0b69acad25b13f1483ec961ec9f857417a13ed841defdbea9f0d763fd6156b3f7cafea8243971250793837a4aa7ae1c378b45be2609e33ec3b0fa8a19dec48613a30cb03f741621a88a814a34a68809dc472a8a9364fbc6041fafa3b6695938ad174c09a623cb1d32c382e6449535b3c34be87c2c8744c32709122ed9fc786d47e51dd6006c4", 0x8f}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f00000001c0)="d4195c9bbd9282fc", 0x8}, {&(0x7f0000000280)="04b4637a36d072adcf6c07d98ce0651488ccbf3255afa1664afea04d6a59cdacb01eef6dbdff", 0x26}, {&(0x7f0000001300)="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", 0x1000}], 0x5, &(0x7f00000023c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r7, r8, r2, r3, r9, r10]}}], 0x98, 0x4000810}, 0x8090) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:01:26 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xf401) 18:01:26 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) [ 697.172031][ T29] audit: type=1804 audit(1594576886.503:199): pid=21290 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/299/file0/file0" dev="loop2" ino=379 res=1 18:01:26 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfc00) 18:01:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x26a380, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={{r2}, 0x8001, 0x6, 0xcbe}) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000500)=0x80000001) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x20200, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000400)={0x2, &(0x7f0000000200)=[{}, {}]}) r5 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000280)="7c6ece3abfbc70f8062ae2429cf44cb6007c040630fffe8a2a1fe0b8425c8f246120fe62920cf0fd2380a1168a3455ebd81cc3c30e48cff53abc4c377dc1067a9c424b109f3c3457dedcd17803f7670747747471ced45ea5566d470c21170f123409b902bd0fba89d90d682a6ceb85c9ff1f382a4805f63099fb97db4bfb5d566a1e701d9018b9", 0x87, r3) keyctl$describe(0x6, r5, &(0x7f0000000340)=""/177, 0xb1) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xb0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x20) 18:01:26 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 697.343374][ T29] audit: type=1804 audit(1594576886.553:200): pid=21290 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/299/file0/file0" dev="loop2" ino=379 res=1 18:01:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x210000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:26 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfcff) [ 697.505013][ T8051] usb 6-1: device descriptor read/64, error -71 [ 697.551914][T21325] encrypted_key: insufficient parameters specified [ 697.589811][T21329] ptrace attach of "/root/syz-executor.0"[21328] was attempted by "/root/syz-executor.0"[21329] 18:01:26 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 697.628382][ T29] audit: type=1804 audit(1594576886.964:201): pid=21325 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/300/file0/file0" dev="loop2" ino=380 res=1 18:01:27 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfe80) [ 697.809459][ T29] audit: type=1804 audit(1594576887.144:202): pid=21341 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/313/file0/file0" dev="loop3" ino=381 res=1 [ 697.910539][T21346] ptrace attach of "/root/syz-executor.0"[21344] was attempted by "/root/syz-executor.0"[21346] [ 697.995202][ T8051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.014837][ T8051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.039013][ T8051] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 698.051806][ T8051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.071753][ T8051] usb 6-1: config 0 descriptor?? [ 698.414986][ T8051] usbhid 6-1:0.0: can't add hid device: -71 [ 698.421124][ T8051] usbhid: probe of 6-1:0.0 failed with error -71 [ 698.443202][ T8051] usb 6-1: USB disconnect, device number 118 [ 699.324869][ T8051] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 699.684948][ T8051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.696032][ T8051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.707612][ T8051] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 699.717651][ T8051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.731009][ T8051] usb 6-1: config 0 descriptor?? 18:01:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000001c0)="372e7f07c7d8be9f6870531f1cc097bfbe3c68b5fbb7095d09aa636a3bc27273d6271d30d5e5330bf49938727a42688e707501bfb93804883bfa67904887fc33b575cb8b4dfd") ptrace$cont(0x20, r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000003c63b189159b755ba09bff3b30d3237744a6eac089fe7eebab9b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fbdbdf25310000000800db00", @ANYRES32, @ANYBLOB="0800db00d87202dc9d4dbf1094a365bf64f13a8f81d7594b24c1a6885b5423bbf056fc191f5f52000ec9c081a7b560efa1f72e4616fb2085078c804aa111a3ce86bb930e9d00d9ba4c44828745b6fc335df5c18acdc321ad7bc81d453950892aa4cd07a9259f8c26c8b0395ad23a17532817d7219389e89e3ed0d2c2bf93678f2e1af1b67a5eaae5735d00000000000003ffe1d4625a", @ANYRES32=r0, @ANYBLOB='\b\x00R\x00', @ANYRES32=r1, @ANYBLOB="0c00990000000002ffffffff0c009900179f000004000000080052005b2e09f2a75e69596c39003fefd553eaae7f16b39108316a748af7f020d9d5a31e566193b0b0f8f89a4265c5c68b64ca52398c106659842e6a67958f3e693c907860cc61cc64a75f2927b8e4c1194e6a6400357075ffbe4862eab7b662e8e3e86491", @ANYRES32=r2, @ANYBLOB], 0x4c}}, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2040, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x400081, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000200)=[@timestamp, @sack_perm, @mss={0x2, 0x2409}, @timestamp, @mss={0x2, 0x81}], 0x5) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x40140, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fsetxattr(r3, &(0x7f00000000c0)=@random={'system.', 'msdos\x00'}, &(0x7f0000000140)='/dev/dlm-control\x00', 0x11, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:29 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfec0) 18:01:29 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 700.085012][ T8051] usbhid 6-1:0.0: can't add hid device: -71 [ 700.091326][ T8051] usbhid: probe of 6-1:0.0 failed with error -71 [ 700.133862][ T8051] usb 6-1: USB disconnect, device number 119 18:01:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xc0100, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r7, 0x3ff, 0x3ff, 0x6, 0x80000000, 0x10000}, 0x14) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 700.224486][T21412] ptrace attach of "/root/syz-executor.0"[21410] was attempted by "/root/syz-executor.0"[21412] 18:01:29 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xff00) 18:01:29 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:29 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:30 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfffc) 18:01:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) sendfile(r5, r8, &(0x7f0000000280)=0x20, 0xffffffffffff4859) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x79212d, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x81000000}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x21}}, @mcast2, @mcast1, 0x1, 0x7fff, 0xc5f, 0x100, 0x100000000, 0x400000, r4}) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 700.734834][ T8051] usb 6-1: new high-speed USB device number 120 using dummy_hcd 18:01:30 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x288, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x92}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x253ef620}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x65f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2c6d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xedc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ce1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x8044}, 0x0) r3 = creat(0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:30 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x1000000) [ 701.105012][ T8051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.131000][ T8051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.143892][ T8051] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 701.154649][ T8051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.168519][ T8051] usb 6-1: config 0 descriptor?? [ 701.198412][ T29] audit: type=1804 audit(1594576890.534:203): pid=21449 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/302/file0/file0" dev="loop2" ino=384 res=1 18:01:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x20802, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000001c0)={0x8, 0xfffffffd, 0x800, 0x49, &(0x7f0000000080)=""/73, 0xd, &(0x7f0000000140)=""/13, 0xaf, &(0x7f0000000280)=""/175}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) [ 701.323882][ T29] audit: type=1804 audit(1594576890.584:204): pid=21459 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/302/file0/file0" dev="loop2" ino=384 res=1 [ 701.504904][ T8051] usbhid 6-1:0.0: can't add hid device: -71 [ 701.512401][ T8051] usbhid: probe of 6-1:0.0 failed with error -71 [ 701.572836][ T8051] usb 6-1: USB disconnect, device number 120 [ 701.623455][ T29] audit: type=1804 audit(1594576890.944:205): pid=21480 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/303/file0/file0" dev="loop2" ino=386 res=1 [ 701.679041][ T29] audit: type=1804 audit(1594576890.964:206): pid=21480 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/303/file0/file0" dev="loop2" ino=386 res=1 [ 702.001100][ T8051] usb 6-1: new full-speed USB device number 121 using dummy_hcd [ 702.365153][ T8051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 702.376455][ T8051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.388515][ T8051] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 702.399184][ T8051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.413752][ T8051] usb 6-1: config 0 descriptor?? [ 702.899700][ T8051] wacom 0003:056A:0331.0033: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 703.103188][ T3077] usb 6-1: USB disconnect, device number 121 [ 703.874852][ T7430] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 704.234880][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.248047][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.259238][ T7430] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 704.268911][ T7430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.285459][ T7430] usb 6-1: config 0 descriptor?? 18:01:33 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8802, 0x80) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000100)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, 0x6c, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES16=r4, @ANYRESHEX=r3, @ANYRESOCT=r0], 0x0) ustat(0x1f, &(0x7f0000000180)) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7600000000040000000000"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:01:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) read$usbmon(r0, &(0x7f0000000080)=""/71, 0x47) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x95, 0x9}, 0x10000, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:33 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:33 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x2000000) 18:01:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) readlink(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)=""/118, 0x76) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 704.514951][ T7430] usbhid 6-1:0.0: can't add hid device: -71 [ 704.521047][ T7430] usbhid: probe of 6-1:0.0 failed with error -71 18:01:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x100) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat2(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x101000, 0x80, 0x8}, 0x18) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000d4}, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 704.617586][ T7430] usb 6-1: USB disconnect, device number 122 18:01:34 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x3000000) 18:01:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) [ 704.776751][ T29] audit: type=1804 audit(1594576894.114:207): pid=21557 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/304/file0/file0" dev="loop2" ino=388 res=1 18:01:34 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) ustat(0x800, &(0x7f0000000080)) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x250000, 0x8, 0x5}, 0x18) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000200)={0xe, 0x1}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x820c0, 0x88) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 704.906729][ T29] audit: type=1804 audit(1594576894.114:208): pid=21557 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/304/file0/file0" dev="loop2" ino=388 res=1 18:01:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:34 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x4000000) [ 705.074880][ T7430] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 705.157791][ T29] audit: type=1804 audit(1594576894.494:209): pid=21570 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/317/file0/file0" dev="loop3" ino=389 res=1 [ 705.340145][ T29] audit: type=1804 audit(1594576894.674:210): pid=21578 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/305/file0/file0" dev="loop2" ino=390 res=1 [ 705.455665][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.474792][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.504756][ T7430] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 705.513951][ T7430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.541341][ T7430] usb 6-1: config 0 descriptor?? [ 705.905181][ T7430] usbhid 6-1:0.0: can't add hid device: -71 [ 705.911264][ T7430] usbhid: probe of 6-1:0.0 failed with error -71 [ 705.934529][ T7430] usb 6-1: USB disconnect, device number 123 [ 706.444798][ T7430] usb 6-1: new full-speed USB device number 124 using dummy_hcd [ 706.714774][ T7430] usb 6-1: device descriptor read/64, error 18 [ 707.104756][ T7430] usb 6-1: device descriptor read/64, error 18 [ 707.374793][ T7430] usb 6-1: new full-speed USB device number 125 using dummy_hcd 18:01:36 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7e2ced674a8ec4970faee8ca5d21bfe1c2431348e9599cfb080f7bce3e5a64d10c7ce7aba76f1fc60a14221b1d86bb0cd810724529d97ee0165f0f07e1d2a18de35bad1f3b25d51a24a7ef24a83f05e9db77606546308a78913d9349f2ebc256a414c5750668ef5f38fd2907252f918f8fb2b28ce5bf1f0b71781c235e7eccf8b47de8e5dd08fa30ed63561141e8b7ae32258fc0404687a8ee584ae31c009fd0c4e558f9c681d6abd5a61a773850ed64"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:01:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:36 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x6000000) 18:01:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000002030102000000000800044000000800000000000001e43c00000100000800000040000000090000008000000000"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x80) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x798}}, 0x30) r4 = accept4$alg(r1, 0x0, 0x0, 0x800) fallocate(r4, 0x0, 0xfffffffffffffffc, 0xa4) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0xb, &(0x7f0000000140)=0x8, 0x4) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 18:01:36 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e6661744dc6033abe8e99c400040409", 0x17, 0x5}], 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x10001, 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 707.623274][T21622] FAT-fs (loop2): invalid media value (0x8e) [ 707.689990][T21622] FAT-fs (loop2): Can't find a valid FAT filesystem 18:01:37 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x7000000) 18:01:37 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 707.818699][T21622] FAT-fs (loop2): invalid media value (0x8e) [ 707.841245][T21622] FAT-fs (loop2): Can't find a valid FAT filesystem 18:01:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) [ 707.848194][ T29] audit: type=1804 audit(1594576897.174:211): pid=21632 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/318/file0/file0" dev="loop3" ino=391 res=1 18:01:37 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1101, 0x1}) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 707.933802][ T29] audit: type=1804 audit(1594576897.264:212): pid=21634 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/306/file0/file0" dev="sda1" ino=16066 res=1 18:01:37 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x79212d, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r3}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x81000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r3, 0x29, 0x3, 0x1f, 0x80, 0x2, @dev={0xfe, 0x80, [], 0x15}, @ipv4={[], [], @local}, 0x8, 0x700, 0x3, 0xffffffff}}) get_thread_area(&(0x7f0000000280)={0x3ff, 0xffffffffdfeff7ff, 0x1000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 708.047552][ T29] audit: type=1804 audit(1594576897.294:213): pid=21634 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/306/file0/file0" dev="sda1" ino=16066 res=1 18:01:37 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x8000000) [ 708.165045][ T7430] usb usb6-port1: attempt power cycle [ 708.320120][ T29] audit: type=1804 audit(1594576897.654:214): pid=21664 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/307/file0/file0" dev="loop2" ino=392 res=1 [ 708.462825][ T29] audit: type=1804 audit(1594576897.654:215): pid=21663 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/307/file0/file0" dev="loop2" ino=392 res=1 [ 708.874872][ T7430] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 709.088154][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.103698][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.124761][ T7430] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 709.133839][ T7430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.174992][ T7430] usb 6-1: config 0 descriptor?? [ 709.514839][ T7430] usbhid 6-1:0.0: can't add hid device: -71 [ 709.520968][ T7430] usbhid: probe of 6-1:0.0 failed with error -71 [ 709.536944][ T7430] usb 6-1: USB disconnect, device number 126 [ 709.994714][ T7430] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 710.354983][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.369304][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.379215][ T7430] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 710.391861][ T7430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.401534][ T7430] usb 6-1: config 0 descriptor?? 18:01:39 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, &(0x7f00000000c0)=0x1, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:39 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xa000000) 18:01:39 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000240)={0x700, 0x1, &(0x7f00000000c0)=[0x81], &(0x7f0000000140)=[0x1f, 0x91, 0x4, 0x8, 0xfa1, 0x2, 0x0, 0x1000, 0x7, 0x3], &(0x7f00000001c0)=[0x5, 0x4], &(0x7f0000000200)=[0xff, 0xfffffffb, 0x6, 0x9, 0x1, 0x58, 0x5, 0x4, 0x1]}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) r6 = accept4$packet(r2, 0x0, &(0x7f0000001a40), 0x80000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)=[{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)="6678cfd80230b9dc903eef480e9fff337ab05ff54a4e15a84121f52a4ab33d6b4cecb89f5fe0f6764da9422a515c17d0146510f304586c5c6375b3c5ff7ce781bcc38d59913611f3ef95cd0bd2b968fe91ad637229aa8acc2a1bd85d80302cfee616ff79622310dd67777fb6377e8207318d57461a98", 0x76}, {&(0x7f0000000380)="4b38737797cadafcee5365ae8ee82c7173bd60929d950ef874667349a40ec83cf5c0af737c85840721319a2b83b66e77d646d4c8f3af8b70983b19715548ec57909c50311025e385641ccbf5d847ae2ac89eb8ce9d2fd55d14bd5140706267f212c839290127e68ee7dfeedf7eb8eb7a06908cd237", 0x75}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000002000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRESDEC=r0, @ANYRES32, @ANYRES32, @ANYRES32], 0xc8, 0x40000}, {&(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000980)="11b8a54283cf0c96cde3a8b58de511b47ed8d7815c5e7bdb8cac1a8fcabe5426768c6ca1a5b515436eea08f77df7e7a09cd14ac2857b28f1474232f80d7d65754c759b0e7fe0c5ea0be0f402f82d2779644ded18232bd5ce480ae921d9c3565a50353499da30d238f32b6181a2af8a15ba820bcefc787b31676dbc75431a39a030c371e222207b2ba1887d1e0fae4e12a15758427dd9559075d660bd89c2d68edfdc0d124c09d090bccb1783a5", 0xad}, {&(0x7f0000000a40)="b7e6219e563e24e03b8d62c10a141602ff7a65b179a09f8f3356a0b392959990b1128600cce680a4f27c81cfe9839218f3e1cd86557cef5a8dbabfb4ef8f0e07d6f2727e4292faacf65bdcd92620e0c53ebcb4bc6e56891a72d6fc2388b168d3ad5293f6296cb2dea8269041e17fda7f28e293d605218d6a2376288b5a639959b7532a1f3dda7225b5c70da3343c5a29a6e9298d8aef521fb75ec2c5bf1b1223c1207dd32bb2882b7d14cb173e881ba179750fb415db7bfc1761467494a76b6d6b29fed650dde9846c062e7c764a531e0581f6b39c1f9d57647b00d5339441235da3", 0xe2}, {&(0x7f0000000b40)="900e49ba29f27f7da85418f9b8ad3e5277a6533d02c5cfd11b2540ae8b6fa700e91e2f4ed73902d3e435cf922f682c00ea7d97b806ea6a378fb69c2a8b19985227d0f85dea88eabdb03fd698a5eb2570fa33ee8894bda6d26f5b613678e25165f8c4b2a75ce83cb4394d10e6a42267f22f8fca2df25c1986c77207b7bbff8b36d6f16aa43316", 0x86}, {&(0x7f0000000c00)="cc728b99b47d38871cb78bc2404fa336abd848dd08801ad22204c1d7f08e9f6792a960382dcb2dd0dc8a626db47acca5afa9e3077aeec772b287b5bee481ec06c824dc666300a33749550f25c958fd4f3d997a51f76c1290b707a832f11033e8cee2fad8cba38b6620576f75fdab735eeaeff050437c2fc511e59a97730d5298098d98f9b1a24d4c7a1a2aaf2bebaca421b865e6d0", 0x95}, {&(0x7f0000000cc0)="45ee5d26239f9328767676e22449d8d221115ab059dbb15efaef529dfd64a47c1be404757b2e8471", 0x28}, {&(0x7f0000000d00)="9b6e3bb8cd527180da0998990cc3e12ef1e869ffc58ba9c5e8514668a9fd3a3d438b2f5b3588807dbfe08da20b1c05f7084378a6160fcb588fb4672e9cc971811d6d782cd66525c045e7a8964c257d8412998064b92b0e340c912ad3354e9e", 0x5f}], 0x6, &(0x7f0000000fc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa8}, {&(0x7f00000010c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001140)="45f486c3dcf680c17c68f3a3b22b8c8afdd387b91379128f5940ef44e9d348e6b7d5d45db36626cf4c04c9665a678080d0f5fac93452e5aac2bd0468bd8ea9f3502d9318fbeead5ea9240bea9022d1394967f59ee83deea8ef0ca3f26327172030db1061ba9fee67d437fc50f7a4aa80fa26959cace78f71a3", 0x79}, {&(0x7f00000011c0)="25923763f5e2a9d0bbc974ebfa7704ca4619750607a60eb14fb1fc646327a47b337287e97b002b25532e2e6d23e3eb63a478d6b0c2125ee54b831ad2c447380146f0b21ec3082dc0e209e7de7906dc53c20eee069e1dcc43add5739fa2c1487ffd7a7b692a92077aa037303e50ac60a03443250305aa6e3bf7676a65a7a5e1e7ad473e6cc25901cfa2973affd7ca7f9cbb1d54e5c46bf4b2e8be4fbdf22899deb4f0c014512b861224b026aa5d937f3d942c75163fbf90facfaf9ef0157fe63898a5d24d39730036a070c324552f5748dfa6d935614ec3cf3bcad0f02cfe0ce9f7decbdc1928dd7ae29f98e6ebaa6f78e5f2e4", 0xf3}, {&(0x7f0000001340)="67feda79cf6e7474d785bc7451fac3020c5787b439a6f438cd3211ac5280b2cb9c64892e779f03cd0e5c709d0e78fe65f40c4ae68b40336b143838021d50517334", 0x41}, {&(0x7f00000013c0)="0f15dff356bac6769bdcd05fd5341ab18ba6251e071acd8ad1fc006521f7f98a145861a44f0bfd6be1c1b438d3730c2034fd4623c80c004e96ffc5670ac8e8a986e5b53cc931865361f5e0060d7de132e38cf9e8eab7611f5d7b694c08b81db081c811230c94d9b4a464dde894f54b6bdb2ca1210a277be76e60cc05a66cb8d1087819bd48de341892ff7cdd96bbc958f8b6afc173a2677e9dea923eaff075067f9b6dcb0c892bd01f1f", 0xaa}, {&(0x7f0000001480)="9fc5bc8b4d5820a1be148468c8b0a1e2f0", 0x11}, {&(0x7f00000014c0)="f126dbee584c2dd99ce60e9e1a6500481b733edb31ec3cf421efbecc40aa6c5ffb63f9a18bc1bb9fa3ae46e39852", 0x2e}, {&(0x7f0000001500)="c30fb79e7f42d658e0f404dc49388f7b4dd65d776050234d2b61d5ee46a912e3", 0x20}, {&(0x7f0000001540)="4d5e70f6960365fc811baa222f7f13122cac04edc6deaa36dcc16d750ed0656f96257272e967c2ea222409849725eb9efb7f873f11fff18d5df71616aac8a09f6da95d", 0x43}, {&(0x7f00000015c0)="3eeb5800fb04a7", 0x7}], 0x9, 0x0, 0x0, 0x10}, {&(0x7f00000016c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001740)="46a3e80f59247a5d7d225a1b97aaeb188d2233be9f5c90a920eaa6ea6043940d5287b0065766ed68c8a680b6e38b1f9af95d15797e75f1ff56afd498baf336b306a11a9f8c85a6188285c144185c76096eca03f05d9b597673d7bf892d94f0f56cb16d91b52bbb4180319af001f171151f632326b91ed0f8af7d4a1fef80bd6f", 0x80}, {&(0x7f00000017c0)="1f7a25bc4f426a44625d8e9260af67161886582361ffc2b06aba980fbc8336545017684d4623d9ff85a0927b0ebf0b380c79dbdec2df3334eb714f5ccf3409b049b7033924d7fe9cd7898533984808072bf69d1f5a65e4453ad483dc72060a8ca22ac6dc4cb6bb780f3e86a58e0575d65ef19f1ef9743b85896f7c551d3862ffbc51a1b7f6a05637f61600fc9d68f02acdc595edace4d0844ffb9db768f9c005c0b88846480a40472254ad4c4c2b020978187b7382417c4ae494cc1f14e66539421b9f80187b3d1e3565c099a26bd7aa93b94acd854d9a17c1c0f5f231d2c7c3ba9f", 0xe2}], 0x2, &(0x7f0000001a80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c0000003a0000000100000002010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0xc0, 0x4008094}], 0x4, 0x8000) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x66040, 0x0) 18:01:39 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000000)={0x7fff, 0x1f, 0x0, 0xfffffeff, 0x7fff, 0xffffff7f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r5 = openat(r4, &(0x7f0000000500)='./file0\x00', 0x2454b51218be38ca, 0x2) getpeername$l2tp6(r5, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x20) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 710.724821][ T7430] usbhid 6-1:0.0: can't add hid device: -71 [ 710.724952][ T7430] usbhid: probe of 6-1:0.0 failed with error -71 [ 710.826609][ T7430] usb 6-1: USB disconnect, device number 127 18:01:40 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xe000000) 18:01:40 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) [ 710.942932][ T29] audit: type=1804 audit(1594576900.274:216): pid=21720 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/308/file0/file0" dev="loop2" ino=394 res=1 18:01:40 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 711.094980][ T29] audit: type=1804 audit(1594576900.344:217): pid=21721 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/308/file0/file0" dev="loop2" ino=394 res=1 [ 711.187989][ T29] audit: type=1804 audit(1594576900.344:218): pid=21701 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/320/file0/file0" dev="loop3" ino=395 res=1 18:01:40 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xf000000) [ 711.222424][ T29] audit: type=1804 audit(1594576900.364:219): pid=21712 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/320/file0/file0" dev="loop3" ino=395 res=1 18:01:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000180), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0xfffffffc}, 0x8) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000140)=@int=0x101, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) [ 711.284737][ T7430] usb 6-1: new high-speed USB device number 2 using dummy_hcd 18:01:40 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 711.398006][T21740] FAT-fs (loop3): bogus number of reserved sectors 18:01:40 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x11000000) [ 711.443132][T21740] FAT-fs (loop3): Can't find a valid FAT filesystem 18:01:40 executing program 0: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) [ 711.666234][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.692082][T21740] FAT-fs (loop3): bogus number of reserved sectors [ 711.705727][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.717668][T21740] FAT-fs (loop3): Can't find a valid FAT filesystem [ 711.764273][ T7430] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 711.824791][ T7430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.861712][ T7430] usb 6-1: config 0 descriptor?? [ 712.214847][ T7430] usbhid 6-1:0.0: can't add hid device: -71 [ 712.228473][ T7430] usbhid: probe of 6-1:0.0 failed with error -71 [ 712.253578][ T7430] usb 6-1: USB disconnect, device number 2 [ 712.684745][ T7430] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 713.054799][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.077158][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.107342][ T7430] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 713.126876][ T7430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.148278][ T7430] usb 6-1: config 0 descriptor?? [ 713.674487][ T7430] wacom 0003:056A:0331.0034: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 713.872782][ T7430] usb 6-1: USB disconnect, device number 3 [ 714.359519][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 714.654792][ T3077] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 715.034839][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.049081][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.060220][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 715.070337][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.079963][ T3077] usb 6-1: config 0 descriptor?? 18:01:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:44 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x14020000) 18:01:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x202002, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast}, &(0x7f0000000140)=0xc) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:44 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x800, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000200)={r5, 0xb3, 0x1, 0x200, 0x8, 0x0, 0x4, 0x0, 0x60, 0xa7c8, 0xffffffff}) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000280)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000fff000/0x1000)=nil}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) 18:01:44 executing program 0: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:44 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000000140)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x69c6}) r5 = dup2(r2, r2) read$dsp(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) dup3(r6, r5, 0x0) tkill(r3, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) syz_usb_disconnect(r0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000100)={0x0, @aes128}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 18:01:44 executing program 0: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 715.285301][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 715.291444][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 715.332640][ T3077] usb 6-1: USB disconnect, device number 4 18:01:44 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x20000000) 18:01:44 executing program 0: r0 = creat(0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x3d) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f00000000c0)={0xfffffffffffffffa, 0x5, 0x7}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 715.609606][ T29] audit: type=1804 audit(1594576904.944:220): pid=21823 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/309/file0/file0" dev="loop2" ino=396 res=1 18:01:45 executing program 0: r0 = creat(0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:45 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x2c010000) [ 715.748103][ T29] audit: type=1804 audit(1594576905.024:221): pid=21840 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/309/file0/file0" dev="loop2" ino=396 res=1 [ 715.784842][ T3077] usb 6-1: new high-speed USB device number 5 using dummy_hcd 18:01:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8000000002060102000000000000000000000000050004000000000012000300686173683a6e65742c706f727400000005000400010000000500010007000000050004000100000011000300685a01bfc8f664528c73683a69702c706f7274000000000500010007000000050005000000000005000400020000000900020073"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) write$P9_RLINK(r1, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:45 executing program 0: r0 = creat(0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:45 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x3f000000) [ 716.181137][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.201328][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.213004][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 716.222290][ T29] audit: type=1804 audit(1594576905.544:222): pid=21879 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/310/file0/file0" dev="loop2" ino=399 res=1 [ 716.254958][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.276149][ T3077] usb 6-1: config 0 descriptor?? 18:01:47 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x40000000) 18:01:47 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:47 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, 0x0) 18:01:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0401000900000a0e6061040004ff00200000f801", 0x14}], 0x88800, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f00000005c0)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) setresuid(0x0, r3, 0x0) syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000400)='./file0/file0\x00', 0x7, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000440)="55d62e4195812966ece9b9a5ba12fc001b947f165dc7ab5ddb6b3e6711c98e281f0d1c413184698afbdfa3d171920ee98b39c87e488347c8c3ccb66b6b93256ff9b4e78a54ec", 0x46, 0x4}], 0x100000, &(0x7f0000000500)={[{@part={'part'}}, {@codepage={'codepage', 0x3d, 'default'}}, {@type={'type', 0x3d, "c1a7e273"}}, {@session={'session', 0x3d, 0x8}}, {@quiet='quiet'}, {@type={'type', 0x3d, "3af49a0e"}}, {@part={'part', 0x3d, 0x8}}, {@file_umask={'file_umask', 0x3d, 0x39f1}}], [{@dont_hash='dont_hash'}, {@uid_eq={'uid', 0x3d, r3}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x800) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000406010100000000000000000a00000505000100070000000900020073797a00000000000900020073797aff0f0008000500010007000000050001000700000005000100070000000900020073797a31000000000900020073797a3100000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) 18:01:47 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220500000047334108e2"], 0x0}, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000080)='\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045037a3300"/88]) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000440)={0x7, 0x1, "3a9a15fb5d0c5a760fd61b097caafb785a5dfa72cb0aa39f2f4d52a78c7369923a120692919a9f44dd33d72afeba9b5a196e679a81882595e5d23f43914bdde383ddcdf4235444d900a87cdeb95692962eb5c0f21eb28c7d20aff8463670b42f16d2892befdb444fd6360872025e8c12"}, 0x78, 0x11, &(0x7f0000000280)={0x22, 0x7, 0x2, 0x52, 0x2}, 0x6) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000001c0)={0x5, 0x1, 0x5, 0xa6, 0x5}, 0xc) delete_module(&(0x7f0000000000)=',+)!%\x00', 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = accept4$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c, 0x80000) setsockopt$inet6_group_source_req(r6, 0x29, 0x0, &(0x7f0000000300)={0x6, {{0xa, 0x4e23, 0x2, @private2, 0x2}}, {{0xa, 0x4e24, 0x5, @remote, 0xffff}}}, 0x108) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:01:47 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 718.464745][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 718.472345][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 18:01:47 executing program 3: mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000a93000/0x2000)=nil) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="8800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB], 0x88}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 18:01:47 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xe8030000) [ 718.505172][ T3077] usb 6-1: USB disconnect, device number 5 18:01:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:48 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000240)='./file0\x00', 0x121) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x280040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) 18:01:48 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:48 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xf4010000) 18:01:48 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) [ 718.864673][ T3077] usb 6-1: new high-speed USB device number 6 using dummy_hcd 18:01:48 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:48 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 719.305117][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.321829][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.339520][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 719.359954][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.373293][ T3077] usb 6-1: config 0 descriptor?? [ 719.734700][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 719.740778][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 719.750489][ T3077] usb 6-1: USB disconnect, device number 6 [ 720.254644][ T3077] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 720.626355][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.637295][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.647679][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 720.657987][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.676318][ T3077] usb 6-1: config 0 descriptor?? [ 721.163536][ T3077] wacom 0003:056A:0331.0035: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 721.368876][ T7430] usb 6-1: USB disconnect, device number 7 [ 722.144608][ T3077] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 722.506095][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.517080][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.529548][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 722.539399][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.549730][ T3077] usb 6-1: config 0 descriptor?? 18:01:52 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:52 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfc000000) 18:01:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:52 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xc0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x90) getsockopt$inet_dccp_int(r1, 0x21, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=0x4) socket$can_raw(0x1d, 0x3, 0x1) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) fstat(0xffffffffffffffff, &(0x7f00000002c0)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0xc) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x26003e, 0x0) 18:01:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8004}, 0x48011) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 722.774711][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 722.782266][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 722.873000][ T3077] usb 6-1: USB disconnect, device number 8 [ 722.888771][ T29] audit: type=1804 audit(1594576912.224:223): pid=22038 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/326/file0" dev="sda1" ino=16349 res=1 [ 722.921751][T22038] IPVS: ftp: loaded support on port[0] = 21 [ 723.080223][ T29] audit: type=1804 audit(1594576912.414:224): pid=22032 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/313/file0/file0" dev="loop2" ino=400 res=1 18:01:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:52 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfcff0000) [ 723.193687][ T29] audit: type=1804 audit(1594576912.464:225): pid=22050 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/313/file0/file0" dev="loop2" ino=400 res=1 18:01:52 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 723.243278][ T29] audit: type=1804 audit(1594576912.574:226): pid=22038 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/326/file0" dev="sda1" ino=16349 res=1 18:01:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0xc010) [ 723.312772][T22038] IPVS: ftp: loaded support on port[0] = 21 18:01:52 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfe800000) 18:01:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:53 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xc0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x90) getsockopt$inet_dccp_int(r1, 0x21, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=0x4) socket$can_raw(0x1d, 0x3, 0x1) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) fstat(0xffffffffffffffff, &(0x7f00000002c0)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0xc) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x26003e, 0x0) [ 723.804796][ T102] tipc: TX() has been purged, node left! 18:01:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:53 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000100000000090400000103010500092100000001220500090581030000000000a80437f5fc8da4015d87cee1eb2acf51080d427e6d0a7781ba6fe0e99abd645f1a07af3eb2e27f0a7291027cc75488f7b984c0a7c0194cd26fdb47463b686a63bd946e7b247f187a96cb607b43dc6e0c5083b4fcdf7b24b12000006a61e6cb07933894718d4709c65ecc37f13ccbaa"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x40, 0x0, 0x8a, {0x8a, 0xb, "cf1d8af550e568d2dabf566b794c756d68ec2e3a199fc8279194ec522f2deaa44e938d22947779296be586f5a1de5e92a3483d5bd750e8eba23ef04496e29f4d2d0f2825aba40ce9e2c4b8401dc2af4d0ab17ef8585b0ce9ac28b261574b3ca781b9a00c8864d6368298839554c030edcf4bdcf5c34f58f9a81771746aa976afed5beaa2027da355"}}, &(0x7f0000000440)={0x0, 0x3, 0x62, @string={0x62, 0x3, "03ea2fd791d0b9d566bca41d1bcff66ce42ef68c7b030b06cbf594e379a1b7b67d7026cf543986667d2ec85eb848e4ad20733efb751e504bd8fd9484f5639f2cb598a5fdcb62b2173b51c04535bec8124e23e488cf0ba179de855c02d9e26394"}}, &(0x7f00000004c0)={0x0, 0xf, 0x5e, {0x5, 0xf, 0x5e, 0x5, [@wireless={0xb, 0x10, 0x1, 0x6, 0x3, 0x1, 0xde, 0x8, 0x27}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x1, 0xf0f, 0x0, [0x3f0f, 0x6000, 0xc000, 0x3f00, 0xff3fff, 0xc000]}, @ssp_cap={0x1c, 0x10, 0xa, 0x80, 0x4, 0x8, 0x0, 0x8, [0xc030, 0x3f00, 0x0, 0xf]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x3, 0x7f, 0x8, 0x1}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x1f, 0x2, "62b709f6", "811d8f44"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x7f, 0x20, 0x52, 0x6, 0x100}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="6010ee000000d219454ef892cc87a91ed938cd0b1f736a7078e792567fa210a68b8c9f6ca75ea5dacd919438edc9a289d60fb17c73ada495fecf045e86b70d7422f875e92e7a00b6671add84fa44f55626c82f3dc734f9f4d1d4d0fe368f8b3c358deda47a6af820e516349eda610ac0136f93208159276ac73f0849031833a8c0343a36646ff908e6928f8c457a3c883c40a9c505a554ec96382c093d2aef0c2c0daea2cfccacc074d1b28d439980bd924e4a9ad32c9361abb27c9da588546f01403a49d9afecfbff253baa1482ab10ee6425ba8462cd7230326cde8a76e8d1ea6c59ca9aa0ec16962c10938d643f27b888ba7b42e3a936fa9a875bce12096bd5a7b7781a6bb452cc32829952dff6e64fea5377b63a5bf2db08cfa1ab93bb9cc4c6080de92fec4864fec7c8"], &(0x7f0000000680)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1000, 0x1}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000800)={0x40, 0xb, 0x2, '?}'}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000880)={0x40, 0x13, 0x6}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @random="698d4f3e13c6"}, &(0x7f0000000900)={0x40, 0x19, 0x2, "fa28"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x9f}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "21000080"}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0x10, &(0x7f0000000d00)={&(0x7f0000000c00)=""/237, 0xed, r6}}, 0x10) r7 = dup(r3) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000001c0)={0xff, 0xffff0ca0, 0x80000001}, 0xc) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x201, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000000080)={@local, @empty}, &(0x7f00000000c0)=0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000bc0)={'veth0_virt_wifi\x00', &(0x7f0000000b00)=@ethtool_flash={0x33, 0x10001, './file0\x00'}}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:01:53 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfec00000) [ 723.915749][ T29] audit: type=1804 audit(1594576913.254:227): pid=22105 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/314/file0/file0" dev="loop2" ino=401 res=1 18:01:53 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x556, 0x8000, 0x8, 0x2}) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x79212d, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x81000000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', r5, 0x10, 0x700, 0x10000, 0x1c000000, {{0x1b, 0x4, 0x2, 0x6, 0x6c, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @empty, {[@ssrr={0x89, 0xb, 0x7a, [@multicast1, @broadcast]}, @timestamp_prespec={0x44, 0x4c, 0x69, 0x3, 0x9, [{@multicast1, 0x5}, {@multicast1, 0x9}, {@multicast1, 0x9}, {@multicast1, 0x6}, {@empty, 0x80000000}, {@empty, 0x20}, {@remote, 0x40}, {@multicast1, 0xfffffff8}, {@local, 0x1}]}]}}}}}) [ 724.056076][ T102] tipc: TX() has been purged, node left! [ 724.085522][ T29] audit: type=1804 audit(1594576913.284:228): pid=22119 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir062349347/syzkaller.Urnlzg/327/file0" dev="sda1" ino=16346 res=1 18:01:53 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfeffffff) 18:01:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) [ 724.291730][ T29] audit: type=1804 audit(1594576913.314:229): pid=22112 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/314/file0/file0" dev="loop2" ino=401 res=1 [ 724.324631][ T3077] usb 6-1: new high-speed USB device number 9 using dummy_hcd 18:01:53 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 724.481771][ T29] audit: type=1804 audit(1594576913.814:230): pid=22136 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/315/file0/file0" dev="loop2" ino=402 res=1 18:01:53 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xff000000) [ 724.637132][ T29] audit: type=1804 audit(1594576913.824:231): pid=22136 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/315/file0/file0" dev="loop2" ino=402 res=1 18:01:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x32448c8, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:01:54 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 724.680649][T22164] ptrace attach of "/root/syz-executor.0"[22163] was attempted by "/root/syz-executor.0"[22164] [ 724.714878][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.748885][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.799615][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 724.846993][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.895723][ T3077] usb 6-1: config 0 descriptor?? [ 724.973215][T22180] ptrace attach of "/root/syz-executor.0"[22179] was attempted by "/root/syz-executor.0"[22180] [ 725.082966][ T29] audit: type=1804 audit(1594576914.414:232): pid=22173 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/316/file0/file0" dev="sda1" ino=16343 res=1 [ 725.264891][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 725.270995][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 725.316330][ T3077] usb 6-1: USB disconnect, device number 9 [ 725.744568][ T3077] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 726.134671][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.154611][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.164460][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 726.194556][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.203829][ T3077] usb 6-1: config 0 descriptor?? [ 726.666527][T22123] udc-core: couldn't find an available UDC or it's busy [ 726.673614][T22123] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 726.893871][T22189] usb 6-1: USB disconnect, device number 10 18:01:56 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xc0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x90) getsockopt$inet_dccp_int(r1, 0x21, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=0x4) socket$can_raw(0x1d, 0x3, 0x1) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) fstat(0xffffffffffffffff, &(0x7f00000002c0)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0xc) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x26003e, 0x0) 18:01:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000800), 0x1000) [ 727.140597][T22218] IPVS: ftp: loaded support on port[0] = 21 [ 727.644770][ T2771] tipc: TX() has been purged, node left! [ 727.814742][T22189] usb 6-1: new high-speed USB device number 11 using dummy_hcd 18:01:57 executing program 5: r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00ce05000033414576"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:01:57 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xffffff7f) 18:01:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x7, 0xfffffffffffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) 18:01:57 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:01:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:57 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000100)={'macvtap0\x00', @ifru_ivalue}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f00000000c0)=0x9, 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x88}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 728.165183][T22189] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 728.192715][T22189] usb 6-1: can't read configurations, error -71 18:01:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:01:57 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfffffffe) 18:01:57 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 728.584625][T22189] usb 6-1: new high-speed USB device number 12 using dummy_hcd 18:01:58 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 728.836124][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 728.836139][ T29] audit: type=1804 audit(1594576918.174:234): pid=22264 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/317/file0/file0" dev="sda1" ino=16344 res=1 18:01:58 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x8000000000) 18:01:58 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000100)={'macvtap0\x00', @ifru_ivalue}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f00000000c0)=0x9, 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x88}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 728.994861][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.030247][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.083343][T22189] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 729.140088][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 729.170114][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.209391][T22189] usb 6-1: config 0 descriptor?? [ 729.245063][T22261] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 729.514677][T22189] usb 6-1: string descriptor 0 read error: -71 [ 729.614674][T22189] usbhid 6-1:0.0: can't add hid device: -71 [ 729.621885][T22189] usbhid: probe of 6-1:0.0 failed with error -71 [ 729.656620][T22189] usb 6-1: USB disconnect, device number 12 [ 730.045078][T22189] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 730.444811][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.458118][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.473515][T22189] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 730.489770][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 730.500308][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.514616][T22189] usb 6-1: config 0 descriptor?? [ 730.539481][T22261] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 730.846468][T22189] usb 6-1: string descriptor 0 read error: -71 [ 730.984744][T22189] usbhid 6-1:0.0: can't add hid device: -71 [ 730.991184][T22189] usbhid: probe of 6-1:0.0 failed with error -71 [ 731.000594][T22189] usb 6-1: USB disconnect, device number 13 [ 731.574751][ T23] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 731.945015][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.956100][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.966947][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 731.983032][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 731.993879][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.010712][ T23] usb 6-1: config 0 descriptor?? [ 732.040428][T22261] raw-gadget gadget: fail, usb_ep_enable returned -22 18:02:01 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000000800), 0x1000) 18:02:01 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x1c1) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) setresuid(0x0, r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) setresuid(0x0, r7, 0x0) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) setresuid(0x0, r10, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1000080, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@privport='privport'}, {@fscache='fscache'}, {@noextend='noextend'}, {@afid={'afid', 0x3d, 0x3bd}}, {@cachetag={'cachetag'}}, {@dfltuid={'dfltuid', 0x3d, r5}}], [{@fowner_eq={'fowner', 0x3d, r7}}, {@fowner_gt={'fowner>', r8}}, {@fowner_lt={'fowner<', r10}}]}}) 18:02:01 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:01 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x100000000000000) [ 732.294885][ T23] usb 6-1: string descriptor 0 read error: -71 18:02:01 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000100)={'macvtap0\x00', @ifru_ivalue}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f00000000c0)=0x9, 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x88}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 18:02:01 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010037fd9bb5406a053103400000000021090225000100000000090400000000000000092100000001220500090581030000020000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f0000000140)={&(0x7f00000000c0)=""/114, 0x72}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000080)={0x9a0000, 0x5, 0x8, r5, 0x0, &(0x7f0000000000)={0x9b0960, 0x3, [], @value=0x3f}}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x7) [ 732.424689][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 732.432953][ T23] usbhid: probe of 6-1:0.0 failed with error -71 18:02:01 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000000800), 0x1000) 18:02:01 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:01 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x200000000000000) [ 732.577309][ T23] usb 6-1: USB disconnect, device number 14 18:02:02 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x300000000000000) 18:02:02 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000100)={'macvtap0\x00', @ifru_ivalue}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f00000000c0)=0x9, 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x88}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 18:02:02 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:02 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000000800), 0x1000) 18:02:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x60, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x2004c845) 18:02:02 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x400000000000000) 18:02:02 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x460f, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 733.054598][ T23] usb 6-1: new high-speed USB device number 15 using dummy_hcd 18:02:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, 0x0, 0x0) [ 733.131427][T22384] smc: net device dummy0 applied user defined pnetid SYZ2 [ 733.183148][ T29] audit: type=1804 audit(1594576922.514:235): pid=22384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/319/file0/file0" dev="loop2" ino=403 res=1 [ 733.353891][ T29] audit: type=1804 audit(1594576922.564:236): pid=22384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/319/file0/file0" dev="loop2" ino=403 res=1 [ 733.504791][ T23] usb 6-1: unable to get BOS descriptor or descriptor too short [ 733.513601][ T23] usb 6-1: too many configurations: 33, using maximum allowed: 8 [ 733.624815][ T23] usb 6-1: config index 0 descriptor too short (expected 37, got 36) [ 733.634304][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 733.758503][ T23] usb 6-1: config index 1 descriptor too short (expected 37, got 36) [ 733.774594][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 733.884619][ T23] usb 6-1: config index 2 descriptor too short (expected 37, got 36) [ 733.904730][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 734.034717][ T23] usb 6-1: config index 3 descriptor too short (expected 37, got 36) [ 734.059125][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 734.164774][ T23] usb 6-1: config index 4 descriptor too short (expected 37, got 36) [ 734.181906][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 734.274731][ T23] usb 6-1: config index 5 descriptor too short (expected 37, got 36) [ 734.284933][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 734.374956][ T23] usb 6-1: config index 6 descriptor too short (expected 37, got 36) [ 734.383991][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 734.474963][ T23] usb 6-1: config index 7 descriptor too short (expected 37, got 36) [ 734.485051][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 734.500320][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 734.515596][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.529997][ T23] usb 6-1: config 0 descriptor?? [ 734.791927][ T23] usb 6-1: USB disconnect, device number 15 [ 735.364609][ T23] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 735.784688][ T23] usb 6-1: unable to get BOS descriptor or descriptor too short [ 735.793310][ T23] usb 6-1: too many configurations: 33, using maximum allowed: 8 [ 735.885777][ T23] usb 6-1: config index 0 descriptor too short (expected 37, got 36) [ 735.893899][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 18:02:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000000)={0x2, 0x81, 0xffffffff}) 18:02:05 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:05 executing program 3: 18:02:05 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x600000000000000) 18:02:05 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000000c0)={0xa, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:02:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, 0x0, 0x0) 18:02:05 executing program 3: [ 736.054634][ T23] usb 6-1: unable to read config index 1 descriptor/all [ 736.075249][ T23] usb 6-1: can't read configurations, error -71 18:02:05 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x700000000000000) 18:02:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, 0x0, 0x0) 18:02:05 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 736.290215][ T29] audit: type=1804 audit(1594576925.624:237): pid=22432 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/320/file0/file0" dev="loop2" ino=404 res=1 18:02:05 executing program 1: 18:02:05 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x800000000000000) [ 736.396740][ T29] audit: type=1804 audit(1594576925.664:238): pid=22444 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/320/file0/file0" dev="loop2" ino=404 res=1 [ 736.494593][ T23] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 736.884714][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.914522][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.924276][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 736.964491][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.973955][ T23] usb 6-1: config 0 descriptor?? [ 737.304679][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 737.311103][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 737.325233][ T23] usb 6-1: USB disconnect, device number 17 [ 737.834521][ T23] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 738.234887][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.245922][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.257499][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 738.267495][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.277629][ T23] usb 6-1: config 0 descriptor?? [ 738.834780][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 738.840780][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 738.850222][ T23] usb 6-1: USB disconnect, device number 18 [ 739.524547][ T3077] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 739.884656][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.895641][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.907277][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 739.917149][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.930863][ T3077] usb 6-1: config 0 descriptor?? 18:02:09 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x200, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeff}, 0x0, 0xd, r1, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = accept(r2, &(0x7f0000000700)=@l2tp6={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x80) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xdb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x20, 0x7f, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0xa834, 0x40, 0x1, {0x22, 0x890}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x81, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x2, 0x5, 0x7f}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0x7f, 0x63, 0xe0, 0xd3e12aa35d84798d, 0x6}, 0x43, &(0x7f0000000300)={0x5, 0xf, 0x43, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x24, 0x1, 0x9, 0xfffd, 0x7f}, @ss_container_id={0x14, 0x10, 0x4, 0xc5, "3383b12f0d6b7f881e9752af0bc7471f"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x6, 0x2}, @generic={0x4, 0x10, 0x2, "a7"}, @ss_container_id={0x14, 0x10, 0x4, 0xf9, "1a624deb5173817fb5bd356ca229a6c9"}]}, 0x5, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2801}}, {0x102, &(0x7f00000003c0)=@string={0x102, 0x3, "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"}}, {0x6d, &(0x7f0000000500)=@string={0x6d, 0x3, "0adda2506eec0693503d538aadd69717f771439e63988ddf677c6dc054636d985daf879a13e57a32b608b5d3308a7284550469388330ffec017a3921f53f5b9f3d24907da42fc8d27b5c4ba57931983244273b47a0328ae74c939fceb86fdcb52af7dcd8bb71388ad02236"}}, {0x9a, &(0x7f0000000580)=@string={0x9a, 0x3, "0159a023026f688f821c2be30ce80ccc01f4b3199a0afcd55dd7f1874cb3f2feaf89eec8ee4fb531a65ac35abdcfe9edc958a5917eea5cfc41c760c93f7ab92a8cab1e15f854ca3759114901a6788b0a1aa88bef57193671f90bcd7cc450852829e659cf2e50c58db46e7b7d5164e97b2fcb4bdbd96358920517e7f318db898704dd76900a5476a9b7f671fedd358ec9844a8b75499f80ee"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1401}}]}) 18:02:09 executing program 3: 18:02:09 executing program 1: 18:02:09 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:09 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xa00000000000000) 18:02:09 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x210800, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0x20, "2ba581ccfffd5a7a15b35efeeada44d85f011293d19a064eb4638d7f40a4ddee8be40e95647c488de191114b905e98a80d4baa1134b6bc52341a4808913b4841"}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xea) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r7 = socket$netlink(0x10, 0x3, 0x0) read$dsp(r5, &(0x7f0000000100)=""/39, 0x27) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830a0000000000001b", @ANYRES32=r7], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000280)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x800) 18:02:09 executing program 3: [ 740.254662][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 740.261432][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 18:02:09 executing program 1: 18:02:09 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:09 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xe00000000000000) [ 740.394543][ T3077] usb 6-1: USB disconnect, device number 19 18:02:09 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:09 executing program 1: [ 740.574608][ T8051] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 740.784617][ T3077] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 740.944752][ T8051] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 740.964695][ T8051] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 740.994539][ T8051] usb 3-1: config 1 interface 0 has no altsetting 0 [ 741.154837][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.172149][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.183479][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 741.193142][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.214714][ T3077] usb 6-1: config 0 descriptor?? [ 741.247422][ T8051] usb 3-1: New USB device found, idVendor=056a, idProduct=00db, bcdDevice= 0.40 [ 741.259089][ T8051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.271006][ T8051] usb 3-1: Product: 傢錆㵐詓횭ភ燷鹃顣籧쁭捔顭꽝骇㉺ࢶ펵訰葲ѕ㡩ゃ稁ℹ㿵齛␽綐⾤틈屻ꕋㅹ㊘❄䜻㊠鍌캟澸뗜熻訸⋐ [ 741.292098][ T8051] usb 3-1: SerialNumber: 夁⎠漂轨ᲂ찌ᦳચ헼흝蟱덌ﻲ覯죮修ㆵ媦嫃쾽壉醥ﱜ읁쥠稿⪹ꮌᔞ哸㟊ᅙʼn碦ઋꠚᥗ然௹糍僄⢅콙倮跅溴絻摑篩쬯揙鉘ᜅ螉遶吊ꥶﹱ㗝즎䪄疋齉 [ 741.334998][T22506] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 741.342245][T22506] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 741.574584][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 741.580920][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 741.596283][ T3077] usb 6-1: USB disconnect, device number 20 [ 741.774615][ T8051] usbhid 3-1:1.0: can't add hid device: -71 [ 741.780705][ T8051] usbhid: probe of 3-1:1.0 failed with error -71 [ 741.794870][ T8051] usb 3-1: USB disconnect, device number 12 [ 742.070814][ T29] audit: type=1804 audit(1594576931.404:239): pid=22506 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/321/file0/file0" dev="loop2" ino=405 res=1 [ 742.114648][ T3077] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 742.334507][ T8051] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 742.404506][ T3077] usb 6-1: device descriptor read/64, error 18 [ 742.695363][ T8051] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 742.706162][ T8051] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 742.721196][ T8051] usb 3-1: config 1 interface 0 has no altsetting 0 [ 742.814512][ T3077] usb 6-1: device descriptor read/64, error 18 [ 742.964766][ T8051] usb 3-1: New USB device found, idVendor=056a, idProduct=00db, bcdDevice= 0.40 [ 742.973850][ T8051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.986933][ T8051] usb 3-1: Product: 傢錆㵐詓횭ភ燷鹃顣籧쁭捔顭꽝骇㉺ࢶ펵訰葲ѕ㡩ゃ稁ℹ㿵齛␽綐⾤틈屻ꕋㅹ㊘❄䜻㊠鍌캟澸뗜熻訸⋐ [ 743.008216][ T8051] usb 3-1: SerialNumber: 夁⎠漂轨ᲂ찌ᦳચ헼흝蟱덌ﻲ覯죮修ㆵ媦嫃쾽壉醥ﱜ읁쥠稿⪹ꮌᔞ哸㟊ᅙʼn碦ઋꠚᥗ然௹糍僄⢅콙倮跅溴絻摑篩쬯揙鉘ᜅ螉遶吊ꥶﹱ㗝즎䪄疋齉 [ 743.055092][T22576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 743.068426][T22576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 743.104706][ T3077] usb 6-1: new high-speed USB device number 22 using dummy_hcd 18:02:12 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xf00000000000000) 18:02:12 executing program 3: 18:02:12 executing program 1: 18:02:12 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:02:12 executing program 3: 18:02:12 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:12 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x1100000000000000) 18:02:12 executing program 1: 18:02:12 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf8af}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 743.414692][ T8051] usbhid 3-1:1.0: can't add hid device: -71 [ 743.420781][ T8051] usbhid: probe of 3-1:1.0 failed with error -71 18:02:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x2}}}}]}, 0x78}}, 0x0) [ 743.477799][ T8051] usb 3-1: USB disconnect, device number 13 18:02:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x341, 0x0) write$9p(r2, &(0x7f0000000100)="0600000000000000c9b90003060000002a1ff7adf576f3790f61bc2c198c4397a37cbf8d63735e09ab8383afd2de1a5587fe067fde18fa64249e1dbae8886cc4318c81733d8af5a72e2a678a537d233abc5afa4d18f8d88392cafbbf33b3aacfcf04f7b0bdf78687e0", 0x69) 18:02:12 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x1402000000000000) 18:02:13 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 743.717953][T22627] dlm: no locking on control device 18:02:13 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x2000000000000000) 18:02:13 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) [ 743.749856][T22629] dlm: no locking on control device 18:02:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_0\x00'}) 18:02:13 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:13 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000a93000/0x2000)=nil) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)=ANY=[], &(0x7f00000001c0)=0x6) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000100)={'macvtap0\x00', @ifru_ivalue}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24040000) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f00000000c0)=0x9, 0x4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x88}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 18:02:13 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x2c01000000000000) [ 743.914547][ T3077] usb 6-1: device descriptor read/64, error 18 [ 743.998048][T22649] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 18:02:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) dup3(r0, r3, 0x0) [ 744.354615][ T29] audit: type=1804 audit(1594576933.684:240): pid=22657 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/323/file0/file0" dev="loop2" ino=407 res=1 [ 744.390807][ T29] audit: type=1804 audit(1594576933.724:241): pid=22664 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/323/file0/file0" dev="loop2" ino=407 res=1 [ 744.464564][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.482695][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.502836][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 744.512966][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.523056][ T3077] usb 6-1: config 0 descriptor?? [ 744.866175][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 744.872379][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 744.895950][ T3077] usb 6-1: USB disconnect, device number 22 [ 745.404506][ T3077] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 745.784865][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.795939][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.807088][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 745.817289][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.827260][ T3077] usb 6-1: config 0 descriptor?? [ 746.309537][ T3077] wacom 0003:056A:0331.0037: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 746.513767][ T8051] usb 6-1: USB disconnect, device number 23 [ 747.284485][ T5] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 747.674565][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.688865][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.699952][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 747.709994][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.719652][ T5] usb 6-1: config 0 descriptor?? 18:02:17 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000030c100406a053103400000ccf10109022400010012c47b9e8075fa568e19000921000000012205"], 0x0) syz_usb_disconnect(r0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0xffffffff, 0x5, 0x71, &(0x7f0000ffc000/0x3000)=nil, 0xff}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:02:17 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:17 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x3f00000000000000) 18:02:17 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000280)=""/241) 18:02:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c0003800800010002000000140002007663616e300000000000000000000000080003"], 0x50}}, 0x0) 18:02:17 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0900000000000000280012800a00010076786c616e00000018000280140008000002"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 747.909955][T22721] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 747.924642][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 747.930895][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 747.970927][T22724] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 747.989349][T22729] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 747.991713][ T5] usb 6-1: USB disconnect, device number 24 [ 748.014077][T22732] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 18:02:17 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:17 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x4000000000000000) 18:02:17 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 748.149719][T22742] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 748.168142][ T29] audit: type=1804 audit(1594576937.504:242): pid=22723 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/324/file0/file0" dev="loop2" ino=408 res=1 18:02:17 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) keyctl$reject(0x13, r0, 0xe3, 0x64890af7, r1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:02:17 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xe803000000000000) [ 748.369300][T22754] MINIX-fs: bad superblock [ 748.414488][ T5] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 748.423535][T22754] MINIX-fs: bad superblock 18:02:17 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 748.526193][ T29] audit: type=1804 audit(1594576937.864:243): pid=22765 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/325/file0/file0" dev="loop2" ino=409 res=1 [ 748.744863][T22768] MINIX-fs: bad superblock [ 748.794796][ T5] usb 6-1: config 0 has an invalid descriptor of length 158, skipping remainder of the config [ 748.809950][ T5] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 748.951832][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 748.984468][ T5] usb 6-1: New USB device strings: Mfr=0, Product=204, SerialNumber=241 [ 748.992841][ T5] usb 6-1: Product: syz [ 749.006433][ T5] usb 6-1: SerialNumber: syz [ 749.035220][ T5] usb 6-1: config 0 descriptor?? [ 749.316112][ T5] usb 6-1: USB disconnect, device number 25 [ 749.884520][ T5] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 750.244690][ T5] usb 6-1: config 0 has an invalid descriptor of length 158, skipping remainder of the config [ 750.255184][ T5] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 750.374536][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 750.383649][ T5] usb 6-1: New USB device strings: Mfr=0, Product=204, SerialNumber=241 [ 750.393160][ T5] usb 6-1: Product: syz [ 750.398039][ T5] usb 6-1: SerialNumber: syz [ 750.411798][ T5] usb 6-1: config 0 descriptor?? [ 750.737235][ T5] usb 6-1: USB disconnect, device number 26 [ 751.464554][ T12] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 751.844557][ T12] usb 6-1: config 0 has an invalid descriptor of length 158, skipping remainder of the config [ 751.855101][ T12] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 751.975295][ T12] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 751.985199][ T12] usb 6-1: New USB device strings: Mfr=0, Product=204, SerialNumber=241 [ 751.993552][ T12] usb 6-1: Product: syz [ 751.999068][ T12] usb 6-1: SerialNumber: syz [ 752.010975][ T12] usb 6-1: config 0 descriptor?? 18:02:21 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001280)={0x0, 0x0}) r3 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f00000024c0)={0x3, r0}) recvmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001340)=""/219, 0xdb}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x3, &(0x7f00000001c0)=""/31, 0x1f}, 0xffff}], 0x1, 0x40010001, &(0x7f0000002440)={r1, r2+10000000}) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:02:21 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xf401000000000000) 18:02:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="240000001a0003041dfffd946f6105000200000a1f000003006708000800030040000000280000001100ffffba16a0aa1c09000000000000120000000000eff24d8238cfa47e23f7efbf5420", 0x4c}], 0x1}, 0x0) 18:02:21 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:02:21 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000100000000090400000103010000092100000001220500090581030000000000935c1f4c58d792af55879881afeb8917057989d975865adf2c60973e88980b31c5fb82cac70287f2d82cc4d0e878f10e3d8c346d6cf2ca1f37293d6d116f25bb5c972bec590914e8e755279caa4ce794a97fdd0087f4aa8243f7fd13192a83492f2fa58197"], 0x0) syz_usb_disconnect(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x485441, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYRESHEX=r4, @ANYRES64=r0, @ANYRESHEX, @ANYRES16=r0, @ANYRESDEC=r6, @ANYRES64=r1], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 752.045225][ T12] usb 6-1: can't set config #0, error -71 [ 752.073448][ T12] usb 6-1: USB disconnect, device number 27 18:02:21 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfc00000000000000) [ 752.140757][T22813] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 752.152561][T22814] MINIX-fs: bad superblock 18:02:21 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:02:21 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfcff000000000000) [ 752.488843][ T29] audit: type=1804 audit(1594576941.824:244): pid=22831 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/326/file0/file0" dev="loop2" ino=410 res=1 18:02:21 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41c1, 0x28100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44402, 0xffffffffffffffff, 0x10000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 752.564480][ T12] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 752.575554][ T29] audit: type=1804 audit(1594576941.854:245): pid=22825 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/326/file0/file0" dev="loop2" ino=410 res=1 [ 752.602444][T22835] MINIX-fs: bad superblock 18:02:22 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfe80000000000000) 18:02:22 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 752.843530][ T29] audit: type=1804 audit(1594576942.174:246): pid=22840 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/327/file0/file0" dev="loop2" ino=411 res=1 18:02:22 executing program 3: syz_mount_image$minix(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 752.886665][T22848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 18:02:22 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='msdos\x00', 0x6) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x124) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000140)='%\x00', 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 752.964883][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 18:02:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) [ 753.006240][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 18:02:22 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfec0000000000000) [ 753.064744][ T12] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 753.116940][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.155125][ T12] usb 6-1: config 0 descriptor?? 18:02:22 executing program 3: syz_mount_image$minix(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 753.292138][ T29] audit: type=1804 audit(1594576942.624:247): pid=22873 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/328/file0/file0" dev="loop2" ino=412 res=1 [ 753.403216][ T29] audit: type=1804 audit(1594576942.624:248): pid=22873 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/328/file0/file0" dev="loop2" ino=412 res=1 [ 753.498566][ T12] usbhid 6-1:0.0: can't add hid device: -71 [ 753.506795][ T12] usbhid: probe of 6-1:0.0 failed with error -71 [ 753.549453][ T12] usb 6-1: USB disconnect, device number 28 [ 754.026325][ T12] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 754.334541][ T12] usb 6-1: device descriptor read/64, error 18 [ 754.724463][ T12] usb 6-1: device descriptor read/64, error 18 [ 754.994443][ T12] usb 6-1: new high-speed USB device number 30 using dummy_hcd 18:02:24 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[]) 18:02:24 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xfeffffff00000000) 18:02:24 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fsopen(&(0x7f0000000080)='afs\x00', 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x101000, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000300)=@req={0x28, &(0x7f00000002c0)={'bond_slave_0\x00', @ifru_names='veth0_to_team\x00'}}) fchdir(r1) creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r3, 0xc91add0bf88807dd, 0x0, 0x0, {0x33}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000084}, 0x8050) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) lseek(r4, 0x7, 0x0) 18:02:24 executing program 3: syz_mount_image$minix(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:02:24 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x58}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x10000880}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x79212d, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c18000010008108000048000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r9, @ANYBLOB="1400030067656e65766530000000000000000000"], 0x3c}, 0x1, 0x81000000}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=@ipmr_newroute={0x1bc, 0x18, 0x400, 0x70bd25, 0x25dfdbfb, {0x80, 0x20, 0x10, 0x81, 0xfc, 0x3, 0xfd, 0x4, 0xc00}, [@RTA_OIF={0x8, 0x4, r9}, @RTA_ENCAP={0xd5, 0x16, 0x0, 0x1, @generic="f3223e8df5cf48e26bc1aa03741eaa56b2ce9ac7d17622e6bc4a8485429a2e3c64aee840aff41d7a06f4a15662d2f235a8faff6725cc49325338ccbafe5fc075bea820d501096902fe58a8eee6927a04c91953f216ad8319527ffac9f265541206d01dfe6fe4006ba24704619fd5d0a55078c4b1588a44435b7dc6073487d3424dd2b320d2ee32309f8686fccc3754544d98e2a61a3c95834719c66f3ead84f4cacb91b07e4d87a969faefefdeb8543e75f93636b173c66a38bec558af4379e6e73057ed9d67b4154222e61bf87b8bed03"}, @RTA_ENCAP={0xbe, 0x16, 0x0, 0x1, @generic="0553051938ffe1f1948cd765611c1c244c89dcfea223c32e49c738176cdd6398239c687d5b7fee8639c410b3e30246ba76f5e5e85ecb0356745989b4675ddfc48506daec657a1758b9e42f3defea48c7a5fc8b9a7cf645519156d7e346fe875508c6e37d27233c3de722e4de0f163b3a9bcf248767a7dace4286fa3c642557bfaf4be67b598d76fcc734b19b16ddda4400c5f67d1194a4459d6e45cfe15eb4330e6580a699e6b405646b172016d29ba4b7282c5546f2486c28b8"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000800}, 0x48010) [ 755.304935][T22922] overlayfs: overlapping lowerdir path 18:02:24 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', 0x0, 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 755.463402][T22922] overlayfs: overlapping lowerdir path [ 755.804480][ T12] usb 6-1: device descriptor read/64, error -71 18:02:25 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:25 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xff00000000000000) 18:02:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 18:02:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x109400, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:02:25 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', 0x0, 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:02:25 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xffffff7f00000000) 18:02:25 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', 0x0, 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:02:25 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0xffffffff00000000) [ 756.314851][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 18:02:25 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 756.366738][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.430158][ T12] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 18:02:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0xcaba, 0x400, 0xd60, 0x7fff, 0x4, "71e491f3314ff873"}) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, &(0x7f0000001340)={[0x10001, 0x5997, 0x9, 0x6, 0xc50aee38, 0x5, 0x9, 0xb7, 0x4af, 0x4, 0x100, 0x7, 0x7, 0xcb, 0x5, 0x8, 0x8001, 0xd7e, 0x9, 0x1ff, 0x3, 0x7, 0x8000, 0x9, 0x3ff, 0x2, 0x3, 0x81, 0x7fffffff, 0x3, 0x3ff, 0x1, 0x3f, 0x4, 0x0, 0x18c, 0x20, 0x0, 0x8a, 0x0, 0x80000000, 0x401, 0x4, 0x5, 0x2, 0x2, 0x800, 0x0, 0x8, 0x3, 0x80000000, 0x9, 0x80, 0x6, 0xd8, 0x9, 0xac2, 0x80000001, 0xff, 0x9e3, 0x80, 0x1, 0xe61, 0x2, 0x1, 0x1ff, 0xffff, 0x9, 0x7ff, 0x80000000, 0x3f, 0x5, 0x9, 0x6, 0x5, 0xffffffff, 0xfffffffc, 0x1, 0x40, 0x7, 0x1, 0x4, 0x6, 0x0, 0x0, 0x0, 0x7ff, 0x7, 0x7fff, 0x1, 0x6, 0x5, 0x3f, 0x2, 0xfffffffe, 0x1, 0x5, 0x81, 0xd6, 0x8000, 0x7ff, 0xffffffd1, 0x7, 0x9, 0x800, 0x0, 0x0, 0x4, 0x4, 0x401, 0x80000000, 0x0, 0x400, 0x8, 0x0, 0x8, 0x4, 0x6, 0x2, 0x7f, 0x14000, 0x6, 0xfffffffa, 0x9a, 0xfffffffb, 0xffffffff, 0x6, 0x3f, 0x9, 0x2, 0xdbf, 0x5, 0x3ff, 0x5, 0x9355, 0x2, 0x7, 0x705, 0x1, 0x7fffffff, 0x2, 0x2, 0x8, 0x8000, 0x0, 0x10001, 0xe9bd, 0x2, 0xff, 0x8, 0xffc00000, 0xff, 0x9, 0x1, 0x100, 0x10000, 0x7, 0xd49, 0x6, 0x0, 0x8df, 0x9, 0x200, 0x8, 0x6d, 0x43, 0x1, 0x0, 0xffff, 0x1, 0x400, 0xfb, 0x8000, 0x7fffffff, 0x8, 0x5, 0x334f, 0x1ff, 0x3, 0x8, 0x800, 0xfff, 0x80000001, 0xe9f8, 0xb1d, 0x7, 0xfc, 0xffff, 0x6, 0x9, 0x219, 0x7ff, 0x9, 0x200, 0x4, 0x2, 0x2, 0x8, 0x2, 0x8, 0x0, 0x3, 0x81, 0xfffffffd, 0x7fffffff, 0x9, 0x3, 0x5, 0x2aa, 0x9, 0x33, 0x1f, 0xb7, 0x7, 0x0, 0x3f, 0x7fff, 0x0, 0x122, 0x9, 0x0, 0xffffffc1, 0x1a5, 0xfa, 0x3, 0x1f, 0xffffff00, 0x6, 0x0, 0x7fff, 0x101, 0x97, 0x4, 0x5, 0x5780, 0xf85, 0x7, 0x2, 0x9, 0x3, 0x4072, 0x8, 0xd9, 0xfffffffb, 0x3, 0x9, 0x800, 0x2, 0x9, 0x7fff, 0x10001, 0x6, 0xa78, 0x7fffffff, 0x8, 0x0, 0x6, 0x9, 0x9, 0x6d4, 0x2, 0x80000001, 0x15, 0x80, 0x6, 0x4e8, 0x7ff, 0x2, 0x0, 0x1, 0x8, 0xf603, 0xf7aa, 0x7b, 0x9, 0x15c, 0x100, 0x2f, 0x7, 0x3, 0xffff, 0x4, 0xaa8, 0x6, 0x653, 0x660f, 0x9, 0x5, 0x40, 0x1ff, 0x0, 0x8, 0x3, 0x0, 0x180, 0x1, 0x8, 0x2eb6, 0x6, 0x5, 0x4, 0x80, 0x6, 0xffffff64, 0xbda, 0x9, 0x8, 0x644b, 0x200, 0x1000, 0x7fff, 0x100, 0x0, 0x2, 0x3, 0x7, 0x100, 0x3a58, 0x3, 0x2, 0x200, 0x64, 0x1f, 0x4, 0xffffffff, 0x2, 0x400, 0x9, 0x7f, 0x2, 0x8, 0x7f, 0x6, 0x7f, 0x1, 0x10000, 0xb87a, 0x0, 0xff, 0x3, 0x9, 0x1, 0x6, 0x6, 0x6, 0x80000000, 0x6, 0x3, 0x5, 0x6, 0x4, 0x89, 0x4, 0x3, 0x3, 0x23, 0x1ff, 0x3, 0x9, 0x7, 0x10000, 0x9, 0x94, 0x8, 0x9, 0x2, 0x9, 0xa035, 0xfffffffb, 0xffff, 0x0, 0xfffffff9, 0x667, 0x400, 0x401, 0x7fffffff, 0x6, 0x1, 0xe3, 0x95, 0xf0, 0x4, 0x9, 0xc2f, 0x80000000, 0x1ef, 0x0, 0x4, 0x1, 0x10001, 0x6, 0x9, 0x81, 0x45, 0xffff0000, 0x953, 0x2, 0x2, 0x7f800000, 0x2, 0x4, 0x6, 0x4, 0x1, 0x7, 0x8, 0x107a, 0x1, 0x4, 0x4, 0xfffffffc, 0x3, 0x10c0000, 0x97ab, 0x5, 0x9, 0xae, 0x180000, 0xfd3d, 0xfff, 0x9, 0x6, 0x8cd4, 0x5, 0x5, 0x8, 0x3f, 0x0, 0x4, 0x7fff, 0x4, 0x1, 0x1, 0x9, 0xffff, 0x80, 0x727, 0x81, 0x2, 0x3, 0xd0, 0x10000, 0x3, 0x0, 0x5766, 0x2, 0x6, 0xab, 0x101, 0xfffffff7, 0x200, 0x800, 0x7f, 0x200, 0xff, 0x264, 0x6a, 0x6, 0x2, 0x40, 0x10001, 0x0, 0x4, 0x0, 0x0, 0x81, 0x80, 0x3, 0x800, 0x7, 0xc000, 0x7, 0x3, 0x200, 0x200, 0x3, 0x1, 0x7, 0x0, 0x8, 0xbd, 0x1ff, 0x3a209d0a, 0x59, 0x7, 0x7, 0x0, 0x800, 0x2, 0x40, 0xffffffff, 0x0, 0x4, 0x9, 0x40000, 0x8, 0x9, 0x6, 0xfffffffe, 0x1, 0x2, 0xff, 0x200, 0x401, 0xff, 0x1f, 0x0, 0x8, 0x80000000, 0x6, 0x5, 0x2, 0x7, 0x3, 0x4, 0x6, 0xb0, 0x800, 0x7fff, 0x2, 0x5672277b, 0x1000, 0x5, 0x6a43edc6, 0x8, 0x100, 0x1, 0x6, 0x6, 0x14000, 0x4, 0xffff8001, 0x1000, 0x6, 0x4, 0x4, 0x5272, 0x40, 0x8000, 0x0, 0x0, 0x4, 0x401, 0x6, 0x4, 0x80000001, 0x4, 0x2, 0x2d93, 0x7fffffff, 0x7, 0x5, 0xf9e3, 0x7fff, 0xf0000000, 0x1000, 0x7, 0x6, 0x0, 0x1, 0x3, 0x8, 0x7fff, 0x40000006, 0x9, 0xfffff801, 0x0, 0x7bb7, 0x2, 0xd8b, 0x5, 0x3f, 0x7fff, 0x9, 0x9, 0xb8000, 0x5, 0x6, 0x9400000, 0xab, 0xffffff80, 0x1, 0x7, 0xfffffff8, 0x4, 0x8, 0x3, 0x25, 0x6, 0x6, 0xb26, 0x7, 0xffffffff, 0x0, 0x4, 0x10000, 0x80000, 0x10001, 0x2, 0x2, 0x7fffffff, 0xa76e, 0x6, 0x5, 0x3f, 0xfffffff8, 0xae, 0x7fffffff, 0x101, 0xffffffe1, 0x6, 0x80, 0x9b9b, 0xff, 0xffffff01, 0xff, 0x3, 0x400, 0x5, 0x1, 0x80000000, 0x9, 0x8, 0x200, 0x4, 0x0, 0x7, 0x3, 0x5, 0xffff, 0xff, 0x416abbc8, 0x400, 0x3000000, 0x7fff, 0x5, 0x1f, 0xfffffffd, 0x7f, 0x3, 0x4, 0x94d8, 0x8b6, 0xfffffffe, 0x5, 0x1ff, 0x5, 0x4, 0x3, 0x564, 0x1, 0x1, 0x5, 0xb84, 0xb942, 0xfff, 0x3f7ff232, 0x2, 0x947, 0x0, 0x8, 0x2, 0x8000, 0x7, 0x7f, 0x7, 0x1, 0x7fff, 0x8, 0x7, 0x400, 0x0, 0x5, 0x8000, 0x65, 0x1, 0x5, 0x7, 0x150, 0x7, 0x3, 0x0, 0x2, 0xfffffffb, 0x6, 0x15e2, 0x7ff0000, 0x100, 0x7, 0x5, 0x8, 0x4, 0x1, 0x4, 0x2, 0x80000000, 0x2494, 0x1, 0x7, 0x6, 0xe0b5, 0x5, 0x4d6, 0x3, 0x400, 0x1ff, 0x1, 0xff, 0x3ff, 0x7, 0x100, 0x10000, 0x0, 0xd468, 0x5, 0x6, 0x3, 0x4c, 0x8, 0x6b33, 0x8, 0x1000, 0xfffffff8, 0x401, 0x4, 0x11, 0x100, 0x0, 0x5, 0x0, 0x40, 0x2, 0xa7cc, 0x6, 0xff, 0xffffffff, 0xd, 0x3ff, 0x0, 0xcf, 0x0, 0x7ff, 0xffffffff, 0xc4fa, 0x8, 0x80, 0x4, 0x971d, 0x221, 0x5, 0x7, 0x3, 0xff, 0x7f, 0x19778746, 0x200, 0x6, 0x8, 0x1, 0x8000, 0xf66f, 0x8, 0x0, 0x47d7, 0x1, 0x8001, 0x7, 0x8, 0x9e2, 0x1f, 0x6, 0x20, 0x1, 0x2, 0x124, 0x8, 0x5, 0x7, 0xfffff83a, 0x7, 0x3, 0x2, 0x995a, 0x0, 0x1083, 0xf4d, 0x1, 0x3, 0x9, 0xffff, 0x5, 0x7, 0x7fffffff, 0x1000, 0x3, 0x9, 0xff, 0x8, 0x80, 0x5, 0x9, 0xf16, 0x6, 0x2, 0x3ff, 0xfff, 0x82, 0x2, 0x4, 0x2, 0x10001, 0x4, 0x80000001, 0x98, 0xfffffffc, 0x80000000, 0x1, 0x0, 0xa59, 0x1, 0x7b, 0x80000001, 0x6003790d, 0xfffffffe, 0x50, 0x0, 0x2, 0x5, 0x5, 0x3ff, 0x3d1, 0x9, 0xc, 0x1, 0x0, 0x10000, 0x4, 0x100, 0x2c159fc2, 0x7b, 0x7f, 0xfffffff8, 0x2, 0x0, 0x400, 0x20, 0xde, 0x8, 0x1, 0x7, 0xe37, 0x6, 0x3ff, 0x7, 0x81, 0x1ff, 0x1, 0x4, 0x1f, 0x6, 0x200, 0xb319, 0x40, 0x3f, 0x5, 0x2, 0x6, 0x2, 0x401, 0x78, 0x6480436d, 0x4, 0x1, 0x7, 0x8001, 0x800, 0x2, 0x38cb27d7, 0x9, 0x0, 0x6, 0x9, 0x4036, 0x3, 0x80000000, 0x9, 0x3f, 0x7, 0x1, 0xdb60, 0x20, 0x80000000, 0x59, 0x401, 0x7f, 0x4, 0x6, 0x40, 0xb, 0x2, 0xfffffffb, 0x2, 0x404c, 0x9, 0x20, 0x3, 0x7ff, 0x262, 0x6, 0x4, 0x9, 0x9, 0x8, 0x6, 0x9, 0x26a, 0x1, 0x74, 0x0, 0x173e, 0x5, 0x1e55, 0x5ec, 0x2, 0x8, 0x5, 0x9, 0xef1, 0x9, 0x3, 0x1000, 0x9, 0x7, 0x80, 0x0, 0x74ce50bc, 0x9686, 0x4, 0x7, 0x8000, 0x2bb, 0x5, 0x1, 0x1, 0xfffff20f, 0x2, 0x5, 0x401, 0x2, 0x400, 0x7, 0x6, 0xfffffffd, 0x3ff, 0xcbf, 0x7fffffff, 0x0, 0x0, 0x79542eb3, 0xfffffe01, 0xbd1, 0x1, 0x746, 0x7fff, 0x5, 0x8001, 0x1, 0x2, 0x8, 0x17, 0x5, 0x7, 0x0, 0xc0, 0x5, 0x80000000, 0xf648, 0x101, 0xffffffff, 0x2, 0x0, 0x429572fc, 0x5791, 0x720, 0x5, 0x400, 0x6, 0x2, 0x806, 0x3b6, 0x8, 0x20, 0x3d46, 0x2, 0xe506, 0x8, 0x0, 0x5, 0x7, 0x6e, 0x80000001, 0x9a83, 0x340c072a, 0x80000001, 0x8, 0x5, 0x4b76, 0xca94, 0x1, 0x8, 0xbdde, 0x1f, 0x5, 0x80000000, 0x1, 0x7, 0x81, 0x9d57, 0x10000, 0x1, 0xffff, 0x2, 0xb1a4, 0x8]}) fcntl$lock(r2, 0x5, &(0x7f0000000140)={0x1, 0x4, 0x9, 0x7, r3}) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 756.475818][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.536126][ T12] usb 6-1: config 0 descriptor?? [ 756.559120][T22987] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 756.874487][ T12] usbhid 6-1:0.0: can't add hid device: -71 [ 756.890768][ T12] usbhid: probe of 6-1:0.0 failed with error -71 [ 756.918064][ T29] audit: type=1804 audit(1594576946.254:249): pid=22992 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/331/file0/file0" dev="loop2" ino=413 res=1 [ 756.949288][ T12] usb 6-1: USB disconnect, device number 30 [ 757.344468][ T12] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 757.724837][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.743180][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.753423][ T12] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 757.762707][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.776453][ T12] usb 6-1: config 0 descriptor?? [ 758.250056][ T12] wacom 0003:056A:0331.0038: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 758.452313][ T12] usb 6-1: USB disconnect, device number 31 [ 759.234425][ T23] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 759.595464][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.609932][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.619965][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 759.632842][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.649769][ T23] usb 6-1: config 0 descriptor?? 18:02:29 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:02:29 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x8a081, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x79212d, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x81000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'sit0\x00', r4, 0x2f, 0x1f, 0x1, 0x9, 0x21, @loopback, @ipv4={[], [], @multicast2}, 0x8, 0x8, 0x5, 0x3ff}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000340)="1809185f678e24f89c3144d066ac031757a4e018883828f069ddf82779eb2270603cc0f885cfa5c17780958dd51826cd70ead11dfa2e631c1f8c7357bf3257b78cd0cbcddbb867f9fde2ad4d6533b2e3b10b70c65b09ee5a6f088824a3405f09ec50f9015c78b25ed8b6139c9495eefad31627246e8bf17362733aa7fc8445369fcad6efefc7ffaa9a1d696e8d85fde057ceab4d8329b503a14b80d1afb1cfce35513b9e2b0a1ce5ccf101e4a8961b46a66bdf03ba4c5e34ab44bc8547643589f7a33666ac7469ee22a7cb57a036d94986e2a6e8004c7f6c6d088be329581ef930f3dd8bd1190d31599477bfd282fd9a9c40e9199a2d5cee4d", 0xf9}], 0x1}, 0x0) 18:02:29 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x0) 18:02:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2105c0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = socket$inet(0x2, 0x1, 0x0) dup2(r3, r2) io_setup(0x102, &(0x7f0000000300)) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100ab23f705690009000008b0977c52a740172505a89d0700000000010902240001010800000904000012070103000905010200ffe0000009058202e482ac99c402608b39b004ca255dc28fd82b5a416e4bae65bd1b84231fbb0a35112e5c2a913fa8f2abcae72af3adeda1264bd5fc0da3922ff778e8322a03"], 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) 18:02:29 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000001406a05310340000000000109022400010000000009040000010301000009210000000109058103000000000005105ff81ea6a6464f9ce67fa0a296a2d3fc46fcdef314c2d80bde3ba6a170acb8117ba1f9c68d1edadd77b9"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r6, 0x6, 0x35, 0x400}, &(0x7f0000000100)=0x10) [ 759.854534][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 759.864848][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 759.882714][T23053] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 18:02:29 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="97", 0x1}], 0x1}, 0x20040008) [ 759.923714][ T23] usb 6-1: USB disconnect, device number 32 18:02:29 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:02:29 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {0x0, 0x0, 0x34f9}], 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x39ac2d, 0x0) 18:02:29 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000240)=""/97) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080), &(0x7f0000000100)=0x8) r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000000000)) fsetxattr$security_ima(r3, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@v2={0x3, 0x1, 0x8, 0x0, 0xb3, "82d95c6e9192f158c2db4d40ecbcfa7b5201e0e564fcbc3376217d08f8533ec86d928098bbd7060e1783801d2252e41946c0528e993213db187cbbfffdc862648bcaa27275330f52e787754d0a36bc78afd0dbb06f3b3d08c02c04897ae0e8303475f6b028302cc4561e2da32a32246f8cede27bb4800e5a865d534da36f27c52069671d6e4e77b25cd3e8dd5277567606b7287988866736c4fb346f2d9c0296f47fe5398ac9a68fcec48f468afad13cf7b6f8"}, 0xbc, 0x2) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 760.308142][T23113] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 760.314490][ T17] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 760.329961][ T29] audit: type=1800 audit(1594576949.664:250): pid=23118 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16374 res=0 18:02:29 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:02:29 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) [ 760.365480][ T23] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 760.400523][T23118] MINIX-fs: bad superblock [ 760.436138][T23118] MINIX-fs: bad superblock 18:02:29 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 18:02:29 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 760.594414][ T17] usb 3-1: device descriptor read/64, error 18 [ 760.640147][T23130] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 18:02:30 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r1}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', 0xe0, 0x3, 0x2, 0x0, 0x8, 0x400000}) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x108000, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={r6, 0x4}, &(0x7f0000000140)=0x8) [ 760.734941][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.769622][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 760.831720][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 760.874602][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.907877][ T23] usb 6-1: config 0 descriptor?? [ 760.945718][ T23] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 760.985046][ T17] usb 3-1: device descriptor read/64, error 18 [ 761.148526][ T7430] usb 6-1: USB disconnect, device number 33 [ 761.254539][ T17] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 761.524627][ T17] usb 3-1: device descriptor read/64, error 18 [ 761.724553][ T7430] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 761.934546][ T17] usb 3-1: device descriptor read/64, error 18 [ 762.054845][ T17] usb usb3-port1: attempt power cycle [ 762.105348][ T7430] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.122423][ T7430] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 762.136663][ T7430] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 762.146623][ T7430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.156151][ T7430] usb 6-1: config 0 descriptor?? [ 762.195495][ T7430] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 762.764405][ T17] usb 3-1: new full-speed USB device number 16 using dummy_hcd 18:02:32 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 18:02:32 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) [ 762.974464][ T17] usb 3-1: device descriptor read/8, error -71 [ 763.056912][T23174] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 763.190477][ T17] usb 3-1: device descriptor read/8, error -71 18:02:33 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1d22050000000733414076"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:02:33 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(0x0, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:33 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x90, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x7, @mcast1, 0x80}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0x6, @loopback, 0x1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, @in6={0xa, 0x4e21, 0xf0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7bc2}, @in6={0xa, 0x4e20, 0x66f, @dev={0xfe, 0x80, [], 0x22}, 0x2}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r4, @in={{0x2, 0x4e23, @private=0xa010101}}}, 0x84) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='T#;', 0x3}], 0x1}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1b}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x48, r7, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x48}}, 0x8080) 18:02:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000280)=@v2={0x5, 0x3, 0x1, 0x4000, 0xfb, "abd9a1d66ba3c14094b38ade8fbb0a6a32c5cfdafe0b1ba5f309e7a5727c05cb0c4b8073c2fbf4fb1f6bd7aa7140e65292db250d89aba12aa7063ce99e19ce2cf67f71b53e39fcae0e59bf806e75cefae743f29753f3a71e45b30b5dad90779515daf147652fcc81f096a0051d0d690edd0612124f1fedce5e4191fc13b955c94dd42aac8411df13ef5145028428d92aafbed56be68c6463eec4781572adb5f03fbe1476880eb06de2eddddf0a4682bc5ce0ffc9d4db382eee38dc373fde784f34f93c29669a910c910a3a02c3b45dcf8be545ca86d3fb2e6cac53071801174c4d4bf9f528426898213e5fc25b9c84666170ba02e8c174acd950a3"}, 0x104, 0x3) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:02:33 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 18:02:33 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) [ 764.119185][ T3077] usb 6-1: USB disconnect, device number 34 [ 764.281030][T23201] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 18:02:33 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 18:02:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000080)='./file0\x00', 0x154) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) r5 = dup3(r1, r4, 0x0) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000140)={&(0x7f00000000c0), &(0x7f00000001c0)=""/184, 0xb8}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) renameat2(r6, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x5) 18:02:33 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x400}], 0x0, 0x0) 18:02:33 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 764.445478][ T29] audit: type=1804 audit(1594576953.784:251): pid=23214 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/333/file0/file0" dev="loop2" ino=414 res=1 [ 764.534484][ T29] audit: type=1804 audit(1594576953.784:252): pid=23214 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/333/file0/file0" dev="loop2" ino=414 res=1 [ 764.655479][ T3077] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 764.705490][T23223] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 18:02:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000380)={0x1, 0x0, [{0x0, 0x0, 0x2, 0x0, @adapter}]}) 18:02:34 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x400}], 0x0, 0x0) [ 764.903908][T23235] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 765.034695][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.094389][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.104951][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 765.140746][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.155483][ T3077] usb 6-1: config 0 descriptor?? [ 765.504453][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 765.510470][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 765.537637][ T3077] usb 6-1: USB disconnect, device number 35 [ 765.974445][ T3077] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 766.384502][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.395670][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.407388][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 766.417256][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.429144][ T3077] usb 6-1: config 0 descriptor?? [ 766.984606][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 766.990808][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 767.004963][ T3077] usb 6-1: USB disconnect, device number 36 [ 767.654373][ T3077] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 768.044622][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.055575][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.067181][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 768.076985][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.090910][ T3077] usb 6-1: config 0 descriptor?? 18:02:37 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x400}], 0x0, 0x0) 18:02:37 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0xed77, 0x4, 0xa426, 0x3f, 0x17, "969353485f3694069673ca7df57facea2de9d2"}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x602000, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000440)=@req={0x1, 0x7, 0x7, 0x7ff}, 0x10) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:02:37 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) 18:02:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xbae) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:02:37 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(0x0, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:37 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) recvmmsg(r2, &(0x7f0000000c40)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000000380)=""/115, 0x73}], 0x3, &(0x7f0000000400)=""/120, 0x78}, 0x9}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/2, 0x2}, {&(0x7f00000004c0)=""/50, 0x32}, {&(0x7f0000000500)=""/6, 0x6}, {&(0x7f0000000540)=""/114, 0x72}], 0x4, &(0x7f0000000600)=""/54, 0x36}, 0x8}, {{&(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/222, 0xde}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x2, &(0x7f0000000900)=""/9, 0x9}, 0x40}, {{&(0x7f0000000940)=@xdp, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/31, 0x1f}, {&(0x7f0000000a00)=""/226, 0xe2}, {&(0x7f0000000b00)=""/47, 0x2f}, {&(0x7f0000000b40)=""/148, 0x94}], 0x4}, 0x1}], 0x4, 0x40002043, &(0x7f0000000d40)) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000d80)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) getsockname$ax25(r4, &(0x7f0000000e00)={{0x3, @rose}, [@rose, @netrom, @netrom, @netrom, @netrom, @default, @rose, @bcast]}, &(0x7f0000000e80)=0x48) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000080)={0x9, 0x2, 0x9}) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/nvme-fabrics\x00', 0x105002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000f00)={0x73, 0x9, [], [@calipso={0x7, 0x38, {0x1, 0xc, 0x5, 0x80, [0x1e, 0x2, 0x4, 0x0, 0x7fff80000000000, 0x20]}}, @hao={0xc9, 0x10, @remote}]}, 0x58) ioctl$sock_netrom_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x9, 'syz0\x00', @null, 0x6, 0x1, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) [ 768.404443][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 768.411871][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 768.415839][T23300] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 18:02:37 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000080)={0x6, 0x9, 0x40, 0x7fffffff, 0x7}) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 768.481866][ T3077] usb 6-1: USB disconnect, device number 37 [ 768.544458][ T29] audit: type=1804 audit(1594576957.874:253): pid=23301 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/335/file0/file0" dev="loop2" ino=416 res=1 18:02:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x303, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0x12ed4}], 0x1}}], 0xffffff1f, 0x0, 0x0) 18:02:38 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0), 0x0, 0x400}], 0x0, 0x0) [ 768.621846][ T29] audit: type=1804 audit(1594576957.914:254): pid=23312 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/335/file0/file0" dev="loop2" ino=416 res=1 18:02:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) 18:02:38 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000100)) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 768.813931][T23324] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 768.933531][ T29] audit: type=1804 audit(1594576958.264:255): pid=23337 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/336/file0/file0" dev="loop2" ino=417 res=1 [ 768.964552][ T3077] usb 6-1: new high-speed USB device number 38 using dummy_hcd 18:02:38 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0), 0x0, 0x400}], 0x0, 0x0) 18:02:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:02:38 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ftruncate(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xae000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x484400, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) renameat(r4, &(0x7f0000000180)='./file0\x00', r5, &(0x7f00000001c0)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040)=r3, 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:02:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x303, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0x12ed4}], 0x1}}], 0xffffff1f, 0x0, 0x0) [ 769.199324][T23342] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 18:02:38 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0), 0x0, 0x400}], 0x0, 0x0) [ 769.344640][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.400649][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.443918][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 769.467282][ T29] audit: type=1804 audit(1594576958.804:256): pid=23360 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir469910994/syzkaller.cMwNcO/337/file0/file0" dev="loop2" ino=418 res=1 [ 769.502895][T23369] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 769.510967][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.561809][ T3077] usb 6-1: config 0 descriptor?? [ 769.924540][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 769.938077][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 769.962193][ T3077] usb 6-1: USB disconnect, device number 38 [ 770.407322][ T3077] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 770.784529][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.795551][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.806685][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 770.816660][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.829335][ T3077] usb 6-1: config 0 descriptor?? 18:02:40 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(0x0, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 771.312768][ T3077] wacom 0003:056A:0331.0039: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 771.520986][ T7430] usb 6-1: USB disconnect, device number 39 [ 772.294376][ T7430] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 772.654595][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.665822][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.675776][ T7430] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 772.684904][ T7430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.693902][ T7430] usb 6-1: config 0 descriptor?? 18:02:42 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x80001, 0x0) 18:02:42 executing program 1: creat(&(0x7f0000000040)='./bus\x00', 0x0) geteuid() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/189, 0xbd, 0x0, &(0x7f0000000500)=@in6={0xa, 0x4e21, 0x80, @remote, 0x5}, 0x80) accept4(0xffffffffffffffff, &(0x7f0000000580)=@tipc=@name, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000280), 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x240782) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYRES16=r2, @ANYBLOB="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"], 0x290}, 0x1, 0x0, 0x0, 0x804}, 0x4c004) 18:02:42 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 18:02:42 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000", 0x9, 0x400}], 0x0, 0x0) 18:02:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$addseals(r0, 0x409, 0x1) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000100)={0x1, 0x1, 'client0\x00', 0x0, "38ec05dc0fdbd84e", "90a5bdc291733ebc21f5cae8998ceb22f98464b9401162451f2bfaf63d38897b", 0x6, 0x7fffffff}) [ 772.922668][T23434] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 772.944733][ T7430] usbhid 6-1:0.0: can't add hid device: -71 [ 772.961139][ T7430] usbhid: probe of 6-1:0.0 failed with error -71 18:02:42 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000100)="e267cbd5f95fa7bf111e3617de6fd33d61f30d65adbcf89cecc948fcfd2bb17a7064d51463e984826b999ae831881100086a8916a6aa27a4e30f00204480b0790c07d1a31dd2531c107f215930db62cf28445fe6a4493d534105000a9803b95e6b99a111d43372c8a0f3dcbe38865df5f64de039035231244d912a2bdbae5b2250ab58d3ee12c90be4eea3ba8a03eacf1d52f65ac15ade89c2736ca36be3dd937a4292944af9d93ed6a523afc5552ba95a9a156af480d9ead8fa07f6b302fd", 0xbf}], 0x1}, 0x0) [ 773.022003][ T7430] usb 6-1: USB disconnect, device number 40 [ 773.139445][T23445] splice write not supported for file /net/tun (pid: 23445 comm: syz-executor.2) 18:02:42 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000", 0x9, 0x400}], 0x0, 0x0) 18:02:42 executing program 4: r0 = socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 773.311119][T23435] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 773.361951][T23468] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 773.454501][ T7430] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 773.476028][T23435] syz-executor.1 (23435) used greatest stack depth: 22160 bytes left 18:02:42 executing program 1: creat(&(0x7f0000000040)='./bus\x00', 0x0) geteuid() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/189, 0xbd, 0x0, &(0x7f0000000500)=@in6={0xa, 0x4e21, 0x80, @remote, 0x5}, 0x80) accept4(0xffffffffffffffff, &(0x7f0000000580)=@tipc=@name, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000280), 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x240782) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYRES16=r2, @ANYBLOB="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"], 0x290}, 0x1, 0x0, 0x0, 0x804}, 0x4c004) 18:02:42 executing program 4: r0 = socket$kcm(0x2, 0xf7152f1cfe85cb33, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x4, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x50080) 18:02:43 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000", 0x9, 0x400}], 0x0, 0x0) [ 773.824530][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.854357][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.905029][T23487] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 773.912093][ T7430] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 773.942614][ T7430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.962510][ T7430] usb 6-1: config 0 descriptor?? [ 774.142026][T23482] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 774.304672][ T7430] usbhid 6-1:0.0: can't add hid device: -71 [ 774.310756][ T7430] usbhid: probe of 6-1:0.0 failed with error -71 [ 774.329875][ T7430] usb 6-1: USB disconnect, device number 41 18:02:43 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 774.810629][ T7430] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 775.174515][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.211905][ T7430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.280632][ T7430] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 775.300598][ T7430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.359445][ T7430] usb 6-1: config 0 descriptor?? [ 775.842619][ T7430] wacom 0003:056A:0331.003A: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 776.047469][ T5] usb 6-1: USB disconnect, device number 42 [ 776.835242][ T5] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 777.195165][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.206151][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.216383][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 777.225930][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.239818][ T5] usb 6-1: config 0 descriptor?? 18:02:46 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e002020000000000010000", 0xe, 0x400}], 0x0, 0x0) 18:02:46 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x79212d, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r3}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x81000000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', r3, 0x20, 0x707, 0x2afb, 0x1, {{0x32, 0x4, 0x3, 0x7, 0xc8, 0x67, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ra={0x94, 0x4}, @noop, @timestamp={0x44, 0x18, 0x12, 0x0, 0x5, [0x5, 0x6, 0xf8d2, 0xe8, 0x2]}, @cipso={0x86, 0x6d, 0x1, [{0x7, 0x12, "78ddc943fb6489efb26ebd46d6ab5e17"}, {0x6, 0xb, "a61eb00a49aa34bf3a"}, {0x6, 0x2}, {0x1, 0x5, "190850"}, {0x7, 0xe, "fb81744bb47182cb4c4f870a"}, {0x5, 0x5, "7168f9"}, {0x7, 0xe, "dfe91e0f84b940ea683c9839"}, {0x5, 0x4, "3b97"}, {0x0, 0x11, "9e87ed0113cb83e8e76fda54ed0def"}, {0x5, 0xd, "5122f33dea49aa0549385e"}]}, @rr={0x7, 0x17, 0x22, [@remote, @private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @timestamp={0x44, 0x8, 0xf6, 0x0, 0x1, [0xb44]}, @timestamp={0x44, 0x8, 0xd4, 0x0, 0x2, [0x7fff]}, @end]}}}}}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x8002, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) r5 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r5, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x24004000) 18:02:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) r2 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, 0x0, 0x0) 18:02:46 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0xffffe000) [ 777.465716][T23555] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 777.474411][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 777.482854][ T5] usbhid: probe of 6-1:0.0 failed with error -71 18:02:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x1}}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000001340)=""/4096, 0x8}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 18:02:46 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e002020000000000010000", 0xe, 0x400}], 0x0, 0x0) 18:02:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060144300002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 777.538055][ T5] usb 6-1: USB disconnect, device number 43 18:02:46 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0022764af6070b21a0b0a784da7d3e8a2ac57ba3ab3a9280820b0b3c38a6694022ec2beb8016db2a2d2d113cd5224750ac746f7ce78d9352ee6ebd9f47dfe7fad74503ef9f78bbb880c96dc16beed3a132919ed95ec26a29b5476a098aac96968fb814c7f097c4c5b3bd254f83863d83d825b1c58fc0e39749aeb867ad4ee285cf64a2d4c31c639b6f950edbca9b6e88c07ef7f5de8d96f5e2a1be3c84a7d409ef9d7c87d42fad4cf0f2cffae5edcb7be93cb7e725ed6334d4fb26be7ddcc3aa6625ad5df80102c8dbdccc2d8b2815030bd4203c8bc83c8409458c698c18e55c093aacfffa1e487e"], 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r4}, 0x8) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r5) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x79, &(0x7f0000000140)=@int=0x4, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={r4, 0x9, 0x0, 0x7, 0x100, 0x3, 0x8, 0x8001, {r6, @in6={{0xa, 0x4e21, 0x81, @mcast2, 0x8}}, 0x6, 0x4, 0xfffffa09, 0x9, 0x1132}}, &(0x7f0000000000)=0xb0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 18:02:46 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000080)) 18:02:47 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 777.742241][T23574] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 18:02:47 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e002020000000000010000", 0xe, 0x400}], 0x0, 0x0) 18:02:47 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x1}}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000001340)=""/4096, 0x8}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 18:02:47 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000240)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x501000, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000000000)) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000500)=0x7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000440)={0x4, 0x10001, 0x3, 0x5, 0x20}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000100)={0x3f, {{0xa, 0x4e21, 0xfff, @private0={0xfc, 0x0, [], 0x1}, 0x5}}, {{0xa, 0x4e23, 0xfffffe2e, @local, 0x3}}}, 0x108) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000480), &(0x7f00000004c0)=0x30) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="04000000000000000a004e210000800100000000000000000000ffffac1e0001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a004e2000000f7aff01000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000003fc010000000000000000000000000001018000000000003cad874d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/400], 0x190) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:02:47 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c9", 0x10, 0x400}], 0x0, 0x0) 18:02:47 executing program 2: socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010003b0400"/20, @ANYRES32, @ANYBLOB="03000000000000002800128008000100736974001c00028008000100", @ANYRES32=r4], 0x48}}, 0x0) [ 778.064877][ T5] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 778.099107][T23595] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 18:02:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060144300002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 18:02:47 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:02:47 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c9", 0x10, 0x400}], 0x0, 0x0) [ 778.298398][T23610] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:47 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700), 0x0, 0x0, 0x96}, 0x0) [ 778.484859][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.513358][T23623] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 778.530337][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.592840][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 778.638745][T23628] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 778.661847][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.730946][ T5] usb 6-1: config 0 descriptor?? [ 779.084521][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 779.090546][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 779.115895][ T5] usb 6-1: USB disconnect, device number 44 [ 779.574696][ T5] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 779.944640][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.955715][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.968131][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 779.978201][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.987715][ T5] usb 6-1: config 0 descriptor?? [ 780.734409][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 780.740552][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 780.750376][ T5] usb 6-1: USB disconnect, device number 45 [ 781.464357][ T3077] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 781.824443][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.835472][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.845365][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 781.854628][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.867363][ T3077] usb 6-1: config 0 descriptor?? 18:02:51 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c9", 0x10, 0x400}], 0x0, 0x0) 18:02:51 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x1409, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x79212d, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x81000000}, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r3, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=""/170, 0xaa, 0x0}}, 0x10) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000400)='status\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f00000001c0)=@raw=[@alu={0x4, 0x1, 0x2, 0x7, 0x2, 0xfffffffffffffff0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r2}, @generic={0xff, 0x1, 0x7, 0x800, 0x1}], &(0x7f0000000200)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x8, [], 0x0, 0x1, r1, 0x8, &(0x7f0000000240)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x7, 0xfffffffd, 0x80000000}, 0x10, r4, r6}, 0x78) 18:02:51 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030c00000000000000b5d90000010009"], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 18:02:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060144300002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 18:02:51 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:02:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$vcsn(&(0x7f0000001800)='/dev/vcs#\x00', 0x7, 0x46c000) accept4$x25(r1, &(0x7f0000001840)={0x9, @remote}, &(0x7f0000001880)=0x12, 0x80800) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000080)=""/149) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 782.205220][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 782.211292][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 782.239232][T23685] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 18:02:51 executing program 4: r0 = socket$kcm(0x2, 0x7, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x119000) [ 782.249930][ T3077] usb 6-1: USB disconnect, device number 46 18:02:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x2, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f27b", 0x18}, {&(0x7f0000000a80)="e744df7230d9627318729511681067c7654b695f41d862c01eb9306d87208d7abf3a722417b3b3572d72ed6c8ac46840f02aa8ce737bdeec7f2c46ef109ece60c40eb71599854b37c6ed2a3acc58a61080426e086f92ac8522e7245df293772ebf2093bd670a553714ac153028d5706dbb32b002d11ca3ae0d877415ec3b3961c7918e5806e5990d8faae8afde2303111c54b609654e4ab6d764db80ee42cd34dd1726f57353daf8a5ab97150b5844ca3b6e928dae517e8c838a7a5897b8f42fd376401e9f040c830fac64eae1bb7715b845f6e710f9940940d288226c6bff9c3c0321afca4ac9eddf0055d95008d94845f2588ed442a24fcd2f0f77ceba3f892b0c88bf82b4beedb42bf4155ece987808ee561de56007604dc8f848714b8af4417d65fa7d7f16be29ba3925681f1a032eabbae26e918ca1fbe102a3c8ca0f7b925c7612921d9ff2408002bc1a60ee04d896c4468ac394018b65e7f5fdd884e15d88c1947435fd52fc12dac76be19d54a85a0617e5a79279b364474d9145ae4aec8f1cfc5a20b5d2aa7e81863a87e8a21eef953a41f95d3ad7e673af65375c3956c3552fadfae9a542554a3e8104d9e994899c359ae96e94adf741684d513ce62510fd76d33483c8470ad50c085d585f60e09d93a87a838d8318a08725fae2407f23d7c6b110a2c93bbf4b712fbffa7255056a0d3dece11cdf7de1ad96b5be7548c851eebce107ff810000007463eb2c38010f3caab149a02b93c9d11c07b67def5564cab8a080729612d6f2c9d7a3ed080eb85550660320b72b37653a4cbacf30000000000000f000b5c953051d74ecfb024a9e119b0bdf2961970085c41223f0a4a6da51e94d16e966ae389bb0b0e77e1fd5fc12f22c4d416737c6bac049df4da4a385738a8d9a01de05b4085cb1338ad3141d3e1ca43878391322c6ca009b29a110c67179df4694f19c815732c382bf8c312327012040170c48dd7bc5ccd5c25a800c8c67b21cd2f933990a2846033fcdb8789b1d5468fb77e0", 0x2db, 0x7f}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x20001406) 18:02:51 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f", 0x11, 0x400}], 0x0, 0x0) 18:02:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060144300002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 782.624848][T23709] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 18:02:52 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f", 0x11, 0x400}], 0x0, 0x0) 18:02:52 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) [ 782.690413][ T29] audit: type=1800 audit(1594576972.024:257): pid=23703 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="loop2" ino=419 res=0 [ 782.714310][ T3077] usb 6-1: new high-speed USB device number 47 using dummy_hcd 18:02:52 executing program 4: socket$kcm(0x2, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffb9286}], &(0x7f0000000140)='GPL\x00', 0x9, 0x4a, &(0x7f0000000180)=""/74, 0x41000, 0x0, [], 0x0, 0x3, r2, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x10, 0xaea5, 0x8}, 0x10, 0x0, r3}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000300)={r0, r4}) fsopen(&(0x7f0000000040)='romfs\x00', 0x1) [ 782.849307][T23723] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 18:02:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 18:02:52 executing program 4: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) fchmodat(r0, &(0x7f0000000140)='./file0/file0\x00', 0xc4) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:02:52 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f", 0x11, 0x400}], 0x0, 0x0) [ 783.094537][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.119523][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.124803][T23737] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 783.161502][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 783.192188][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.241508][ T3077] usb 6-1: config 0 descriptor?? [ 783.584432][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 783.590438][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 783.616156][ T3077] usb 6-1: USB disconnect, device number 47 [ 784.104689][ T3077] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 784.484501][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.495899][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.508192][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 784.518787][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.531218][ T3077] usb 6-1: config 0 descriptor?? [ 785.004869][ T3077] wacom 0003:056A:0331.003B: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 18:02:54 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', 0x0, 0x0, 0x0) [ 785.221045][T22189] usb 6-1: USB disconnect, device number 48 [ 786.004428][T22189] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 786.374694][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.385626][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.395946][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 786.405424][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.418665][T22189] usb 6-1: config 0 descriptor?? 18:02:55 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12}], 0x0, 0x0) 18:02:55 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000240)={@broadcast=[0xff, 0xff, 0xff, 0x0], @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c]}}}}}}}}, 0x0) 18:02:55 executing program 1: 18:02:55 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) 18:02:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090241000100000000090400000103010000092100000001220500090581030000000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="4022050000000733414076271a4dce926f8540b2d680873fd1f4145fb382c52b18e49b37fbd1437c2a7528d942fd0a1b3389c706d8afd853ac99be66119db41cf4dedf502f5bf23d972d45e62d06305aa417cbe4597ce28957520f317970b70c77ba3029267314794475fc0b3d3098d041f13be9b860d0595bf65d7dcc7d49d2e02855f18cef11dc93630412a8ba090b1e5c8c8aaf225cca59c39faba296b4c783bab07cdf2007be633a97aa"], 0x0}, 0x0) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r2, 0x46, 0xa7}, &(0x7f0000000440)={'enc=', 'pkcs1', ' hash=', {'sha1-avx2\x00'}}, &(0x7f0000000300)="3c5c57d54342828fa8dfc5e7c896bc179de414fe51d518f429d50b4c2f91d6202997089d8a496660526931fbca27b72f66439b8f293852bb893b0c496426a7f567715b23ac9c", &(0x7f0000000380)=""/167) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) ioctl$sock_ifreq(r7, 0x8929, &(0x7f0000000140)={'ip6gre0\x00', @ifru_mtu}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000000)='n[]!\x00', 0x0, r6) 18:02:56 executing program 1: 18:02:56 executing program 2: [ 786.634399][T22189] usbhid 6-1:0.0: can't add hid device: -71 [ 786.640486][T22189] usbhid: probe of 6-1:0.0 failed with error -71 [ 786.693210][T22189] usb 6-1: USB disconnect, device number 49 [ 786.701869][T23803] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 18:02:56 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = pidfd_getfd(r3, r5, 0x0) ioctl$KDADDIO(r6, 0x4b34, 0xa0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r7 = dup(r0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='\x00', 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0x2, @mcast1, 0xfffffffc}, {0xa, 0x4e23, 0x9, @loopback, 0xddf}, 0xffc1, [0xfffffff9, 0x200, 0x5, 0x61, 0x18af2f3, 0x1f, 0x3ff, 0x3]}, 0x5c) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x0, 0x2}) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:02:56 executing program 2: 18:02:56 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12}], 0x0, 0x0) 18:02:56 executing program 1: [ 787.004246][T23832] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 787.114318][T22189] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 787.494623][T22189] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 787.502878][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.524382][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.553098][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 787.604662][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.626047][T22189] usb 6-1: config 0 descriptor?? [ 788.004420][T22189] usbhid 6-1:0.0: can't add hid device: -71 [ 788.010538][T22189] usbhid: probe of 6-1:0.0 failed with error -71 [ 788.019925][T22189] usb 6-1: USB disconnect, device number 50 18:02:57 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', 0x0, 0x0, 0x0) 18:02:57 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:02:57 executing program 2: 18:02:57 executing program 1: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x7000000, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d30783030288021f3f9d7652330300a3030302c00209bc926dccc85941b7ffb74e8095070e8de6c045c2452fdbabec94eb659185b7142f2714284a36200db4a17992d4621fa859e7cd05831d2768e2690178c6db7d9e7fb"]) syz_open_procfs(0x0, 0x0) 18:02:57 executing program 3: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12}], 0x0, 0x0) [ 788.308560][T23864] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 788.464524][T22189] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 788.504038][T23867] 9pnet: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 788.847808][T22189] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 788.859615][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.904256][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.915008][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 788.924073][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.947853][T22189] usb 6-1: config 0 descriptor?? [ 789.484360][T22189] usbhid 6-1:0.0: can't add hid device: -71 [ 789.490435][T22189] usbhid: probe of 6-1:0.0 failed with error -71 [ 789.498708][T22189] usb 6-1: USB disconnect, device number 51 [ 790.204341][ T3077] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 790.584423][ T3077] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 790.592603][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.603660][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.613514][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 790.622757][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.638316][ T3077] usb 6-1: config 0 descriptor?? 18:03:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) write$binfmt_elf64(r4, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x7, 0x20, 0x1, 0xa6e, 0x2, 0x3, 0x7, 0x334, 0x40, 0x8c, 0x1, 0x5, 0x38, 0x2, 0x4, 0xffe1, 0xb1ac}, [{0x3, 0x2, 0x4, 0x100000000, 0x5, 0x236, 0x9, 0x5}], "fff9af52679bc4909a82794b6c15c38edd03bbcb8137d61557be1f7912f6d75f78b362a2ffc62742b66211a6eddc7fc076d528344a8a1bf313a023edfb292ae4f882fcabaf3d5bb8c19437f87e041eecd2fa41522eb1ff0f330f8feb88641cd6ef5110a5d3edeee72a5172d63ea55d9ab7501eeb54491ab09b65c56dc0f0bbd670e1306dca3f3ea25d69476608082f438f43e0fa76998fac95acf3f216b488c9d870544b843fb696053412111410251863cceb9ac2f52ce5faf5a2200bcf370d0f", [[], [], [], [], [], []]}, 0x739) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3c) ptrace$cont(0x18, r7, 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r7, 0x0, 0x0) ptrace$setregs(0xd, r7, 0x6, &(0x7f0000000080)="a4132a020f7e188633e570f0ddd204b72f385c959a5ab1fa694854299ac0b88497544f1f4006f8553f719c3aeb311f90712cb347a571cdb69d534807ae615172c7ba27c8ed458a85ec1bc63fa0230bb2f8849e3dc2ebbc77fc2be38ac1ecfb59e953c64dd83764953c5adc5503ceeb4b983ce6b2e7c4894390941cebc8cec3d97885dfdd83c2c814a8b1d0e1f70ca90816e01e296a4752defedc97c6e32fbae69c5a443a54") 18:03:00 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000400), 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x79212d, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x81000000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x79212d, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r8}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x81000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r8, 0x2f, 0x4, 0xc8, 0x3f, 0x0, @mcast2, @private0, 0x80, 0x8000, 0x4, 0x800}}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r9, r6) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2e}}, @in6=@ipv4={[], [], @remote}, 0x4e24, 0x2c7, 0x4e21, 0x0, 0xb9569075ea5ae42, 0x0, 0x0, 0x62, r4, r6}, {0xff, 0x3, 0xffffffffffffc6cd, 0x97, 0x2, 0x6217, 0x401}, {0x2, 0xffff, 0x5, 0x40}, 0x100, 0x6e6bb2, 0x1, 0x1, 0x2, 0x2}, {{@in6=@private0, 0x4d5, 0x3c}, 0x2, @in=@remote, 0x3502, 0x1, 0x1, 0x80, 0x3, 0x0, 0x9}}, 0xe8) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000700)}, 0x20004000) 18:03:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff4d}, 0x48) 18:03:00 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8923, &(0x7f0000000140)={'syzkaller1\x00', {0x3, 0x0, @empty=0x300}}) fchdir(0xffffffffffffffff) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 18:03:00 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000380)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x2}}]}) [ 790.844402][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 790.850655][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 790.895686][ T3077] usb 6-1: USB disconnect, device number 52 18:03:00 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xba4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x214}]}, 0x60}, 0x1, 0x0, 0x0, 0xea55fc16bd37ffca}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r3, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:03:00 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[]) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 791.052801][T23912] : renamed from syzkaller1 [ 791.304474][ T3077] usb 6-1: new high-speed USB device number 53 using dummy_hcd 18:03:00 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', 0x0, 0x0, 0x0) 18:03:00 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000380)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter}]}) 18:03:00 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) 18:03:00 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0xfc, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x84) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x3, {"f2595ae82c2d647b755b6a9a1e180db7"}, 0x1, 0xedb, 0x400}}}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000080), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:03:00 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8923, &(0x7f0000000140)={'syzkaller1\x00', {0x3, 0x0, @empty=0x300}}) fchdir(0xffffffffffffffff) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) [ 791.674670][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.712636][T23967] : renamed from syzkaller1 [ 791.718453][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.761636][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 791.794398][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.830292][ T3077] usb 6-1: config 0 descriptor?? [ 792.184543][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 792.190621][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 792.212091][ T3077] usb 6-1: USB disconnect, device number 53 [ 792.664724][ T3077] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 793.034436][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.049820][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.060050][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 793.070214][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.081692][ T3077] usb 6-1: config 0 descriptor?? [ 793.579107][ T3077] wacom 0003:056A:0331.003C: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 18:03:03 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x3ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000001880)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x34, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='team_slave_0\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') 18:03:03 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x2080) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f00000002c0)={0x2, 0x1, [0x377bfe82, 0xffffffff, 0x81, 0x8001, 0xfe, 0x0, 0x7fffffff, 0x81]}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000100)}}, 0x10) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:03:03 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x3ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000001880)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x34, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='team_slave_0\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') 18:03:03 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8923, &(0x7f0000000140)={'syzkaller1\x00', {0x3, 0x0, @empty=0x300}}) fchdir(0xffffffffffffffff) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 18:03:03 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x3ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000001880)=ANY=[@ANYBLOB="020000000100020000000000040000000000000008", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00'], 0x34, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='team_slave_0\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') [ 793.806873][T22189] usb 6-1: USB disconnect, device number 54 18:03:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x24c, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xe0}}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) getpriority(0x0, r2) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @raw_data=[0x3ff, 0x0, 0x8001, 0x8, 0x0, 0xff41, 0x1, 0x40, 0x2, 0xf5, 0x20a0, 0x0, 0x1, 0x80, 0x334, 0x80000000, 0x7, 0x10001, 0xfc, 0x107ff, 0x7ff, 0x10000, 0x3, 0x3f, 0x5, 0x8, 0xa, 0xffffae84, 0xfffffffc, 0x2, 0x4, 0x7]}) 18:03:03 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x3ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000001880)=ANY=[@ANYBLOB="020000000100020000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00'], 0x34, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='team_slave_0\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') 18:03:03 executing program 4: r0 = socket$kcm(0x2, 0x7, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 794.181812][T24062] overlayfs: failed to resolve './file0': -2 [ 794.211244][T24063] overlayfs: failed to resolve './file0': -2 [ 794.258382][T24060] overlayfs: failed to resolve './file0': -2 [ 794.265235][T24039] : renamed from syzkaller1 18:03:03 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x3ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000001880)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x34, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='team_slave_0\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') [ 794.359354][T24063] overlayfs: failed to resolve './file0': -2 18:03:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x9, 0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r4}, 0x40) [ 794.434333][T22189] usb 6-1: new high-speed USB device number 55 using dummy_hcd 18:03:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x104) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/231, &(0x7f0000000140)=0xfeb3) 18:03:04 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendto$l2tp(r1, &(0x7f0000000000)="13aff2b2cb7571ef327d74f73270ad42c216143bc1d8b2cf396d1994a580a9ed915b840a00880d671936c0f54cb5caf651e6d890509928", 0x37, 0x20040880, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100, 0x1}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r4, 0x77a9}, 0x8) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000080)={0x2, 0x3, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)="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"/311, 0x137}], 0x1}, 0x24004004) [ 794.816998][T24099] overlayfs: failed to resolve './file0': -2 [ 794.844701][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 224, changing to 11 [ 794.856284][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 18:03:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20001055}, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 18:03:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001145042, 0x0) ftruncate(r0, 0x2007fff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x12, r0, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400003, &(0x7f0000000140)=""/164) 18:03:04 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000200)={0x3, @null, r3}) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 794.868193][T22189] usb 6-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 794.899069][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.930900][T22189] usb 6-1: config 0 descriptor?? 18:03:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}], 0x1, 0x0) 18:03:04 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x3ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000001880)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x34, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='team_slave_0\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') [ 795.259616][ T29] audit: type=1800 audit(1594576984.594:258): pid=24109 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16309 res=0 [ 795.304815][T22189] usbhid 6-1:0.0: can't add hid device: -71 [ 795.312216][T22189] usbhid: probe of 6-1:0.0 failed with error -71 [ 795.390908][T22189] usb 6-1: USB disconnect, device number 55 [ 795.784460][T22189] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 796.184804][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 224, changing to 11 [ 796.215074][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.228980][T22189] usb 6-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 796.258879][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.287318][T22189] usb 6-1: config 0 descriptor?? 18:03:06 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_4={0x3, 0x0, 0xc, "79f1a8cf"}, @local=@item_4={0x3, 0x2, 0x7, "5a0b97e9"}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:03:06 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x79212d, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x81000000}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="1fe1e730e1eacc0627ef828eb6cf2b6c27198b715f58adf4488f10501a0f8ee3132e1faa95084e0549cfb42473c6d8e62c71578096af7413bf2f8ef69e39c45d5eeeca0719cac008e88a0ed141fd64ceb953cd62", 0x54}, {&(0x7f0000000180)="b6f7662c3d6a5725d670826d2405d1908bea95c656ef7132b62cb165dd57b5c6e12c5a837ea73e80c41161ea7d0b46d886a745d9d7c1531a07ef6999f64cf0b1369ae2f4494a157ece9b20b4fceef1252ad57e61acc6ace2f7e34708335a80a4db4ddf4e452450a4e5a5177751d70e0f5d694dc3ed3beffdedd47f99c80fa7ba80a55ce152234cc5a2acea04ebd6fdeb60eddd1fc13f6d", 0x97}, {&(0x7f0000000240)="564202fc4d0833d811ec5a2dc194545a31a73d7c67a4fee9a5ac09e83e758c7b", 0x20}, {&(0x7f0000000280)="4e85ececd229829b865b86fec8a56e7a4c8a5803237bc99985b790980a7efa3524f0bdaa821ac7b1f25727a020511772c1c78734b72a349eefc40386c26825f050ed0d72b2693511811628a0f63042abd805ee50fd89a092cf6a5ca8217f66f2f7a067b0fb826125", 0x68}, {&(0x7f0000000300)="4801b97d125862d57ca44eefb6bfdb7001", 0x11}], 0x5, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x8, 0x0, 0x2, [0x3, 0x1, 0x700000, 0x7ff, 0x2, 0x7, 0x7]}, @noop, @rr={0x7, 0x17, 0x5b, [@dev={0xac, 0x14, 0x14, 0x7}, @broadcast, @broadcast, @loopback, @local]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xbd, [@private=0xa010102]}, @generic={0x88, 0x3, "d6"}, @ssrr={0x89, 0xb, 0x8f, [@empty, @broadcast]}]}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x2c, [@loopback, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @rand_addr=0x64010102, @remote, @multicast1, @empty]}, @generic={0xf, 0x2}]}}}], 0x110}, 0x20000000) 18:03:06 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}], 0x1, 0x0) 18:03:06 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r2, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0x40047211, &(0x7f0000000080)={0x2}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r8, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000512000000000000c4000000002e", @ANYRESDEC=r8, @ANYRESDEC], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:03:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 18:03:06 executing program 1: [ 796.837943][T24154] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 796.874492][T22189] usbhid 6-1:0.0: can't add hid device: -71 [ 796.881267][T22189] usbhid: probe of 6-1:0.0 failed with error -71 [ 796.890061][T24156] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 18:03:06 executing program 1: [ 796.936610][T24156] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 796.959723][T24156] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 796.965130][T22189] usb 6-1: USB disconnect, device number 56 18:03:06 executing program 0: [ 796.986522][T24156] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 797.011118][T24156] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 797.057644][T24156] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready 18:03:06 executing program 1: 18:03:06 executing program 0: [ 797.107601][T24156] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 797.167887][T24159] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 18:03:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x5, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, @l2tp={0x2, 0x0, @remote, 0x2}, @isdn={0x22, 0x3, 0xff, 0x2, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)='vlan0\x00', 0xffffffffffffffff, 0x7f, 0xfff9}) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x30, &(0x7f0000000700)=[{&(0x7f0000000080)="06d4ea0764a5c4fb2d2cf4000011baa9008d1356d9ea7063b48fd4570e5bd6fa6b8014468fb01ff4b81e8d9a04a227bfda1bc44aea", 0x35}], 0x1}, 0x10) 18:03:06 executing program 2: [ 797.354410][T22189] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 797.771148][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.797177][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.839954][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 797.870720][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.901465][T22189] usb 6-1: config 0 descriptor?? [ 798.254536][T22189] usbhid 6-1:0.0: can't add hid device: -71 [ 798.260596][T22189] usbhid: probe of 6-1:0.0 failed with error -71 [ 798.286411][T22189] usb 6-1: USB disconnect, device number 57 [ 798.754263][T22189] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 799.144630][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.155653][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.166764][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 799.176753][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.190701][T22189] usb 6-1: config 0 descriptor?? [ 799.676278][T22189] wacom 0003:056A:0331.003D: item fetching failed at offset 1/5 [ 799.684725][T22189] wacom 0003:056A:0331.003D: parse failed [ 799.690766][T22189] wacom: probe of 0003:056A:0331.003D failed with error -22 [ 799.878497][T22189] usb 6-1: USB disconnect, device number 58 [ 800.654385][T22189] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 801.024521][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.035694][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.045922][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 801.055202][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.064548][T22189] usb 6-1: config 0 descriptor?? 18:03:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r5, 0xc91add0bf88807dd, 0x0, 0x0, {0x33}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x64, r5, 0x10, 0x70bd26, 0x25dfd402, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x6000000}, 0x24000001) 18:03:10 executing program 2: 18:03:10 executing program 1: 18:03:10 executing program 0: 18:03:10 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x79212d, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x81000000}, 0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x80000, 0x0) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1, r4, 0x34, r5}, 0x10) 18:03:10 executing program 3: 18:03:10 executing program 1: [ 801.284482][T22189] usbhid 6-1:0.0: can't add hid device: -71 [ 801.291063][T22189] usbhid: probe of 6-1:0.0 failed with error -71 18:03:10 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000700)}, 0x0) 18:03:10 executing program 0: 18:03:10 executing program 3: 18:03:10 executing program 2: [ 801.360422][T22189] usb 6-1: USB disconnect, device number 59 18:03:10 executing program 0: [ 801.754268][T22189] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 802.114647][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.126833][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.136803][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 802.146046][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.158793][T22189] usb 6-1: config 0 descriptor?? [ 802.504448][T22189] usbhid 6-1:0.0: can't add hid device: -71 [ 802.510666][T22189] usbhid: probe of 6-1:0.0 failed with error -71 [ 802.519565][T22189] usb 6-1: USB disconnect, device number 60 [ 803.034275][T22189] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 803.427136][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.438084][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.448338][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 803.457680][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.472477][T22189] usb 6-1: config 0 descriptor?? [ 803.968049][T22189] wacom 0003:056A:0331.003E: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 804.171363][ T17] usb 6-1: USB disconnect, device number 61 [ 804.944331][ T5] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 805.344602][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.355776][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.366145][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 805.376340][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.386583][ T5] usb 6-1: config 0 descriptor?? 18:03:14 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:03:14 executing program 1: 18:03:14 executing program 2: 18:03:14 executing program 3: 18:03:14 executing program 0: 18:03:14 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x428, 0x3f3, 0x200, 0x70bd2c, 0x25dfdbfc, {0x1, 0x2, 0x14, [0xc44, 0xfffff44b, 0x2, 0x101, 0xa35, 0x0, 0x29, 0x2, 0x9, 0xff, 0x401, 0xffff7fff, 0x1f, 0xd7, 0x1, 0x6, 0x0, 0x2, 0x6, 0x4, 0x3f, 0x8, 0x3, 0x0, 0x7, 0x6, 0x5, 0x5, 0x0, 0x10000, 0x7, 0x80000001, 0x0, 0x1, 0xfc, 0xd9, 0x2, 0x0, 0x81, 0xf6b8, 0xa8f2, 0x3, 0x99, 0x80, 0x1, 0x2, 0x81, 0x80000001, 0x0, 0x10001, 0x8, 0x6, 0x4, 0xfffffff8, 0x100, 0xac, 0x4, 0x80000001, 0x2, 0x1200, 0x2, 0x7, 0x7fff, 0xc55], [0x2, 0x5, 0xfb61, 0xfffffffc, 0x1, 0xffffffff, 0xffff24b1, 0xffff7fff, 0x9, 0xd3c, 0x1, 0x1ff, 0x1f, 0x7, 0x6, 0x80000000, 0x9, 0x1f, 0x2, 0x7ff, 0x3, 0xed, 0x1, 0x41, 0x4ab, 0x2, 0x101, 0x101, 0x0, 0x200, 0x401, 0xfffffffc, 0x305b, 0x1ff, 0x4, 0x1000, 0x1, 0x5c5d, 0x1000, 0x7f, 0x6, 0x0, 0xb678, 0x8001, 0x80, 0x2, 0x400, 0x488, 0x7, 0x1, 0x3, 0x230, 0x7f, 0x8d, 0x7ff, 0x3f, 0x20, 0x200, 0x5, 0x1, 0x5, 0x1f, 0x3, 0x2], [0x81, 0x401, 0x6, 0x40, 0x105, 0xfffffffa, 0x0, 0x100, 0xfff, 0x4, 0x6, 0x10001, 0xe5, 0x0, 0xffffffff, 0x249, 0x5, 0x2, 0x8, 0xf19, 0x20, 0x1a6b, 0x80, 0x4, 0x1, 0x5ed, 0x3231a3cb, 0x8, 0x3, 0x81, 0x432, 0x6, 0x4, 0xa68, 0x4, 0x5, 0xfffffffe, 0x0, 0x2, 0x0, 0x2, 0x7fffffff, 0xfff, 0x9, 0x7, 0x8b68, 0x4, 0xb740, 0x400, 0x5, 0x1000, 0x3ff, 0x5, 0x9, 0x7, 0x0, 0xc75f, 0x18000, 0x2, 0x8, 0x6, 0x5d3, 0x2, 0x6], [0xa842, 0x44bb, 0xcab8, 0x8, 0xfffffffa, 0x7fffffff, 0x80, 0x15, 0xfd, 0x5, 0x6676f4aa, 0x8, 0x1, 0x6b0, 0x2b660000, 0x0, 0x4, 0x7fffffff, 0x4, 0xfffff000, 0xb35a, 0xffffffff, 0x401, 0x80, 0x363d, 0x9, 0x62ff, 0x1f, 0x5a, 0x5, 0x8, 0x0, 0x2, 0x1, 0x5, 0x4, 0x5, 0x7, 0x919, 0x4, 0xfffffffe, 0x5, 0x89aafcb, 0x1, 0x0, 0x1439eeea, 0x61, 0x0, 0x9, 0x10001, 0x8a, 0x1, 0x1, 0xd8b3, 0x4, 0xff, 0x67, 0x4, 0x1, 0x1, 0x0, 0x5, 0x8, 0x40], 0x5, ['!\'$.\x00']}, ["", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000040) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:03:14 executing program 0: 18:03:14 executing program 3: 18:03:14 executing program 1: [ 805.594322][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 805.601279][ T5] usbhid: probe of 6-1:0.0 failed with error -71 18:03:15 executing program 2: 18:03:15 executing program 4: r0 = socket$kcm(0x2, 0x7, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 805.652368][ T5] usb 6-1: USB disconnect, device number 62 18:03:15 executing program 3: [ 806.044549][ T5] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 806.437966][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.458944][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.469264][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 806.479512][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.489352][ T5] usb 6-1: config 0 descriptor?? [ 806.834345][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 806.840413][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 806.855114][ T5] usb 6-1: USB disconnect, device number 63 [ 807.344317][ T5] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 807.744555][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.755528][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.767659][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 807.778850][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.793030][ T5] usb 6-1: config 0 descriptor?? [ 808.284557][ T5] hid (null): report_id 1983922483 is invalid [ 808.292345][ T5] wacom 0003:056A:0331.003F: report_id 1983922483 is invalid [ 808.307561][ T5] wacom 0003:056A:0331.003F: item 0 4 1 8 parsing failed [ 808.322124][ T5] wacom 0003:056A:0331.003F: parse failed [ 808.334456][ T5] wacom: probe of 0003:056A:0331.003F failed with error -22 [ 808.490304][ T17] usb 6-1: USB disconnect, device number 64 [ 809.274290][ T3077] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 809.654420][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.665483][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.677030][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 809.687265][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.700146][ T3077] usb 6-1: config 0 descriptor?? 18:03:19 executing program 0: 18:03:19 executing program 2: 18:03:19 executing program 1: 18:03:19 executing program 3: 18:03:19 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x10}) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="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", 0xfe}, {&(0x7f0000000200)="3536399d0445", 0x6}, {&(0x7f0000000280)="29396fc19e0502edaa491e8aec635868dd5286d06dc558b8db9b9caa718a53e7c1a0db30936b16f8714a875a9c183ef0c0448781f04df51d913ce73981b34784379f8128d83f13d1871445a2cbe63bea2a333e807179a4a6fad59183410e6ab85f7138aafd1e1c176442d43f9f3801f9e1", 0x71}, {&(0x7f0000000180)="27cbdd5b4a615f25e7b25ca81bd3643ab3911df7ddfcd0270697bebdf027945d0901ef4a56f953845a06895f46f0ebe04d00b7b14bdd481e", 0x38}], 0x4}, 0x0) 18:03:19 executing program 2: [ 809.894386][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 809.901809][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 18:03:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='msdos\x00', 0x6) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x124) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000140)='%\x00', 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:19 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = accept4$unix(r0, &(0x7f0000000140), &(0x7f00000000c0)=0x6e, 0x80000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r3 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x9, 0x80, 0x101, 0xfff, 0x100005, 0xf58}, 0x1c) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r5, &(0x7f0000000000)) r6 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39ee, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES16=r6], 0x0}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockopt$inet_buf(r7, 0x0, 0x2a, &(0x7f0000000100)=""/3, &(0x7f0000000080)=0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 18:03:19 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) 18:03:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x60, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x2004c845) 18:03:19 executing program 1: r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00ce05000033414576"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 809.995412][ T3077] usb 6-1: USB disconnect, device number 65 18:03:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000000140)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x69c6}) r5 = dup2(r2, r2) read$dsp(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) dup3(r6, r5, 0x0) tkill(r3, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) syz_usb_disconnect(r0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000100)={0x0, @aes128}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 18:03:19 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) gettid() r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x79212d, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x81000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', r4}) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 18:03:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8000000002060102000000000000000000000000050004000000000012000300686173683a6e65742c706f727400000005000400010000000500010007000000050004000100000011000300685a01bfc8f664528c73683a69702c706f7274000000000500010007000000050005000000000005000400020000000900020073"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) write$P9_RLINK(r1, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 810.265939][T24408] smc: net device dummy0 applied user defined pnetid SYZ2 18:03:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000180), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0xfffffffc}, 0x8) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000140)=@int=0x101, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:19 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0x4, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40) close(r1) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 810.394249][ T17] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 810.411388][ T3077] usb 6-1: new high-speed USB device number 66 using dummy_hcd 18:03:19 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10d200, 0x0) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 810.472358][T22189] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 810.512383][T24425] FAT-fs (loop3): bogus number of reserved sectors 18:03:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000180), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0xfffffffc}, 0x8) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000140)=@int=0x101, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:19 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1) ppoll(&(0x7f00000002c0)=[{r1, 0x8000}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x8001]}, 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 810.532612][T24425] FAT-fs (loop3): Can't find a valid FAT filesystem [ 810.764723][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.785011][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.802490][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.802871][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.849022][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 810.850108][ T17] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 810.871936][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.885397][T22189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.892178][ T17] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 810.911655][T22189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.923235][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.938391][ T17] usb 2-1: config 0 descriptor?? [ 810.939974][ T3077] usb 6-1: config 0 descriptor?? [ 810.954454][T22189] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 810.955886][T24405] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 810.966761][T22189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.989096][T22189] usb 3-1: config 0 descriptor?? [ 811.243238][ T17] usb 2-1: string descriptor 0 read error: -71 [ 811.300789][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 811.308859][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 811.328341][ T3077] usb 6-1: USB disconnect, device number 66 [ 811.355368][ T17] usbhid 2-1:0.0: can't add hid device: -71 [ 811.361466][ T17] usbhid: probe of 2-1:0.0 failed with error -71 [ 811.386341][ T17] usb 2-1: USB disconnect, device number 3 [ 811.764371][ T17] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 811.814417][ T3077] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 812.124447][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.138975][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.150058][ T17] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 812.164039][ T17] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 812.173703][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.185843][ T17] usb 2-1: config 0 descriptor?? [ 812.204587][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.206735][T24405] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 812.216892][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.239140][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 812.249625][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.262202][ T3077] usb 6-1: config 0 descriptor?? [ 812.524366][ T17] usb 2-1: string descriptor 0 read error: -71 [ 812.634320][ T17] usbhid 2-1:0.0: can't add hid device: -71 [ 812.640378][ T17] usbhid: probe of 2-1:0.0 failed with error -71 [ 812.655874][ T17] usb 2-1: USB disconnect, device number 4 [ 812.794385][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 812.800521][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 812.810349][ T3077] usb 6-1: USB disconnect, device number 67 [ 813.274326][T22189] usbhid 3-1:0.0: can't add hid device: -71 [ 813.280383][T22189] usbhid: probe of 3-1:0.0 failed with error -71 [ 813.293758][T22189] usb 3-1: USB disconnect, device number 18 [ 813.514422][ T2666] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 813.904352][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.915333][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.934946][ T2666] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 813.944068][ T2666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.954610][ T2666] usb 6-1: config 0 descriptor?? 18:03:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000180), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0xfffffffc}, 0x8) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000140)=@int=0x101, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000002030102000000000800044000000800000000000001e43c00000100000800000040000000090000008000000000"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x80) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x798}}, 0x30) r4 = accept4$alg(r1, 0x0, 0x0, 0x800) fallocate(r4, 0x0, 0xfffffffffffffffc, 0xa4) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0xb, &(0x7f0000000140)=0x8, 0x4) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 18:03:23 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)="179bf00ad07ad39da43a5ca2cbb2e0d7a23fe4d3ef804241a9d674ce2fc07fae4a1e85d93504867ef558b059bc9584b7cafb417ae154b474c8f900fa2864b0e3b452d589a66674663b65c1473b6036b8e748672f988ce30ce3d74d1c1f100bf39ba17c70ac0158066d3f15de4cc6f0f0f044f5005f1d4034447e92f4257ec3b1a4572211da740339d57d2629909b596704abcd98b0abe6d9e04a0a689c0b3cda7895e84fe2c845b0885d9fa61698886aaa0d6311deaac50b043a7ea46b6099dd2a54d72a27ff8daf48f4e1ba13a7c01c1d270bfee5800000000000000000", 0xde}], 0x1}, 0x0) 18:03:23 executing program 1: r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00ce05000033414576"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:03:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) readlink(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)=""/118, 0x76) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:23 executing program 5: r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_disconnect(r0) timerfd_create(0x2, 0x800) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0022050000000716000000d4d05724060d75ef9c4cb7b0382570894308ae8b5964ba14e28b00332acc167a9ddaf6a51b2c6b0755e8afa5e9e33b532a7fbb833b4d88ea"], 0x0}, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000000)={0x39, 0x1, 0x5, 0x6, 0x5, 0x9, 0x2, 0x12f, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) setresuid(0x0, r7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) setresuid(0x0, r9, 0x0) setresuid(r5, r7, r9) [ 814.244428][ T2666] usbhid 6-1:0.0: can't add hid device: -71 [ 814.250919][ T2666] usbhid: probe of 6-1:0.0 failed with error -71 18:03:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000002030102000000000800044000000800000000000001e43c00000100000800000040000000090000008000000000"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x80) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x798}}, 0x30) r4 = accept4$alg(r1, 0x0, 0x0, 0x800) fallocate(r4, 0x0, 0xfffffffffffffffc, 0xa4) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0xb, &(0x7f0000000140)=0x8, 0x4) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) [ 814.419185][ T2666] usb 6-1: USB disconnect, device number 68 18:03:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:03:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x80000001, 0x80, 0x20, 0x2}}) prctl$PR_GET_SECCOMP(0x15) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 814.514906][ T8051] usb 2-1: new high-speed USB device number 5 using dummy_hcd 18:03:23 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="081028bd7000fedbdf250400000008a80d62f37eb6115300dcd90009000300000008001700", @ANYRES32=r1, @ANYBLOB="05000d000100000014001f0020010000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x20008010}, 0x20008014) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x204000000) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r6 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r6, &(0x7f0000000000)) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000180)=0x20011) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 814.794216][ T2666] usb 6-1: new low-speed USB device number 69 using dummy_hcd 18:03:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file1\x00', 0x1d4) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:24 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x200200) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000000200)=',/@{/!@&\x00', 0x9, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000180)=r4) keyctl$set_reqkey_keyring(0xe, 0x7) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000100)=""/43) [ 814.904827][ T8051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 18:03:24 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) open_tree(r0, &(0x7f0000000080)='./file1\x00', 0x81101) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 814.971110][ T8051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 18:03:24 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x37) [ 815.041418][ T8051] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 18:03:24 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) [ 815.094231][ T2666] usb 6-1: device descriptor read/64, error 18 [ 815.096639][ T8051] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 815.126828][ T8051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.159619][ T8051] usb 2-1: config 0 descriptor?? [ 815.185976][T24525] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 815.469343][ T8051] usb 2-1: string descriptor 0 read error: -71 [ 815.514593][ T2666] usb 6-1: device descriptor read/64, error 18 [ 815.594426][ T8051] usbhid 2-1:0.0: can't add hid device: -71 [ 815.607512][ T8051] usbhid: probe of 2-1:0.0 failed with error -71 [ 815.632206][ T8051] usb 2-1: USB disconnect, device number 5 [ 815.804244][ T2666] usb 6-1: new low-speed USB device number 70 using dummy_hcd [ 816.024401][ T8051] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 816.104324][ T2666] usb 6-1: device descriptor read/64, error 18 [ 816.394522][ T8051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.405469][ T8051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.416496][ T8051] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 816.430500][ T8051] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 816.440251][ T8051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.451779][ T8051] usb 2-1: config 0 descriptor?? [ 816.479431][T24525] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 816.504456][ T2666] usb 6-1: device descriptor read/64, error 18 [ 816.634537][ T2666] usb usb6-port1: attempt power cycle [ 816.774469][ T8051] usb 2-1: string descriptor 0 read error: -71 [ 816.874388][ T8051] usbhid 2-1:0.0: can't add hid device: -71 [ 816.880396][ T8051] usbhid: probe of 2-1:0.0 failed with error -71 [ 816.893574][ T8051] usb 2-1: USB disconnect, device number 6 18:03:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file1\x00', 0x1d4) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000140)={0x7, {0x4, 0x0, 0x4, 0x20}}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x20000, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e20, 0x2, @mcast1, 0xffffffff}}}, 0x84) 18:03:26 executing program 4: r0 = socket$kcm(0x2, 0x1f4d53efb436a24b, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200040, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000180)={0x2, 'nr0\x00', {0x5}, 0x7}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r4, 0x5}, &(0x7f0000000140)=0x8) 18:03:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) memfd_create(0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/179, 0xb3, 0x7ff, &(0x7f00000000c0)={0x0, 0x3938700}) read$FUSE(r0, &(0x7f0000000800), 0x1000) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) dup3(r2, r1, 0x0) 18:03:26 executing program 1: r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00ce05000033414576"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:03:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_connect(0x4, 0x995, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0xa2, 0xde, 0xc3, 0xff, 0x2001, 0x7d0e, 0xff7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x983, 0x4, 0xfe, 0x80, 0x80, 0x7f, [{{0x9, 0x4, 0xd4, 0xf7, 0xe, 0xff, 0xfa, 0xf8, 0xff, [@generic={0xe0, 0x24, "72def48fb9d283d005491526b87361886c20cdeb2681db6bd69cc8f455dab8cbababeedeac24c01c208c0837eea225260304ce8b4782fb81eb355ba62bfb3aaa448a28830e679cdd1cdc93199b442a2c484ec529cd4350f3a69d8d60a6e76a4cc7bd0483cc7440b8da345b8e2a6f8e62f619eb3a12459582b17d538d36377e76ce425d8641f9866c7eb87cf3d53700a987f7ef71bb8afdb45f950bdd6b9ee0756587425d87ab3769c47100ab80fe4f77f0b11d37a601a6b600d4278261e10ab0a2a04d779632b143851ce2a8c7571182cc44a89cacb91e44018337543044"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "6da3"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x26, 0x6, 0x6, 0x9}, [@mbim={0xc, 0x24, 0x1b, 0x554b, 0x7fff, 0x8, 0x40, 0xff}, @mdlm_detail={0xf2, 0x24, 0x13, 0x80, "6bb8db5ae0d5bdaf3fa9918bb921b58edc7af16a0026d8328eaf13ebc4c6ad372f3c45c5e78ba02b69310594a7a53638ae76151dd64c7cd753b74a65b9e051fc319c5f9df3b3d5d92bd845fdec819df2b00b08d27e65c8aeed4c8735e488939df7cf236d4ad269f5cb3a721bc84a43dd0c2ed9760f46f1c62560b8d27707d3d2ae50e17547aa9f6781d2efe15fe75b0c391c9506b8f6edebc4a762565c168ae9beaf5f80e71cf6ede65fd37744acac4eb552896d15054de7c8626f5d9d86b0c45f2dee3fa919f49e186d28c1cde9e990191ca7d03337f509322a739e8e53749947161109f13631f7124a694e918a"}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x20}, @dmm={0x7, 0x24, 0x14, 0x4, 0xf1}]}], [{{0x9, 0x5, 0xe, 0x0, 0x400, 0x6, 0x9, 0xe6, [@generic={0x32, 0x24, "2bf50a7a7cfeb8eecb42a50f6913095dc0bf662b753c81c39dcd9137d4e8f820a371e7944c2899fa91b477ac7e81841a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x1}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x6, 0x5, 0x81}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x0, 0x6, 0x5}}, {{0x9, 0x5, 0xb3e2ae3c5932b5c, 0x2, 0x400, 0x1e, 0x1, 0x4}}, {{0x9, 0x5, 0x2, 0x5, 0x20, 0x8, 0x0, 0x0, [@generic={0x1d, 0x6, "6f9973ebfce7d49860c2ff8042cd50ddf4e043c92ff21c3dd9cbdc"}, @generic={0x89, 0x4, "dfe8e405868bdae2bd1a40b2b0cc9390dd8b9fb04d8429fa1f0e6034fb83c4a5739dbeb2ce9d382f9c6ff8cf8dad9807848fa9012e2bb04445d31567a4510859220738e5b6993c809b05cab7e07454718a355bbe2b16a57113d83c7a387022431d4dd61a7bc6a79c95651738ba17185eda0ab0e6df85886625ba9dd6d6cfbd1dc13711c6f15f50"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0xf8, 0x80, 0x5, [@generic={0xa4, 0xd, "910c8b808768215b5effa260ae5fb4a82559e0a854a497dbd43598894b31bb6de9603be053047ef10f2c153c2a97c7118cca9820801fbc6e728e1da6be302a1ec824ceef808fe1e9cd346bd706ac2c9183a26662f6481717ba7eac366862f3d6f8762a9f9aebd486fd73af4da8cba6ab5acf589dc6c8d294d2dac023b84d94a8a84b0d8db5dba594d1fc38ecc9b967300b070a1fb677d488d92f5eb4a5998d8c3e03"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x81, 0x7, 0x4}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x76, 0x81}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0xb, 0x1, 0xb7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3f}, @generic={0x7a, 0x5, "1363c4a154638e17d1f0bec01e9f132b35de2511c23d05fce4169581d192ca37fd5222745896c778a07422709242b0c96686da6164a7e622a61a121a8049d1c45798b5e8c4070cf7ecf77152d71e029e03306382847e24792eac583d5fb9ad1e54ad7397816c4976b950233cd9c2ed56091717e48079b2c3"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x408, 0x1, 0xe1, 0x81}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x14, 0x3, 0x8}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0x7, 0xfe, 0x5, [@generic={0x69, 0x9, "23156b3da1696fd179180f85ac78de27e368707e2b57ea802bc75c2aa4cb876ea9a3f002bc3f6879fde1b4f4bdcbad61db23489eb15eea3282bf169a9fdec24f0f038406d7564baefeb5fd6f901f248019c310865d873e9b8a9d7dd5bdbed00107378f71405b73"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x1, 0x8, 0x9}}, {{0x9, 0x5, 0x5, 0x10, 0x3b7, 0x0, 0xc0, 0x51, [@generic={0x17, 0x1, "66f017d7309edc8c107e009f19d5e120b1943eb0f0"}, @generic={0xb5, 0x7, "5ac17a953073cbed5190bf511ae9fb9c7704b3d7f074ab99997e1850e406e25c99dc5ef9e59705cc6df9ead351e4f7420b3ac328f4b68d32e70a9cc716372be2906821ee071b2e295bb903658c67eed3bb4ff812770f4da6cbb5e494d0f85ed0d215acbaa8c5571f47da3696347cf3344e06b723a15c1bddbfb3ec396d90c2da676b2fe165c0d75ca4dd961fa23ff5eb44f6b2971ed263df56dc6811ddae53cec1cb806fd88ae2ad9ab0340e4ead752e81da85"}]}}]}}, {{0x9, 0x4, 0x57, 0x4, 0x8, 0xa2, 0xcf, 0xcb, 0xfa, [@cdc_ncm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x400, 0x1f, 0xff}, {0x6, 0x24, 0x1a, 0x6, 0x34}, [@acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x71, 0x40, 0x3f}, @acm={0x4, 0x24, 0x2, 0x5}]}, @uac_control={{0xa, 0x24, 0x1, 0x8424, 0xd6}}], [{{0x9, 0x5, 0xf, 0x4, 0x0, 0x8, 0x4, 0x3, [@generic={0x54, 0xb, "fb0efd0b84db11b791c8978209a405817dc9e45709287cb20a663e5f5d0432318e5be730409a2b9029a327914ce96d8a847ca00506f60c44d3b32f02c93f844d3ede4323eebc8a37910ffa68d46a7a4da69a"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x3, 0x6, 0x5, [@generic={0x42, 0x2, "2b2bf16ba405ad389fa3ae8fb7bcad57311b009cd6992d13ef907fec2fc7a3547917788db2a6721590fa501092a2af1d7fa007d2591184905e52e0d6c35229d4"}]}}, {{0x9, 0x5, 0x8, 0x11, 0x20, 0x0, 0x82, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x20, 0x81, 0x80}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x80, 0x1, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x450, 0x5, 0x20, 0xff, [@generic={0x6a, 0x7, "c634500c263d76eff926984b2b8d9226783c0c895ec059e00327901613258a46e1c06837bc074d31f932e2140d00218bf75390e7fd477e87bf9c4ae20297708ab8cc269e8f6fbd8e9970c90fab840a526b6d6361ee41f57dde4a2177aae3f4312b0e86ef2470c858"}, @generic={0x7f, 0x30, "04ef5de81d7394a2b18fda77034ed9708f2268f4ab6587037a3f12d05fb86a74be8f92e330e3130ae79a6d764f27d35a9538bf6a9e6f08807f3b7d94f2096f30e279ed20a08db4db6ce74a8adc47e053654c78e58b7e392ff6425725ea5b3d525053aeb82eff9f9d2dfcee097ffb22f088ef6337f7c4e70ec5aed8f243"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x80, 0x1f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x5bce}]}}, {{0x9, 0x5, 0x555a06bebe6d7a8f, 0x17, 0x200, 0x0, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x1660}]}}]}}, {{0x9, 0x4, 0xc3, 0x8, 0x6, 0x36, 0xf, 0xa9, 0x0, [@hid_hid={0x9, 0x21, 0x800, 0xc2, 0x1, {0x22, 0xcf8}}], [{{0x9, 0x5, 0x188, 0x4, 0x20, 0x80, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x1}]}}, {{0x9, 0x5, 0x2, 0x4, 0x8, 0x3, 0x4, 0x27}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x7f, 0x1, [@generic={0xd0, 0x1, "bd51fb16d2c25be2d5c720296c8e3a9d9aa5bbc71e4fd5e651abce86e85aeab6de762ff251c8a533185f9acc05521997531426665cf829c12f56f69b997c5c22528a6209942f4881bc1a9628ad9d0678dd5371e502784980243868d2708e667c5ddfdecc6617aa7c06e43f336533f385209a2c05d2fbaac02eea1cbc34a206b547c5f37792c1db86bc59794ffa11496449c46d22974a2532b986c4cd267eb49d0a64e9ea2ca7a8efea1d2c346f6db07b8205ab8c2281a17c6c2cf28c2cabac6108ef294b15e119753082916b5b66"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x9, 0x2, 0x81, [@generic={0x33, 0x31, "023e655294a6c2ea448fe1d631a60748e529e2acdcf7fe6d2c8ad2ab4ea0a6b8452fb706d4e2167e560b1e5fd0be9f903d"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x230, 0x8a, 0x4, 0xfa, [@generic={0x20, 0x10, "df064a6d9479fd24d448b30c0c26962d56a37c129e9864fdcd8cd984bf1a"}]}}, {{0x9, 0x5, 0x80, 0x6, 0x8, 0x7, 0x12, 0x1f}}]}}, {{0x9, 0x4, 0x4d, 0x52, 0x0, 0x6b, 0x36, 0x83, 0x1}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xd5, 0xe5, 0x40, 0x40, 0xc7}, 0x55, &(0x7f0000000080)={0x5, 0xf, 0x55, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x20, "00835e294849702fb441b914435fa265"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x20, 0x0, 0x9}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "ccc84fbffd26b22727aed0aac1dc128d"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "e6033df527e12581bee7846a50b3b16c"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x2, 0xfffe}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 817.364307][ T2666] usb 6-1: new low-speed USB device number 71 using dummy_hcd 18:03:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) syz_mount_image$ocfs2(&(0x7f0000000080)='ocfs2\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x10001, 0x1, &(0x7f0000000140)=[{&(0x7f0000000280)="77a4dfb09162c1912fc82992f61d730530219a17bc4538d0184c38ad20ba84f7a8de037475c84bfac8a712aeb97425da57e1d4440da30ab6f8e9caa927cd7b08f8c5b3209501139ee5ae20204abd5f875772f1a6c6d5b85ee060f7fc68fbe031da78ac80b7b75a5a38743ceeec7e6e221941113f729fa2542fbf12ad6d00fc149f6ff3e285c3b19a7e7bad0fec752a6c5aba5d6c5c681f39798ef13edef56fe2aab64f23002a25a2", 0xa8, 0x1f}], 0x8400, &(0x7f00000001c0)='@\x00') creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:26 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000080)={[0xffff]}, 0x0, &(0x7f0000000140)={r1, r2+60000000}, 0x8) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) r4 = timerfd_create(0x1f, 0x800) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x70, 0x7, 0xf9, 0x6, 0x6, 0x0, 0x2, 0x0, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8344, 0x8358021d559452b5, @perf_bp={&(0x7f0000000180), 0x9}, 0x8050, 0x3, 0x100, 0x6, 0x6, 0xe1, 0x8}, r3, 0x3, r3, 0x0) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:03:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f00000000c0)='./file0\x00', 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 817.724300][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd 18:03:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 817.854286][ T2666] usb 6-1: device not accepting address 71, error -71 18:03:27 executing program 3: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0, 0x0, 0xfeffffff}, 0x0) 18:03:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 818.113950][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.139052][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 18:03:27 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 818.200646][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 818.234396][ T2666] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 818.276012][ T23] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 818.308602][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.444595][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.450104][ T23] usb 2-1: config 0 descriptor?? [ 818.471723][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.484505][ T2666] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 18:03:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000080)={0x94, "2a9028cefe1aa016fbdc78f353610c27e5cbf1a97c59ab9e773b980924a35063", 0x2, 0x1}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)={0x200200, 0x8, 0x4}, 0x18) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 818.493561][ T2666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.503903][ T2666] usb 6-1: config 0 descriptor?? 18:03:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0x4c0000, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000200)=[0x3, 0x3], 0x2) creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x801, 0x0) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f00000000c0)={0x9}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000140)={0x9874, 0x3, 0x7fff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 818.565939][T24623] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 818.834413][ T2666] usbhid 6-1:0.0: can't add hid device: -71 [ 818.844780][ T2666] usbhid: probe of 6-1:0.0 failed with error -71 [ 818.874327][ T23] usb 2-1: string descriptor 0 read error: -71 [ 818.898122][ T2666] usb 6-1: USB disconnect, device number 72 [ 819.004301][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 819.010411][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 819.034970][ T23] usb 2-1: USB disconnect, device number 7 [ 819.304432][ T2666] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 819.465438][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 819.684404][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.695327][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.707044][ T2666] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 819.717005][ T2666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.727747][ T2666] usb 6-1: config 0 descriptor?? [ 819.824468][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.835526][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.846692][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 819.861947][ T23] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 819.875150][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.886923][ T23] usb 2-1: config 0 descriptor?? [ 819.906703][T24623] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 820.198021][ T2666] wacom 0003:056A:0331.0040: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 820.204273][ T23] usb 2-1: string descriptor 0 read error: -71 [ 820.324582][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 820.330749][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 820.339400][ T23] usb 2-1: USB disconnect, device number 8 [ 820.389655][ T12] usb 6-1: USB disconnect, device number 73 18:03:30 executing program 1: r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00ce05000033414576"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) [ 821.004633][ T12] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 821.154219][T22189] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 821.364483][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.375524][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.387487][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 821.410222][ T12] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 821.419902][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.429798][ T12] usb 2-1: config 0 descriptor?? [ 821.457449][T24728] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 821.534439][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.545439][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.555683][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 821.565339][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.578468][T22189] usb 6-1: config 0 descriptor?? 18:03:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000280)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xf12b}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x1f}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0xc0}, 0x41) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:31 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x18900, 0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x3f9, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x11}, 0xc004) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r5}, 0x8) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x94, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff000000}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20048875}, 0x20008800) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r5, 0x7, 0x1, [0x9]}, &(0x7f0000000240)=0xa) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:03:31 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x480802, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000000)=0x80) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000140)={0x5, 0x7f, 0x4, 0x4000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0xe0, "d58832d859c2d25dd405c3b34c4a6925523c36980b674288c00f947c0141b76301a4a48279d65c57ef3b600f7dad151cade07c4074ca04a4d261d1a30030a55db3e52a5721414469a2b3061240491af1e35556565dda618b4b659aae8c4a0844a6923a93d860b2745da7b36749eb24e1febd83608921c24cc5c063089554c2b4d9a45256f07bb9e4834f9c08cf671937d2075e1e727f3fc6eb7b683d72745e7d22b59e8b3aa3e07c16c6aa74f5b914f436d2faa0c974cad1324478270f43f1fe24a1c77713fe212b254fb72181cdd87f1c4a0a06662bf9d4835c6c7f3ec237bf"}, &(0x7f0000000100)=0x104) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:03:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x2, "92bfef65"}, @main=@item_4={0x3, 0x0, 0xb, "57f6989e"}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 821.704412][ T12] usb 2-1: string descriptor 0 read error: -71 [ 821.814320][T22189] usbhid 6-1:0.0: can't add hid device: -71 [ 821.820395][T22189] usbhid: probe of 6-1:0.0 failed with error -71 [ 821.855179][ T12] usbhid 2-1:0.0: can't add hid device: -71 [ 821.862140][ T12] usbhid: probe of 2-1:0.0 failed with error -71 [ 821.889567][T22189] usb 6-1: USB disconnect, device number 74 18:03:31 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000100)=0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x2000, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x28, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)='ipvlan1\x00', 0xffff, 0xf, 0x9}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x2000, 0x0) [ 821.922444][ T12] usb 2-1: USB disconnect, device number 9 18:03:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000280)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xf12b}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x1f}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0xc0}, 0x41) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:31 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x18900, 0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x3f9, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x11}, 0xc004) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r5}, 0x8) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x94, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff000000}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20048875}, 0x20008800) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r5, 0x7, 0x1, [0x9]}, &(0x7f0000000240)=0xa) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:03:31 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000100)=0x7) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x212, 0x20, 0x6, 0x9, 0x7f, @random="fe8a6222cf1e"}, 0x10) [ 822.104286][ T8051] usb 3-1: new high-speed USB device number 19 using dummy_hcd 18:03:31 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000080)=0x40) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x6002, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000140)) [ 822.334300][ T12] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 822.344566][T22189] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 822.474632][ T8051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.503371][ T8051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.523887][ T8051] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 822.534062][ T8051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.569800][ T8051] usb 3-1: config 0 descriptor?? [ 822.714386][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.734404][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.754193][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 822.763341][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.775472][T22189] usb 6-1: config 0 descriptor?? [ 822.789539][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.812218][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.826324][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 822.840456][ T12] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 822.850645][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.861609][ T12] usb 2-1: config 0 descriptor?? [ 822.886804][T24728] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 822.914431][ T8051] usbhid 3-1:0.0: can't add hid device: -71 [ 822.920475][ T8051] usbhid: probe of 3-1:0.0 failed with error -71 [ 822.945613][ T8051] usb 3-1: USB disconnect, device number 19 [ 823.135256][T22189] usbhid 6-1:0.0: can't add hid device: -71 [ 823.141340][T22189] usbhid: probe of 6-1:0.0 failed with error -71 [ 823.172968][T22189] usb 6-1: USB disconnect, device number 75 [ 823.194335][ T12] usb 2-1: string descriptor 0 read error: -71 [ 823.324484][ T12] usbhid 2-1:0.0: can't add hid device: -71 [ 823.330571][ T12] usbhid: probe of 2-1:0.0 failed with error -71 [ 823.357639][ T12] usb 2-1: USB disconnect, device number 10 [ 823.414329][ T8051] usb 3-1: new high-speed USB device number 20 using dummy_hcd 18:03:33 executing program 1: r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00ce05000033414576"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) [ 823.614710][T22189] usb 6-1: new high-speed USB device number 76 using dummy_hcd 18:03:33 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x10, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x24004010) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x79212d, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x81000000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000140)={'ip_vti0\x00', r6, 0x8000, 0x20, 0x3ff, 0x6, {{0x1d, 0x4, 0x3, 0x6, 0x74, 0x66, 0x0, 0x92, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x35}, {[@noop, @ssrr={0x89, 0xb, 0x7e, [@empty, @dev={0xac, 0x14, 0x14, 0x14}]}, @timestamp_prespec={0x44, 0x54, 0xd9, 0x3, 0x9, [{@loopback, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf3}, {@remote, 0xfffffff8}, {@rand_addr=0x64010100, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1f}, {@loopback, 0x1}, {@multicast1, 0x4}, {@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}}}) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000080)='ip6_vti0\x00') 18:03:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000002600)) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000000000)) r4 = dup3(r3, r2, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r4, 0x89e7, &(0x7f00000025c0)={0x53}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000002640)='*,}!%%(&\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000003880)={0x9b0000, 0xa8, 0x2000000, 0xffffffffffffffff, 0x0, &(0x7f0000003840)={0x9c0909, 0x8, [], @p_u32=&(0x7f0000003800)=0xb321}}) sendmsg$AUDIT_USER_TTY(r6, &(0x7f0000003a40)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003a00)={&(0x7f0000003900)={0xdc, 0x464, 0x100, 0x70bd25, 0x25dfdbfe, "45a21c4f1c0d936b2d109b81d4d7f81e7523d84062249f2a1ab29c14412e976bac87055e944eeb7ee42ac0ff04baf065d4c3852b4d6eede8b4c241d9c0733e7c0ac24ef95ee411ce685eca9fe83559f3f9a4e41db5ead20cda17d44d7f2b200a9c98808260a104bd4ae3f8da17d3d39a804970f60d89cc2c49254c67115413a54c262495f75e5e21efc6dd4a2c033edb0a91def233c7d1763ecb30155226f7df286907cc455c9e83ed7d93cc09a9c36f884f766aec078ba62d68a99694c1b939687767501b09b77ceeb1512a", [""]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x8080) recvmmsg(r5, &(0x7f0000002440)=[{{&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)=""/217, 0xd9}, {&(0x7f0000000380)=""/129, 0x81}, {&(0x7f00000001c0)=""/97, 0x61}], 0x3, &(0x7f0000000440)=""/73, 0x49}, 0x8ed}, {{&(0x7f00000004c0)=@l2, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/182, 0xb6}, {&(0x7f0000000600)=""/51, 0x33}, {&(0x7f0000000640)=""/132, 0x84}, {&(0x7f0000000700)=""/182, 0xb6}, {&(0x7f00000007c0)=""/34, 0x22}], 0x5}, 0x2}, {{&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000900)=""/226, 0xe2}, {&(0x7f0000000a00)=""/108, 0x6c}], 0x3}, 0x81}, {{&(0x7f0000000ac0)=@hci, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000b40)=""/235, 0xeb}, {&(0x7f0000000c40)=""/227, 0xe3}, {&(0x7f0000000d40)=""/32, 0x20}, {&(0x7f0000000d80)=""/73, 0x49}, {&(0x7f0000000e00)=""/157, 0x9d}, {&(0x7f0000000ec0)=""/231, 0xe7}, {&(0x7f0000000fc0)=""/41, 0x29}, {&(0x7f0000001000)=""/134, 0x86}], 0x8, &(0x7f0000001140)=""/229, 0xe5}, 0x4}, {{&(0x7f0000001240)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002340)=""/187, 0xbb}], 0x1}, 0x9}], 0x5, 0x0, &(0x7f0000002580)={0x0, 0x989680}) 18:03:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 823.824602][ T8051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.835723][ T8051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.845648][ T8051] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 823.855277][ T8051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.865957][ T8051] usb 3-1: config 0 descriptor?? [ 823.974695][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.007775][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.034267][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 824.043335][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.055639][T22189] usb 6-1: config 0 descriptor?? [ 824.094267][T22104] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 824.338302][ T8051] wacom 0003:056A:0331.0041: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0 [ 824.505548][T22104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.521537][T22104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.532613][T22104] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 824.541617][T22189] wacom 0003:056A:0331.0042: ignoring exceeding usage max [ 824.562238][T22189] wacom 0003:056A:0331.0042: hidraw1: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 824.579330][T22104] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 824.600735][T22104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.631527][ T8051] usb 3-1: USB disconnect, device number 20 [ 824.642073][T22104] usb 2-1: config 0 descriptor?? [ 824.675758][T24836] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 824.745552][T22189] usb 6-1: USB disconnect, device number 76 [ 824.934350][T22104] usb 2-1: string descriptor 0 read error: -71 [ 825.044362][T22104] usbhid 2-1:0.0: can't add hid device: -71 [ 825.050538][T22104] usbhid: probe of 2-1:0.0 failed with error -71 [ 825.061404][T22104] usb 2-1: USB disconnect, device number 11 18:03:34 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x28120000) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 825.484246][T22104] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 825.524269][T22189] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 825.844586][T22104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.856638][T22104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.868239][T22104] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 825.882104][T22104] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 825.897691][T22104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.914531][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.914855][T22104] usb 2-1: config 0 descriptor?? [ 825.946633][T24836] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 825.951307][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.968699][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 825.983249][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.000992][T22189] usb 6-1: config 0 descriptor?? 18:03:35 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) dup(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:03:35 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x6c) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x18200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r4, 0x9}}, 0x18) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f00000000c0)={0x1, 'rose0\x00', {}, 0x8001}) 18:03:35 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$TIOCSBRK(r0, 0x5427) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:03:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x10001, 0x2) preadv(r1, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000280)=""/177, 0xb1}, {&(0x7f0000000340)=""/221, 0xdd}, {&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000440)=""/195, 0xc3}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000540)=""/110, 0x6e}, {&(0x7f0000000140)=""/19, 0x13}], 0x8, 0x9) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="78000000150a01010000000000000000070000020900020073797a32000000000c000000030900020073797a32000000000c000640000000000000000308000340000000030900020073797a16000000000c0006400000000000000005080003400000000a0900010073797a3000"/120], 0x78}, 0x1, 0x0, 0x0, 0x4000091}, 0x8000) 18:03:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x28120000) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 826.084250][T22189] usb 6-1: can't set config #0, error -71 [ 826.109698][T22189] usb 6-1: USB disconnect, device number 77 [ 826.244262][T22104] usb 2-1: string descriptor 0 read error: -71 [ 826.354645][T22104] usbhid 2-1:0.0: can't add hid device: -71 [ 826.414611][T22104] usbhid: probe of 2-1:0.0 failed with error -71 18:03:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x10001, 0x2) preadv(r1, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000280)=""/177, 0xb1}, {&(0x7f0000000340)=""/221, 0xdd}, {&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000440)=""/195, 0xc3}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000540)=""/110, 0x6e}, {&(0x7f0000000140)=""/19, 0x13}], 0x8, 0x9) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="78000000150a01010000000000000000070000020900020073797a32000000000c000000030900020073797a32000000000c000640000000000000000308000340000000030900020073797a16000000000c0006400000000000000005080003400000000a0900010073797a3000"/120], 0x78}, 0x1, 0x0, 0x0, 0x4000091}, 0x8000) 18:03:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0xff00000000000000) [ 826.471765][T22104] usb 2-1: USB disconnect, device number 12 [ 826.604442][T22189] usb 6-1: new high-speed USB device number 78 using dummy_hcd 18:03:36 executing program 1: r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00ce05000033414576"], 0x0}, 0x0) 18:03:36 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1b}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x79212d, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000108000000000000000000004800", @ANYRES32=0x0, @ANYBLOB="000000000000000008020400", @ANYRES32=r4, @ANYBLOB="1400030067656e65766530000000000000000000"], 0x3c}, 0x1, 0x81000000}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x84, r1, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_FLAGS={0x0, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6ee}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x655}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6b3}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHORIZED, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}]}, 0x84}}, 0x20080843) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = creat(0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r7 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2863, 0x10100) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f00000000c0)=0x100, 0x4) 18:03:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:36 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x69) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x1000, 0x58e, 0x2021, 0x2, 0x4, 0x3, 0x0, 0x5}}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000000c0)={0x0, 0x1, {0x1f, 0x28, 0x15, 0x18, 0xb, 0xe2b, 0x2, 0x5, 0x1}}) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x111003, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r5) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000240)=r7, 0x4) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x4) [ 826.935910][T24956] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 827.004593][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.049896][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.151006][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 827.234202][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.287354][T22189] usb 6-1: config 0 descriptor?? [ 827.444381][ T5] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 827.634383][T22189] usbhid 6-1:0.0: can't add hid device: -71 [ 827.640636][T22189] usbhid: probe of 6-1:0.0 failed with error -71 [ 827.674402][T22189] usb 6-1: USB disconnect, device number 78 [ 827.822898][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.850211][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.882414][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 827.920271][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 827.930794][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.948940][ T5] usb 2-1: config 0 descriptor?? [ 827.965982][T24958] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 828.111411][T22189] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 828.214659][ T5] usb 2-1: string descriptor 0 read error: -71 [ 828.339244][ T5] usbhid 2-1:0.0: can't add hid device: -71 [ 828.355765][ T5] usbhid: probe of 2-1:0.0 failed with error -71 [ 828.384421][T22189] usb 6-1: device descriptor read/64, error 18 [ 828.419637][ T5] usb 2-1: USB disconnect, device number 13 [ 828.827738][T22189] usb 6-1: device descriptor read/64, error 18 [ 828.846242][ T5] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 829.104587][T22189] usb 6-1: new high-speed USB device number 80 using dummy_hcd 18:03:38 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x446202, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:03:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x300000000000000) 18:03:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x69) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x1000, 0x58e, 0x2021, 0x2, 0x4, 0x3, 0x0, 0x5}}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000000c0)={0x0, 0x1, {0x1f, 0x28, 0x15, 0x18, 0xb, 0xe2b, 0x2, 0x5, 0x1}}) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x111003, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r5) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000240)=r7, 0x4) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x4) [ 829.214677][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.261585][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.394329][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 18:03:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8080, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x10000, {{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x40}, 0x101}}}, 0x88) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) fchdir(r0) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./file0\x00') 18:03:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x300000000000000) [ 829.492370][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 829.518309][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.598727][ T5] usb 2-1: config 0 descriptor?? [ 829.628159][T24958] raw-gadget gadget: fail, usb_ep_enable returned -22 18:03:39 executing program 1: r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) 18:03:39 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x100000000000000) 18:03:39 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:03:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) [ 829.924268][T22189] usb 6-1: device descriptor read/64, error -71 [ 829.934418][ T5] usb 2-1: string descriptor 0 read error: -71 [ 830.034274][ T5] usbhid 2-1:0.0: can't add hid device: -71 [ 830.048101][ T5] usbhid: probe of 2-1:0.0 failed with error -71 [ 830.062952][ T5] usb 2-1: USB disconnect, device number 14 18:03:39 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x22) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 830.424391][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.452592][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.474341][ T5] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 830.489851][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 830.516720][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.532478][T22189] usb 6-1: config 0 descriptor?? [ 830.874572][T22189] usbhid 6-1:0.0: can't add hid device: -71 [ 830.881278][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.904899][T22189] usbhid: probe of 6-1:0.0 failed with error -71 [ 830.937924][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.963114][T22189] usb 6-1: USB disconnect, device number 80 [ 830.985514][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 831.077342][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 831.114391][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.134894][ T5] usb 2-1: config 0 descriptor?? [ 831.169061][T25041] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 831.374235][T22189] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 831.454287][ T5] usb 2-1: string descriptor 0 read error: -71 [ 831.564358][ T5] usbhid 2-1:0.0: can't add hid device: -71 [ 831.570764][ T5] usbhid: probe of 2-1:0.0 failed with error -71 [ 831.596991][ T5] usb 2-1: USB disconnect, device number 15 [ 831.746905][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.774425][T22189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.804197][T22189] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 831.818968][T22189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.837944][T22189] usb 6-1: config 0 descriptor?? [ 831.974315][ T5] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 832.314614][T22189] wacom 0003:056A:0331.0043: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 832.377755][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.404019][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.423439][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 832.452559][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 832.471798][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.487266][ T5] usb 2-1: config 0 descriptor?? [ 832.512783][T22189] usb 6-1: USB disconnect, device number 81 [ 832.522366][T25041] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 832.810526][ T5] usb 2-1: string descriptor 0 read error: -71 [ 832.924555][ T5] usbhid 2-1:0.0: can't add hid device: -71 [ 832.932605][ T5] usbhid: probe of 2-1:0.0 failed with error -71 [ 832.950999][ T5] usb 2-1: USB disconnect, device number 16 [ 833.326648][ T3077] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 833.724387][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.740635][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.751669][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 833.762412][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.776676][ T3077] usb 6-1: config 0 descriptor?? 18:03:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x3f00000000000000) 18:03:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0xf6ffffff) 18:03:43 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x7000000) 18:03:43 executing program 1: r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) 18:03:43 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffffffffffff, 0x40201) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)={0xace5, 0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000100)={r4, 0xa068}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0xdd, 0x6}) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r0) 18:03:43 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffa7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) [ 833.934385][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 833.946404][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 833.994802][ T3077] usb 6-1: USB disconnect, device number 82 18:03:43 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x600000000000000) 18:03:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x6000000) 18:03:43 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000080), 0x0, r2) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x98b2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000001c0)={r4, 0xf3, "8ad1f9ce1dd1c12d39b9ad825826a14aab3663237c904f4cab7a04db6e2eb6e7ad36a952dd0473d6cb01c24a7af8fc34364e34ae1c5e513c3b90f5d688aca3de149e3565b976cf98db2fa920c36b662e347ddc3c37fc2d2a77a90678f0ce6e9f88b50482c47fc2cececb4b18427e5d641f89d21806863f3629c770ae4104f9b356443d740eb27f158486657985fbff7cd1d03d4a6f074030e176bfa6c9ddd496e6d9a61927eb3ed6a2ec02dac455cf13decba12222c39835eea874dee6984e70d641cbc348a41a62bde76e656e008e1b3faf947c7b7f651f82bfff0da8882d656e66a5c985301a77ced4166509c2163124bc62"}, &(0x7f0000000140)=0xfb) 18:03:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x3f00000000000000) [ 834.214396][ T23] usb 2-1: new high-speed USB device number 17 using dummy_hcd 18:03:43 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 834.524335][ T3077] usb 6-1: new high-speed USB device number 83 using dummy_hcd 18:03:43 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=""/127, &(0x7f00000008c0)=""/4096, &(0x7f0000000000)=""/21, 0x5000}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000080)) [ 834.574637][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 18:03:44 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x3f00000000000000) 18:03:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x6000000) [ 834.665422][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.709332][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 18:03:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x600000000000000) [ 834.748497][ T23] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 834.794537][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.841077][ T23] usb 2-1: config 0 descriptor?? [ 834.876023][T25133] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 834.934540][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.013860][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.130876][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 835.157494][ T23] usb 2-1: string descriptor 0 read error: -71 [ 835.166304][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.190461][ T3077] usb 6-1: config 0 descriptor?? [ 835.274606][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 835.280888][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 835.301590][ T23] usb 2-1: USB disconnect, device number 17 [ 835.565150][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 835.592721][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 835.640462][ T3077] usb 6-1: USB disconnect, device number 83 [ 835.684319][ T23] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 836.034361][ T3077] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 836.054694][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.066735][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.079695][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 836.094727][ T23] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 836.105450][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.120738][ T23] usb 2-1: config 0 descriptor?? [ 836.146363][T25133] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 836.404400][ T23] usb 2-1: string descriptor 0 read error: -71 [ 836.424791][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.438506][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.452988][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 836.463406][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.473121][ T3077] usb 6-1: config 0 descriptor?? [ 836.505368][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 836.513055][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 836.524006][ T23] usb 2-1: USB disconnect, device number 18 18:03:46 executing program 1: r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) 18:03:46 executing program 2: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x33}, 0x0) [ 836.959790][ T3077] wacom 0003:056A:0331.0044: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 837.167331][ T8051] usb 6-1: USB disconnect, device number 84 [ 837.214288][T22189] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 837.596305][T22189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.609123][T22189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.621954][T22189] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 837.637884][T22189] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 837.655938][T22189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.667706][T22189] usb 2-1: config 0 descriptor?? [ 837.695968][T25227] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 837.954410][ T2666] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 837.962513][T22189] usb 2-1: string descriptor 0 read error: -71 [ 838.064431][T22189] usbhid 2-1:0.0: can't add hid device: -71 [ 838.070844][T22189] usbhid: probe of 2-1:0.0 failed with error -71 [ 838.081395][T22189] usb 2-1: USB disconnect, device number 19 [ 838.344509][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.359565][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.370438][ T2666] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 838.383672][ T2666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.394000][ T2666] usb 6-1: config 0 descriptor?? 18:03:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x4000000) 18:03:47 executing program 4: r0 = socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$inet(r2, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:03:47 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x600000000000000) 18:03:47 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000001540)='/dev/vcsa#\x00', 0x5, 0x1001) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000001580)={0x2, 0x8000, @private=0xa010100}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000002c0), 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, 0x0, 0x9, 0xb2e1026c6f277bfb, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x172}}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4008080}, 0x40040) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:03:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x100000000000000) [ 838.589837][ T2666] usbhid 6-1:0.0: can't add hid device: -71 [ 838.600400][ T2666] usbhid: probe of 6-1:0.0 failed with error -71 18:03:48 executing program 1: syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) 18:03:48 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x3000000) [ 838.747683][ T2666] usb 6-1: USB disconnect, device number 85 18:03:48 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x4000000) 18:03:48 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) ptrace$pokeuser(0x6, r1, 0x6, 0xc7) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r2 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) 18:03:48 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:03:48 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x3000000) 18:03:48 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89e6, &(0x7f00000000c0)="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") sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="17", 0x1}], 0x1}, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e23, @multicast2}, {0x6, @random="39b882f14687"}, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'hsr0\x00'}) 18:03:48 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r5, 0xc91add0bf88807dd, 0x0, 0x0, {0x33}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x160, r5, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xde7}, {0x6, 0x11, 0x1000}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xffff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3b97ce4f}, {0x6, 0x11, 0x7ff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xc9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4bed}, {0x6, 0x11, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x880}, 0x4090) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = dup3(0xffffffffffffffff, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x0) ioctl$USBDEVFS_GET_SPEED(r8, 0x551f) r9 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 839.226537][ T8051] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 839.244635][ T2666] usb 6-1: new high-speed USB device number 86 using dummy_hcd 18:03:48 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:03:48 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 839.614929][ T8051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.624574][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.674771][ T8051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.678895][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.704304][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 839.706239][ T2666] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 839.722765][ T2666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.733366][ T2666] usb 6-1: config 0 descriptor?? [ 839.750495][ T8051] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 839.766625][ T8051] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 839.777209][ T8051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.794587][ T8051] usb 2-1: config 0 descriptor?? [ 839.825905][T25295] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 840.074310][ T2666] usbhid 6-1:0.0: can't add hid device: -71 [ 840.081668][ T2666] usbhid: probe of 6-1:0.0 failed with error -71 [ 840.094643][ T8051] usb 2-1: string descriptor 0 read error: -71 [ 840.101060][ T2666] usb 6-1: USB disconnect, device number 86 [ 840.114628][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.144430][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.157055][ T23] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 840.168123][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.181692][ T23] usb 4-1: config 0 descriptor?? [ 840.214363][ T8051] usbhid 2-1:0.0: can't add hid device: -71 [ 840.221562][ T8051] usbhid: probe of 2-1:0.0 failed with error -71 [ 840.238941][ T8051] usb 2-1: USB disconnect, device number 20 [ 840.534721][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 840.534868][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 840.569866][ T2666] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 840.605980][ T23] usb 4-1: USB disconnect, device number 8 [ 840.944823][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.958330][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.970020][ T2666] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 840.982285][ T2666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.002815][ T2666] usb 6-1: config 0 descriptor?? [ 841.034347][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 841.394446][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.408853][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.419069][ T23] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 841.431902][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.441595][ T23] usb 4-1: config 0 descriptor?? [ 841.754350][ T2666] usbhid 6-1:0.0: can't add hid device: -71 [ 841.760509][ T2666] usbhid: probe of 6-1:0.0 failed with error -71 [ 841.773915][ T2666] usb 6-1: USB disconnect, device number 87 [ 841.929186][ T23] wacom 0003:056A:0331.0045: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 842.199228][ T2666] usb 4-1: USB disconnect, device number 9 [ 842.474222][ T23] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 842.834551][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.851535][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.870351][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 842.879982][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.889657][ T23] usb 6-1: config 0 descriptor?? 18:03:52 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000200)={r3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000001c0)) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000100)=ANY=[@ANYBLOB="020098006dc5f29146ec232074f2a6a433f1b1c3244f4e6e20caef3c15489ecc3284526ca3f7948a378446ce595982d6ef87d7cef34ceef471555bfed8361cd334eab223b552f2eb161f19f34d5908d9a0c19f952081909d83623c1585d906e623f16d9bed4ed41cd6376403b0df435dcdadc9f114fa7b03ce9055d9fe65d1c49f38eb3084694715156c874c6415d0594e9812ee3e1ca1d2469c8902"]) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000080)={0xa, 0x5, 0x2, 0xdcb2, 'syz1\x00', 0x400}) 18:03:52 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x3000000) 18:03:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:03:52 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) 18:03:52 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r5, 0xc91add0bf88807dd, 0x0, 0x0, {0x33}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x160, r5, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xde7}, {0x6, 0x11, 0x1000}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xffff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3b97ce4f}, {0x6, 0x11, 0x7ff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xc9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4bed}, {0x6, 0x11, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x880}, 0x4090) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = dup3(0xffffffffffffffff, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x0) ioctl$USBDEVFS_GET_SPEED(r8, 0x551f) r9 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 18:03:52 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) setresuid(0x0, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) setresuid(0x0, r5, 0x0) setresuid(r1, r3, r5) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00229dbfe472e4de858e630a1b05f3ffff06"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x0) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000080)=0xfff) r9 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 843.124391][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 843.130820][ T23] usbhid: probe of 6-1:0.0 failed with error -71 18:03:52 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 843.181446][ T23] usb 6-1: USB disconnect, device number 88 18:03:52 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000) 18:03:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:03:52 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fsync(r0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000280), 0x4) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000080)) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="17", 0x1}, {&(0x7f0000000100)="e9712d8be62c38a6e619802180fd7d8ba1d6e4fdcca36bdcbaac31cb5eaa7fd0733e364b3fc04327253a069b2d88aefc954a2b10cd66b5adadc4e938f437e62d852d385f0035a95cada8700980447ed6351f1001a7ed61de21614dadeba47c2aad4ffcbcd4516a422ef69087a8c33bc7b39a378115d34971f64ffc55f97f6e3eea42be9c97dcf2f0f0e69cd54b828e175a3c8f705e50d3f10876a65c7969914a204151f8956482d20023a4e7d5354d81270ffc884ef023547c71ef0ff2831b974ecbadcd695104f39a9810c680", 0xcd}, {&(0x7f0000000200)="c87805748340fe2b8aa82e7391546e9e22c2078373050248072b95221fa5e43da7804ab2ef07320c1e3c65fae32f8a7421fa1d9d003f5798973a78", 0x3b}], 0x3}, 0x0) 18:03:52 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x3f000000) 18:03:52 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x84100, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x347001, 0x0) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0), 0x1}], 0x10000000000002bf}, 0x0) [ 843.554256][ T8051] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 843.561998][ T17] usb 2-1: new high-speed USB device number 21 using dummy_hcd 18:03:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) [ 843.635544][ T23] usb 6-1: new high-speed USB device number 89 using dummy_hcd 18:03:53 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) 18:03:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) [ 843.944738][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.956571][ T8051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.983206][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.994649][ T8051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.005061][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.021904][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.037904][ T17] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 844.052346][ T8051] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 844.068594][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 844.082661][ T8051] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.097102][ T17] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 844.106741][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.115841][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.126829][ T23] usb 6-1: config 0 descriptor?? [ 844.132806][ T8051] usb 4-1: config 0 descriptor?? [ 844.150181][ T17] usb 2-1: config 0 descriptor?? [ 844.176785][T25422] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 844.436845][ T17] usb 2-1: string descriptor 0 read error: -71 [ 844.494398][ T8051] usbhid 4-1:0.0: can't add hid device: -71 [ 844.500567][ T8051] usbhid: probe of 4-1:0.0 failed with error -71 [ 844.507142][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 844.513207][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 844.540802][ T8051] usb 4-1: USB disconnect, device number 10 [ 844.550346][ T23] usb 6-1: USB disconnect, device number 89 [ 844.577280][ T17] usbhid 2-1:0.0: can't add hid device: -71 [ 844.585713][ T17] usbhid: probe of 2-1:0.0 failed with error -71 [ 844.648272][ T17] usb 2-1: USB disconnect, device number 21 18:03:54 executing program 1: syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) [ 844.964219][ T23] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 845.024343][ T8051] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 845.244233][ T23] usb 6-1: device descriptor read/64, error 18 [ 845.384941][ T8051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.396105][ T8051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.406859][ T8051] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 845.416213][ T8051] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.426080][ T8051] usb 4-1: config 0 descriptor?? [ 845.634272][ T23] usb 6-1: device descriptor read/64, error 18 [ 845.906762][ T23] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 845.917638][ T8051] wacom 0003:056A:0331.0046: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 846.170402][ T2666] usb 4-1: USB disconnect, device number 11 [ 846.194372][ T23] usb 6-1: device descriptor read/64, error 18 18:03:56 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x6000000) 18:03:56 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x42c, 0x3f3, 0x200, 0x70bd27, 0x25dfdbfe, {0x6, 0x1, 0xd, [0x3, 0x417, 0x1ff, 0x9, 0xff, 0x8, 0x5, 0x81, 0x4d85b567, 0x2, 0xffffffe0, 0xe7, 0x80000000, 0x20, 0x3, 0x8, 0x8, 0xf26, 0x7, 0x8, 0x2, 0x7fffffff, 0x3842, 0x6, 0x1, 0x100, 0x5, 0x4, 0x40, 0x80000000, 0x800, 0x800, 0xc920, 0x80000001, 0x8, 0x6, 0x0, 0x10000, 0x4, 0x10000, 0x7, 0x8, 0x49d, 0x7fffffff, 0x3f, 0x462c, 0x4, 0x2, 0xda0, 0x2, 0x4, 0x550, 0x0, 0x78, 0xfffffffe, 0x9, 0x7ff, 0xfffffffa, 0xd0f, 0x3, 0x80000000, 0xfff, 0xfffffff8, 0x1], [0x5, 0x9, 0x2, 0x3ff, 0x7f, 0x2, 0x1, 0x4, 0x1, 0x400, 0xc16, 0x40, 0x8, 0x7f, 0x7, 0x4, 0x8000, 0xbae8, 0x80, 0x0, 0x20, 0x0, 0x852, 0x9, 0x9, 0x3, 0xee0000, 0x6, 0x2, 0x0, 0xa2a, 0x2, 0x9, 0x4, 0x6, 0x7, 0xff, 0x8, 0x1, 0x1f, 0xf34, 0x7, 0x9, 0x3, 0x1, 0x7, 0x80000000, 0x4, 0x9, 0x0, 0xf20a, 0x100, 0x1000, 0x1ff, 0x8000, 0xfffffffb, 0xff, 0x9, 0x6, 0x3, 0x6, 0x6, 0x7, 0x6], [0x401, 0x0, 0x1, 0x6, 0x6, 0x2, 0x1, 0x6, 0x20, 0x1, 0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x7, 0x8, 0x1, 0xfffffffb, 0xfffffff8, 0x401, 0x80000001, 0xb4b2, 0x101, 0x3, 0x0, 0xffffffff, 0x7, 0x63, 0x80, 0x6, 0x1f, 0x0, 0x4, 0xcc7e, 0x20, 0x8000, 0x6b, 0x0, 0xc2, 0x39, 0x2, 0x6, 0x80000001, 0x2047, 0x401, 0xfffffffd, 0x7fff, 0x93c, 0x0, 0x7fffffff, 0x2, 0xfff, 0x0, 0x8001, 0x4, 0x6, 0x9, 0x5, 0x8, 0xc9], [0xac, 0x40, 0x401, 0xfffffff9, 0x20, 0x6, 0x6117131b, 0x3, 0x7, 0x8, 0x2, 0x2, 0x73dd101c, 0x7, 0x5, 0xfffffff8, 0x80000000, 0x6, 0x60, 0x0, 0x4, 0x3, 0x400, 0x8, 0xfffffffc, 0xc25, 0xffff, 0x1f, 0x0, 0x0, 0x6e58, 0x3, 0x8001, 0x81, 0xfffffc00, 0x80, 0x1, 0x8, 0x401, 0x7fffffff, 0xffffff80, 0x2, 0x6, 0x7ff, 0x2, 0xe00000, 0x80000001, 0x4, 0x1, 0x653c, 0x0, 0x800, 0x8001, 0x3da9, 0x20, 0x1f, 0xcb1, 0x6, 0x3f, 0x8ae, 0x0, 0x1, 0x6, 0x7], 0xb, ['/dev/vcsu#\x00']}, [""]}, 0x42c}, 0x1, 0x0, 0x0, 0x20008882}, 0x20008100) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x9, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4001fe) 18:03:56 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:03:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:03:56 executing program 1: syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 18:03:56 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002205f53d314f83ba01ff"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:03:56 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0xfffffffffffffe29}], 0x1}, 0x0) 18:03:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:03:56 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x300, 0x0) renameat2(r1, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4) 18:03:56 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x6000000) 18:03:56 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') prctl$PR_GET_SECUREBITS(0x1b) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 847.064284][ T2563] usb 1-1: new high-speed USB device number 4 using dummy_hcd 18:03:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:03:56 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x4000000) [ 847.270310][ T23] usb 6-1: device descriptor read/64, error -71 [ 847.404997][ T23] usb usb6-port1: attempt power cycle [ 847.444364][ T2563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.471602][ T2563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.504271][ T2563] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 847.536175][ T2563] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.565571][ T2563] usb 1-1: config 0 descriptor?? [ 847.924399][ T2563] usbhid 1-1:0.0: can't add hid device: -71 [ 847.931950][ T2563] usbhid: probe of 1-1:0.0 failed with error -71 [ 847.953952][ T2563] usb 1-1: USB disconnect, device number 4 [ 848.124395][ T23] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 848.344388][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.355531][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.365768][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 848.376033][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.388228][ T23] usb 6-1: config 0 descriptor?? [ 848.484255][ T2563] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 848.724330][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 848.730340][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 848.747093][ T23] usb 6-1: USB disconnect, device number 92 [ 848.864304][ T2563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.881831][ T2563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.893386][ T2563] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 848.903276][ T2563] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.912887][ T2563] usb 1-1: config 0 descriptor?? [ 849.224252][ T23] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 849.399007][ T2563] wacom 0003:056A:0331.0047: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 849.494290][ T23] usb 6-1: device descriptor read/64, error 18 [ 849.609083][ T2563] usb 1-1: USB disconnect, device number 5 [ 849.884240][ T23] usb 6-1: device descriptor read/64, error 18 18:03:59 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x8) 18:03:59 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010000000009040000010301cfc2ed390f08cf82220500090581030000000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000100)={r5, 0x2, 0x0, 0x7, 0x2}, &(0x7f0000000140)=0x18) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) sched_setscheduler(r8, 0x6, &(0x7f00000000c0)=0x5) prctl$PR_CAPBSET_DROP(0x18, 0x11) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:03:59 executing program 1: syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 18:03:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:03:59 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) rt_sigprocmask(0x1, &(0x7f00000004c0)={[0x7fffffff]}, &(0x7f0000000500), 0x8) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x304, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7156}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "8afc240f58b8a6fc9cba4c2eb3a0825915dee2233d6949a99865493d0aad2f1125"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "0a75d44955c9d082c38e57be7e23fe1343c2aac9d07fb63d6426ff9728da"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "4a0e174651e6bc843f22fc9b2165f99deba75e52e7b8"}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x394}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a8f}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK={0xcc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x37fccd57}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x516}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}]}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x800}, 0x20048044) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:03:59 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x28120000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x4000000) 18:03:59 executing program 3 (fault-call:8 fault-nth:0): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:03:59 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2040}, 0x4004000) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:03:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:03:59 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:03:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x6}, {0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, [], 0x29}, 0x3}, 0x12e2, [0x22a9, 0x0, 0x4000, 0x40, 0x1, 0x80000000, 0x20eb4737, 0x101]}, 0x5c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 850.529699][T25667] FAULT_INJECTION: forcing a failure. [ 850.529699][T25667] name failslab, interval 1, probability 0, space 0, times 0 [ 850.629580][T25667] CPU: 0 PID: 25667 Comm: syz-executor.3 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 850.648791][T25667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 850.658957][T25667] Call Trace: [ 850.662261][T25667] dump_stack+0x18f/0x20d [ 850.666620][T25667] should_fail.cold+0x5/0x14 [ 850.671229][T25667] should_failslab+0x5/0xf [ 850.675708][T25667] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 850.681791][T25667] kmem_cache_alloc+0x46/0x3a0 [ 850.686562][T25667] getname_flags.part.0+0x50/0x4f0 [ 850.692032][T25667] user_path_at_empty+0xa1/0x100 [ 850.697009][T25667] path_setxattr+0x95/0x190 [ 850.701537][T25667] ? setxattr+0x330/0x330 [ 850.706389][T25667] ? ksys_write+0x1a5/0x250 [ 850.710895][T25667] ? lock_is_held_type+0xb0/0xe0 [ 850.715833][T25667] __x64_sys_lsetxattr+0xbd/0x150 [ 850.720870][T25667] ? lockdep_hardirqs_on+0x6a/0xe0 [ 850.725982][T25667] do_syscall_64+0x60/0xe0 [ 850.730400][T25667] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 850.736303][T25667] RIP: 0033:0x45cba9 [ 850.740186][T25667] Code: Bad RIP value. [ 850.744250][T25667] RSP: 002b:00007efef5f5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 850.752662][T25667] RAX: ffffffffffffffda RBX: 00000000004f7240 RCX: 000000000045cba9 [ 850.760633][T25667] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000020000280 [ 850.769301][T25667] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 850.777372][T25667] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000004 [ 850.786038][T25667] R13: 0000000000000755 R14: 00000000004ca526 R15: 00007efef5f5b6d4 [ 850.794532][ T23] usb 6-1: new high-speed USB device number 94 using dummy_hcd 18:04:00 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) 18:04:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) [ 851.154612][ T23] usb 6-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 851.179658][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 851.237473][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 851.274364][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.324214][ T2666] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 851.347733][ T23] usb 6-1: config 0 descriptor?? [ 851.604284][ T2666] usb 2-1: device descriptor read/64, error 18 [ 851.644460][ T23] usb 6-1: string descriptor 0 read error: -71 [ 851.658363][ T23] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 851.714531][ T23] usb 6-1: USB disconnect, device number 94 [ 852.034294][ T2666] usb 2-1: device descriptor read/64, error 18 [ 852.194223][ T23] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 852.314207][ T2666] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 852.554445][ T23] usb 6-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 852.564915][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 852.578361][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 852.588774][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.594312][ T2666] usb 2-1: device descriptor read/64, error 18 [ 852.598595][ T23] usb 6-1: config 0 descriptor?? [ 852.924505][ T23] usb 6-1: string descriptor 0 read error: -71 [ 852.934718][ T23] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 852.944720][ T23] usb 6-1: USB disconnect, device number 95 [ 853.014294][ T2666] usb 2-1: device descriptor read/64, error 18 [ 853.144515][ T2666] usb usb2-port1: attempt power cycle [ 853.654327][ T23] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 853.864441][ T2666] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 853.974604][ T2666] usb 2-1: Invalid ep0 maxpacket: 0 [ 854.014525][ T23] usb 6-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 854.025105][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 854.040278][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 854.050504][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.061399][ T23] usb 6-1: config 0 descriptor?? 18:04:03 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r1, &(0x7f0000009000/0x1000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000a570ef77d9885600000000000000000e00000208000240000000000c00044000000000000000010900010073797a31000000000c00044000000000000000040c00040000000000000000000000007f4d6511d3505dbd6665792d028be4b69f0db48bcb84fcc9c12ccc458b9c38eb6c5314e281aa672e0d2b2a6743de64fcbce474b5389d6a47928c97bc5c5cbe8f3883c582000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20014005}, 0x4000010) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x3) 18:04:03 executing program 0 (fault-call:0 fault-nth:0): syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:03 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:04:03 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) 18:04:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x4, &(0x7f0000000480)=[{&(0x7f00000000c0)="a0f598b6a17a81da40696df497f73308f193a087c7ea1ffa51eaa3c41043c159ce9aca5a7d6a150923da31fdb3cfcf27100909ba2419e012289a795e6cae49edc88852b1c6d1940ce40fba960e30652172246bf4a1d7729eeee86161b23e804a9e30421d3bf73045cad9367ffff99520a89ac9d6340bc94202ba3971", 0x7c, 0x5}, {&(0x7f0000000140)="f03314de66f685029414e1c0cc95cec5b94e0a9410ba2d96e44cd2d622a337ddcc94d94b1767d91f3a161927dc99745c79f84556ed4f84230273a16b77952f92b8bac57dd9edfde86ff3079d056ae33f", 0x50, 0x3f}, {&(0x7f0000000300)="9bb66b06fc5c4c0705c9b97dd7f8ad3be98b3d9570261bc5c4d038d2c30baf87e690ef31e72c7a84cc1433ae26538c2633adc78d4adc83fa11034def833fe79c5732a831ada49e97d2f73054feceff17f5ddc0f67d8b87e114c92cd97993ceb911af1fd5b3dc031f6139f892211c74e860a431e94aa9135ef3739551ba6b2dab9f7857da1ca5f7d34910803d66faaf83af2052908ef6a438e9e3789032dc91acdf0ae887228f6cc20aba203fb4476c5065275cb72ddc775591f082", 0xbb, 0x20}, {&(0x7f00000003c0)="456349bffb2b80a2428afb4ad82effc000a72d45d76a9c88efd8f70ff972e216be75370ea64aafde6f14bc8aa9ee7e90d97f398741337e3b2411be17c8790725b665f1e192acb76a8b2fab86291306794a44d72a76a14a5815e600fa3c4682e94c47d958f9e99c92ffe9fd9fa91ffc434415fbbf781a1a8bf8cd5929f0027f24c6b3b25304708ee696fb2c3974fecdd864ce4f7270587177b1aa55c531fdbf6bd9e1484439cd09", 0xa7, 0x80000000}], 0xe3480, &(0x7f0000000500)={[{@sbsector={'sbsector', 0x3d, 0x633a}}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@map_acorn='map=acorn'}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, '&.\''}}, {@obj_type={'obj_type', 0x3d, '/'}}]}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 854.244286][ T23] usb 6-1: string descriptor 0 read error: -71 [ 854.270404][ T23] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 854.286291][T25740] FAULT_INJECTION: forcing a failure. [ 854.286291][T25740] name failslab, interval 1, probability 0, space 0, times 0 [ 854.355254][ T23] usb 6-1: USB disconnect, device number 96 [ 854.370414][T25740] CPU: 0 PID: 25740 Comm: syz-executor.0 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 854.380333][T25740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 854.390406][T25740] Call Trace: [ 854.393724][T25740] dump_stack+0x18f/0x20d [ 854.398065][T25740] should_fail.cold+0x5/0x14 [ 854.402674][T25740] ? __do_sys_memfd_create+0xf6/0x440 [ 854.408069][T25740] should_failslab+0x5/0xf [ 854.412522][T25740] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 854.418608][T25740] __kmalloc+0x6f/0x320 [ 854.422780][T25740] ? strnlen_user+0x223/0x2f0 [ 854.427509][T25740] __do_sys_memfd_create+0xf6/0x440 [ 854.432717][T25740] ? ksys_write+0x1a5/0x250 [ 854.437237][T25740] ? memfd_file_seals_ptr+0x150/0x150 [ 854.442622][T25740] ? lock_is_held_type+0xb0/0xe0 [ 854.447572][T25740] ? do_syscall_64+0x1c/0xe0 [ 854.452167][T25740] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 854.458237][T25740] do_syscall_64+0x60/0xe0 [ 854.462671][T25740] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 854.468574][T25740] RIP: 0033:0x45cba9 [ 854.472468][T25740] Code: Bad RIP value. [ 854.476563][T25740] RSP: 002b:00007f4ea4ebfa68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 854.485152][T25740] RAX: ffffffffffffffda RBX: 000000000050b400 RCX: 000000000045cba9 [ 854.493162][T25740] RDX: 0000000020000018 RSI: 0000000000000000 RDI: 00000000004c1d11 18:04:03 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$sock(r1, &(0x7f0000000280)={&(0x7f0000000100)=@nfc_llcp={0x27, 0x1, 0x2, 0x3, 0x40, 0x81, "81da1335caf646630c06d243f62fa8e16069208707ab59474ec424711aad5b154b72fb322b0b2cfc98ff375085634d9660d25ebcd97cf3e2e9515de1eb94d0", 0x22}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="7e467ba63e8427e5319f3185ea2b1161fba3761b11f6922c028dd7d59067d00f154541f248719ae430bc46057fa361de449c89a1a450565c6e005075b69100c36bb2f0e9d7478397e050c72e59c361f605191d0cdbe942ab032eba0e31375745f12de192f9528fa92c16fa7004ec8b2cfc627ae82536734f712f026541fb183ee8ea38ee2b2a2553e29377ee77150c9dc971c6f53452c76fe8c591c68a023cc4e5a1d778d770735a35e07c8c50efadc422934a15da363be19731fde75c5f", 0xbe}], 0x1, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0xd5e2}}, @mark={{0x14}}], 0x30}, 0x5004) 18:04:03 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xffffffffffffffb5) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7f, 0x8802, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x25b}, 0x2590, 0x3, 0x7, 0x7, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) fstat(r5, &(0x7f0000000000)) r6 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRESHEX=r2, @ANYRES32, @ANYRESDEC=r4, @ANYRES16=r5, @ANYRES16=r6, @ANYRES16, @ANYRESHEX, @ANYRESHEX], 0x24, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 854.501415][T25740] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 854.509399][T25740] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000003 [ 854.517468][T25740] R13: 0000000000000c5c R14: 00000000004cea13 R15: 00007f4ea4ec06d4 18:04:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:04 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:04:04 executing program 4: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x1, {0x20, 0x4, 0x3}}, 0x14) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) pidfd_send_signal(r0, 0x1d, &(0x7f0000000100)={0x1, 0x8, 0x7fffffff}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000180)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 854.654173][ T2666] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 854.765517][ T2666] usb 2-1: Invalid ep0 maxpacket: 0 [ 854.772735][ T2666] usb usb2-port1: unable to enumerate USB device 18:04:04 executing program 0 (fault-call:0 fault-nth:1): syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:04 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) syz_open_dev$sndpcmp(&(0x7f00000004c0)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffc, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x3, &(0x7f0000000300)=[{&(0x7f00000003c0)="7c7644887e522e79aa747500c606ed4725fd642b3d36eaef8a1960675cf2069c912638a017774430bd9bc99f0b61579c3a6980699fbe3e82c5e2178cd50d037366cb0926337946d54568bd711006583d954964c0df9a5570e84963e25bb754caa4e3d21916f31bbd63e65ceb9b49a5ad7e936363f12f8efdd900d627ebb6d2b996447c8bcfb748e885512cb93487a78e5cdcc3f03f88ed1f8e849686d631487e0ca34f4d9c682083d94b8d837f2163bb75546a16ec454956de887ba5455b7abc5f39940603e93db38791", 0xca, 0x8}, {&(0x7f00000001c0)="c1c6d8326e8b040a34db85f9b22669ca6e15db15ffc0a6524876d11e4855e934bb2e47fcf56dff756d3470087dc2827e6666e32eb3ac69ff97e709d8ed5d78edd90c7109c42742a9cee04586da3d24a480", 0x51, 0xfff}, {&(0x7f0000000080)="f61feb48213f4d19599fec2e1aa768058872fc7fa5ce0f387a40", 0x1a, 0x641e}], 0x20, &(0x7f0000000240)={[{@shortname_winnt='shortname=winnt'}, {@numtail='nonumtail=0'}], [{@appraise_type='appraise_type=imasig'}]}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x1) [ 854.814612][ T23] usb 6-1: new high-speed USB device number 97 using dummy_hcd 18:04:04 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000000)) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000100)={0x5fab, {{0xa, 0x4e24, 0x7, @private2, 0x9367}}, {{0xa, 0x4e22, 0x9, @remote, 0xffff}}}, 0x108) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x8000, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x4c, 0x1402, 0x8, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x4c}}, 0x40802) r5 = dup2(r1, r0) connect$x25(r5, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) 18:04:04 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) [ 854.999147][T25785] FAULT_INJECTION: forcing a failure. [ 854.999147][T25785] name failslab, interval 1, probability 0, space 0, times 0 [ 855.061696][T25785] CPU: 1 PID: 25785 Comm: syz-executor.0 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 855.071620][T25785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 855.082204][T25785] Call Trace: [ 855.085520][T25785] dump_stack+0x18f/0x20d [ 855.089860][T25785] should_fail.cold+0x5/0x14 [ 855.094459][T25785] should_failslab+0x5/0xf [ 855.098883][T25785] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 855.104962][T25785] ? shmem_destroy_inode+0x70/0x70 [ 855.110084][T25785] kmem_cache_alloc+0x46/0x3a0 [ 855.114853][T25785] ? __alloc_fd+0x28d/0x600 [ 855.119387][T25785] ? shmem_destroy_inode+0x70/0x70 [ 855.124547][T25785] shmem_alloc_inode+0x18/0x40 [ 855.129319][T25785] ? shmem_destroy_inode+0x70/0x70 [ 855.134439][T25785] alloc_inode+0x61/0x230 [ 855.138802][T25785] new_inode+0x27/0x2f0 [ 855.142979][T25785] shmem_get_inode+0x96/0x930 [ 855.147675][T25785] __shmem_file_setup+0xb8/0x310 [ 855.152711][T25785] ? _copy_from_user+0x138/0x190 [ 855.157671][T25785] __do_sys_memfd_create+0x269/0x440 [ 855.162973][T25785] ? memfd_file_seals_ptr+0x150/0x150 [ 855.168354][T25785] ? lock_is_held_type+0xb0/0xe0 [ 855.173307][T25785] ? do_syscall_64+0x1c/0xe0 [ 855.177913][T25785] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 855.183906][T25785] do_syscall_64+0x60/0xe0 [ 855.188368][T25785] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 855.194962][T25785] RIP: 0033:0x45cba9 [ 855.198853][T25785] Code: Bad RIP value. [ 855.202925][T25785] RSP: 002b:00007f4ea4ebfa68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 18:04:04 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x4, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x1060, 0x0, 0x5, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [{{0x254, 0x1, {{0x0, 0x1ff}, 0x7, 0xff, 0xcf3c, 0xffff, 0x17, 'syz1\x00', "381f734acbdc53c43badba44008a2048be85d90a68cdf677c18eb3476faabdd5", "384d446009b28d6e5299fd68927fd1222e71421da5476e3871f877d47ce18eca", [{0x2, 0x40, {0x0, 0x101}}, {0x70, 0x7, {0x2, 0x12}}, {0x4, 0x200, {0x1, 0x5}}, {0x101, 0x3db2, {0x1, 0x6}}, {0x6, 0x1, {0x3, 0x9}}, {0x78b, 0x9, {0x1, 0xffff}}, {0x9, 0x3, {0x0, 0x4}}, {0x400, 0xa9, {0x3, 0xae9}}, {0x7, 0x8, {0x0, 0xd5}}, {0x415, 0x5, {0x3, 0x2}}, {0x0, 0x4, {0x0, 0x43a}}, {0x100, 0x7, {0x1, 0x6}}, {0x1000, 0x6, {0x2, 0xad73f477}}, {0x7, 0x5fa, {0x1, 0x8}}, {0x4, 0x1, {0x3, 0x7ff}}, {0x7, 0xffff, {0x3, 0x5eb}}, {0xe5f, 0x2, {0x1, 0x7fffffff}}, {0x0, 0x8, {0x3}}, {0xfff7, 0x0, {0x2}}, {0xfffa, 0x7, {0x6, 0x2}}, {0x8, 0x8bad, {0x3, 0x3e}}, {0x8000, 0x4, {0x3, 0x1fe00000}}, {0xb4e8, 0x100, {0x3, 0xeb}}, {0x7, 0x0, {0x1, 0x1104123d}}, {0x6d34, 0x80, {0x2, 0xfffffffd}}, {0x8e80, 0xfffa, {0x2, 0x1000}}, {0x7, 0x4, {0x2, 0x8}}, {0x2d, 0x3, {0x0, 0xfffffffb}}, {0x80, 0x4, {0x1, 0x4f4}}, {0x1, 0x4, {0x0, 0x4}}, {0xf4bb, 0x1, {0x3, 0x8001}}, {0x6, 0x4, {0x2, 0x9}}, {0x7, 0x7, {0x1, 0x3}}, {0xfff, 0x1, {0x2, 0x1}}, {0x800, 0x8, {0x2, 0x8}}, {0x4, 0xe5, {0x0, 0xfe4}}, {0xffff, 0x6, {0x1, 0x6}}, {0x5, 0x4, {0x1}}, {0x1ff, 0x2, {0x3, 0x80}}, {0x0, 0xff, {0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0xea, 0xcf, 0x1, 0x8, 0x6, 'syz1\x00', "c1d5af35c6da31e5bcc3fbc25d18bb39bf0a863b1d457de4740161e83acd8e09", "551fcf95469c8e7c4eacb30eb2db459de7bf3ab26e7f5c4fbfaf214059fa6091", [{0x9a, 0x283, {0x2, 0x10000}}, {0x0, 0xaf, {0x1, 0x401}}, {0x0, 0x7a00, {0x0, 0x8}}, {0x8, 0x5, {0x3, 0x9}}, {0x56, 0x8, {0x2, 0x4}}, {0xa179, 0x93d7, {0x0, 0x80}}, {0x5, 0x2, {0x3, 0x2dc}}, {0x7ff, 0x6, {0x1, 0x800}}, {0x0, 0x3, {0x0, 0x1}}, {0x60, 0x2, {0x2, 0x7ff}}, {0xf6, 0x5, {0x0, 0x7}}, {0xfffd, 0x3a4, {0x3, 0x1000}}, {0x6a, 0x4, {0x0, 0x3}}, {0x1000, 0x800, {0x2, 0x1}}, {0x9, 0x6, {0x3, 0x1}}, {0x1, 0x1f, {0x1, 0x1}}, {0x1f, 0x7, {0x2, 0x7f}}, {0x0, 0xb00, {0x2, 0x2}}, {0x5, 0x1f, {0x0, 0x6}}, {0x9, 0x6, {0x3, 0x401}}, {0x6c6a, 0x53, {0x3}}, {0x2, 0x6, {0x0, 0x100}}, {0x5, 0x200, {0x4, 0x8}}, {0x0, 0x4, {0x2, 0x80000000}}, {0x0, 0x6, {0x2, 0x100}}, {0x5, 0x2, {0x2, 0x7}}, {0x0, 0x6, {0x0, 0x1}}, {0xf801, 0x1000, {0x0, 0x8}}, {0x0, 0xe86, {0x1}}, {0x3, 0x7c8, {0x0, 0x5f}}, {0xffff, 0xf4}, {0x4, 0x5, {0x0, 0x8}}, {0x4, 0x9, {0x2, 0x10000}}, {0x862, 0xfffd, {0x2, 0xca22}}, {0x1, 0x8000, {0x0, 0x9}}, {0xe7b2, 0x7ff, {0x1, 0x7fff}}, {0x9c3, 0x1, {0x2, 0x9}}, {0x8, 0x3, {0x1, 0x1}}, {0x8, 0x9, {0x3, 0x3}}, {0x22, 0x40, {0x2, 0x1ff}}]}}}, {{0x254, 0x1, {{}, 0x7, 0x8c, 0x100, 0x4, 0x26, 'syz0\x00', "e8f703cd04a471981c8dd6eb420246e46b373f337b2b30a80c0dc3b32ebf8717", "515a5c8208acce15303943379913baf0cf9aa99b2d76e02330f6a886670bcdd3", [{0x7, 0x5, {0x2, 0x9ad8}}, {0x200, 0x401, {0x2, 0x3}}, {0x0, 0x9, {0x3, 0x1}}, {0x5, 0x4, {0x0, 0x6}}, {0x3, 0x1ff, {0x2, 0x3}}, {0xdf1, 0x7ff, {0x0, 0x5}}, {0x8, 0x58, {0x3, 0x1}}, {0x50, 0x8, {0x1, 0x10001}}, {0xffff, 0x2, {0x3, 0x8001}}, {0x0, 0x3, {0x2, 0xfffffffd}}, {0x7, 0x6, {0x0, 0x6}}, {0x200, 0x800, {0x3, 0x4000000}}, {0x8, 0x6, {0x3, 0x3}}, {0x0, 0x0, {0x3, 0x81}}, {0x1000, 0x0, {0x3, 0x3}}, {0x8001, 0x20, {0x2, 0xa00}}, {0x5b, 0x12, {0x2, 0x80}}, {0x93, 0xfffa, {0x0, 0x713b}}, {0x9, 0x9, {0x1, 0x47d48249}}, {0xa5c4, 0x5, {0x3, 0x3}}, {0x5, 0x3}, {0x383a, 0x8, {0x2, 0x8}}, {0x1, 0x1, {0x2, 0x6}}, {0x1f, 0x6, {0x0, 0x3}}, {0x0, 0x8000, {0x3, 0x8}}, {0x899, 0xd9d, {0x0, 0x9}}, {0x8, 0x20}, {0x2, 0xffff, {0x2, 0x5}}, {0x8, 0xba3, {0x1, 0x7fffffff}}, {0x4, 0x6, {0x2}}, {0x2, 0x8000, {0x1, 0x7}}, {0x6, 0x73b, {0x0, 0x200}}, {0x3, 0x400, {0x2, 0xf5ac}}, {0xfff, 0x9, {0x3, 0x101}}, {0x3, 0x8, {0x0, 0x20}}, {0xfff, 0x5c99, {0x1, 0x7}}, {0x9, 0x7ff, {0x1, 0x5}}, {0x7d4, 0x1ff, {0x1, 0x1f}}, {0x5, 0x0, {0x3, 0x3f}}, {0x3f, 0x6b6c, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x6, 0xd9, 0x3, 0x4, 0x1b, 'syz0\x00', "49f6fcb612ca1e27742c282d8d1feb3f30eabdacd7824344bdf117cd89093e03", "e037d13e02a3b50c74466fade44e272f0985682e2370945e04bc3bea11167ec5", [{0x3, 0x4, {0x1, 0x7}}, {0xfff, 0x7f, {0x2, 0xfffffffe}}, {0x2, 0x2, {0x2, 0x6}}, {0x5, 0x2424, {0x1, 0x80}}, {0x2, 0x4ae}, {0x0, 0x3ff, {0x3, 0x2}}, {0x7f, 0x40, {0x1, 0x7}}, {0x2, 0x0, {0x2, 0x1f}}, {0x9, 0x2, {0x0, 0x24000000}}, {0xfbff, 0x4, {0x1, 0x3d2a}}, {0x1, 0x3c5b, {0x0, 0x8001}}, {0x1, 0x4, {0x3, 0x2}}, {0x4, 0x1ff, {0x0, 0x2}}, {0xba5, 0x0, {0x2, 0x2}}, {0x9, 0x0, {0x3, 0x462}}, {0x8, 0x800, {0x1, 0x80000001}}, {0x8, 0x7ff, {0x1, 0x9}}, {0x4, 0x9, {0x23375becbf322c25, 0x8000}}, {0x40, 0xade8, {0x1, 0x3}}, {0x1, 0xb3, {0x1, 0x10c6}}, {0x7, 0xc1, {0x1, 0x7fff}}, {0x1ff, 0x993f, {0x3}}, {0xaf, 0x6, {0x1, 0x20}}, {0x8, 0xfffd, {0x2, 0x1}}, {0x0, 0x2, {0x2, 0x8}}, {0x8, 0x5, {0x1, 0x5}}, {0x400, 0x9, {0x2, 0x3}}, {0x2, 0x2, {0x3, 0x5a2b7915}}, {0x8, 0x7, {0x1, 0x3}}, {0x0, 0x7f, {0x0, 0xf8e}}, {0x401, 0x7, {0x1, 0x6}}, {0x4, 0x5f1, {0x1, 0x7}}, {0x7cd, 0x0, {0x0, 0x1}}, {0x6, 0x5, {0x2, 0x100}}, {0x7, 0x0, {0x3, 0xffffffff}}, {0x1f, 0x8000, {0x1, 0x7ff}}, {0x36, 0x6, {0x3, 0xfffffffa}}, {0x5, 0x6, {0x2, 0x6}}, {0xff5d, 0xa1, {0x0, 0x10000}}, {0x9, 0xfff, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x6d, 0x80, 0x3, 0x4, 0x13, 'syz1\x00', "1a7d7dac3ef01e5848231e95c10882e583a4d26fe9289841ac335c2262c260d5", "129dca486a50a39da926d55adcc1f08248496e607d8fc15a3e20e148af5d0856", [{0x7, 0x0, {0x2, 0x1}}, {0x1, 0x10af, {0x2}}, {0x0, 0x2, {0x0, 0x1}}, {0x81, 0x40, {0x2, 0x4}}, {0xfffc, 0xfff7, {0x0, 0x5}}, {0x8, 0x7, {0x1, 0x5}}, {0x9, 0x4, {0x3, 0x5}}, {0x127, 0x3, {0x3, 0x3f}}, {0x4923, 0x9, {0x3, 0xe5ca}}, {0x0, 0x6f40, {0x0, 0x3}}, {0x1, 0x5, {0x1, 0x1ff}}, {0x1b11, 0x6, {0x0, 0x100}}, {0x0, 0x9, {0x1, 0x80000000}}, {0x8000, 0x0, {0x0, 0x8c1f}}, {0xc181, 0x7, {0x0, 0x80000001}}, {0x3e07, 0x5, {0x3, 0x4}}, {0x9, 0x638, {0x0, 0x80}}, {0x7, 0x7, {0x1, 0x9}}, {0x4, 0x2, {0x3, 0x714700}}, {0x3, 0x0, {0x2, 0x3f}}, {0x200, 0x5, {0x2, 0x3}}, {0xdc9b, 0x101, {0x1, 0x5}}, {0xfc01, 0x800, {0x2}}, {0x8, 0x6, {0x0, 0x8}}, {0x200, 0x400, {0x3, 0x29}}, {0x7, 0x157, {0x3, 0x7}}, {0x80, 0xfbc2, {0x2, 0x1}}, {0x5, 0x40d, {0x3, 0x9}}, {0x8, 0x72, {0x3, 0x20}}, {0x4, 0x1f, {0x3, 0x9}}, {0x4, 0x7, {0x3, 0xa7}}, {0x6533, 0xfff, {0x2, 0x5}}, {0x1000, 0x6b7, {0x0, 0xfffffffa}}, {0x8, 0x5287, {0x0, 0x1}}, {0x6, 0x0, {0x2, 0x80}}, {0x1129, 0x0, {0x1, 0x1}}, {0x6, 0x7, {0x0, 0x7}}, {0x4, 0x1, {0x2, 0x8}}, {0x20, 0x6, {0x0, 0x100}}, {0x3, 0x8, {0x1, 0x1f}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0xf5, 0x20, 0x82, 0x1ff, 0x19, 'syz0\x00', "8f2a36ec5c67a9f7832a83559cf79c87811cfe881697849619d8f4d148d7fedf", "7c8899cc7a4270ab0e46faeedd3cb843be66ce3f7701f0b89b84d08fe3c8ab13", [{0x45a, 0x6, {0x2, 0x8}}, {0x6, 0x9, {0x5158dc1be5c45961, 0x72}}, {0x2, 0x80, {0x1, 0x70}}, {0x8, 0xfffa, {0x0, 0x6}}, {0x9, 0x8, {0x3, 0x10001}}, {0x7, 0xcc11, {0x1, 0x1}}, {0x6, 0x7f, {0x0, 0x8}}, {0x4, 0x9147, {0x3, 0x20}}, {0x385, 0x5, {0x1, 0xdec4}}, {0x20, 0x7, {0x1, 0x40}}, {0x80, 0xe18, {0x1, 0x7}}, {0x80, 0x4, {0x1, 0x9}}, {0x1, 0x3f, {0x0, 0x4}}, {0x3, 0x81, {0x1, 0x80000000}}, {0x5, 0xfff7, {0x3, 0xf99}}, {0xa47b, 0x5, {0x3, 0x6}}, {0x3ff, 0x3f, {0x2, 0x4}}, {0x1, 0x697, {0x2, 0x401}}, {0xffc0, 0x3f, {0x0, 0x2}}, {0x8, 0x5, {0x0, 0x8}}, {0x3, 0x1, {0x0, 0x20}}, {0x6, 0x60c6, {0x3, 0x4}}, {0x8, 0x1ff, {0x3, 0x4}}, {0x7f, 0x5e6, {0x3, 0x7}}, {0x688, 0x20, {0x3, 0x1f}}, {0xff8f, 0x2a6, {0x0, 0x800}}, {0x1, 0x762, {0x1}}, {0x700, 0xec, {0x3, 0x3}}, {0x9, 0x40, {0x3, 0x7fff}}, {0x3, 0x45c, {0x0, 0xfffffff9}}, {0x80, 0x8, {0x2, 0x1}}, {0x5, 0x2, {0x3, 0x2}}, {0x9, 0x8000, {0x2, 0x7}}, {0x0, 0x3ff, {0x6}}, {0x7, 0x8, {0x3, 0x5d6a2897}}, {0xa41, 0x6, {0x1, 0xfffffffe}}, {0x1, 0x5, {0x3, 0x7f}}, {0x7f, 0x3f, {0x3, 0x4}}, {0x40, 0x4, {0x0, 0x401}}, {0x4, 0x8001, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{}, 0x8, 0x1, 0x5036, 0x9a22, 0x10, 'syz1\x00', "979dad489d50de4f819c3cf211551638542f57e653b81dd8b2e6f6f96f32a05c", "a6d05beaa787c5dd8190f2438497f9c5b1691d015ac65294a69e1d739effee4f", [{0x400, 0x1, {0x2, 0x7fff}}, {0x2, 0x4, {0x0, 0x814}}, {0x40, 0x9, {0x0, 0x722}}, {0x3ff, 0x7002, {0x0, 0xfff}}, {0x440, 0x2, {0x1, 0x9}}, {0x9, 0x6, {0x3, 0x1}}, {0x3, 0x1, {0x0, 0x20}}, {0x200, 0x9, {0x1, 0x1}}, {0x4, 0xff, {0x1, 0xfffffff9}}, {0x1, 0x0, {0x1}}, {0x7, 0xfffc, {0x1, 0x8}}, {0x1, 0xf0, {0x3, 0x38429f75}}, {0xfff8, 0x9, {0x2, 0x76}}, {0x2, 0x1ff, {0x7, 0x5349}}, {0x7, 0xfff8, {0x0, 0x8}}, {0x7, 0x7ff, {0x2, 0x7}}, {0x859, 0x75, {0x3, 0xe2d}}, {0x40, 0x1000, {0x0, 0xff7}}, {0x3ff, 0xfff9, {0x1, 0x800}}, {0x5, 0x0, {0x1, 0x8}}, {0x8, 0x9, {0x2, 0x8}}, {0x0, 0xfff, {0x2, 0x6}}, {0x0, 0xe92, {0x2, 0x6}}, {0x3, 0x8000, {0x3, 0x7}}, {0x5, 0x5, {0x1, 0x1}}, {0x101, 0x6, {0x1, 0x8}}, {0x5, 0x101, {0x0, 0x8}}, {0x5, 0xff16, {0x1, 0x1}}, {0xbae, 0x3, {0x0, 0x401}}, {0x7, 0x101, {0x0, 0x88}}, {0x80, 0x40, {0x3}}, {0x0, 0x1e2, {0x2, 0x83}}, {0x8, 0x5, {0x6, 0x7fff}}, {0x0, 0x81, {0x2, 0x200}}, {0x7, 0xead, {0x0, 0x9}}, {0x2, 0x1000, {0x1, 0xd89}}, {0x5, 0x17b, {0x3, 0x6}}, {0xfff, 0x7, {0x1, 0x7fffffff}}, {0x4, 0x1, {0x3, 0x7}}, {0x7, 0x1, {0x2, 0x13}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0xc005}, 0x4040040) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 855.211342][T25785] RAX: ffffffffffffffda RBX: 000000000050b400 RCX: 000000000045cba9 [ 855.219319][T25785] RDX: 0000000020000018 RSI: 0000000000000000 RDI: 00000000004c1d11 [ 855.227317][T25785] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 855.235300][T25785] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000003 [ 855.243280][T25785] R13: 0000000000000c5c R14: 00000000004cea13 R15: 00007f4ea4ec06d4 [ 855.354627][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.413710][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.454225][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 855.463279][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.495747][ T23] usb 6-1: config 0 descriptor?? [ 855.834409][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 855.840485][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 855.865789][ T23] usb 6-1: USB disconnect, device number 97 [ 856.345025][ T23] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 856.704305][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.715664][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.727533][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 856.737403][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.755105][ T23] usb 6-1: config 0 descriptor?? 18:04:06 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) [ 857.238790][ T23] wacom 0003:056A:0331.0048: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 857.506856][ T3077] usb 6-1: USB disconnect, device number 98 [ 857.744241][ T2666] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 858.014213][ T2666] usb 2-1: device descriptor read/64, error 18 [ 858.294328][ T3077] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 858.424273][ T2666] usb 2-1: device descriptor read/64, error 18 [ 858.684364][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.696095][ T2666] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 858.703711][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.715259][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 858.725661][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.736015][ T3077] usb 6-1: config 0 descriptor?? 18:04:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000000)=0x3, &(0x7f0000000080)=0x4) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:04:08 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f00000013c0)={0x0, &(0x7f0000000240)=[&(0x7f0000000000)="70f6a2b0bcf744eb2c46ab19ef65d0e2bbab3a758b950711a0d6dde27cb94c9a939c08bb09bb01fe3baac2d2bef6baa8ebba30f9c85d8ce0884e1da82ab9a06caa148e4ac72b95ac0cb4a6bbba2bff23c485c58a59025f52d31c6b3873339c09209a19b7aae1952c642bfd31c608a41a284d8d29", &(0x7f00000001c0)="fa4c0eee230b0f86de5997627b18f5e2106b600077964d2686594315a96d7d3dfed9d2abadcc9e547ced754ad751d20e777eff136bcf7177fa41f8d8d673dd4c7305d1e75bb4c98b4e785248d2a8801dae52e6317cdda86973", &(0x7f0000000080)="fd82c516a4b58bc1411484e24a971c7ccf34bc6d891dfd80481daff0bdc38c5ae1e79e32af76d70d55177fb3a08319e15e", &(0x7f0000000300)="865f7d627c1cb46f2dd6c793dc193d60e3a96ac971fc07f2a5efbf1fa14094bb3a8ae6ac234b3a2a5da1ecd99e046e7ce198901baa1c22d8165f4085d5dd9a77a2d3a40c808e86a53bb650c10dde2b8f86dc9ab17fbc9152ebd9973f5bcfd58d2f091c05f08a9fecd091c72876946ed2d4b5524a8cb55c8e7b4c", &(0x7f00000003c0)="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"]}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001400)={0xa6, "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"}) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:04:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:08 executing program 0 (fault-call:0 fault-nth:2): syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:08 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x1, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000140)=0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x1}, 0x8) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 858.888029][T25869] FAULT_INJECTION: forcing a failure. [ 858.888029][T25869] name failslab, interval 1, probability 0, space 0, times 0 [ 858.914274][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 858.920833][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 858.974591][ T3077] usb 6-1: USB disconnect, device number 99 [ 858.993170][T25869] CPU: 1 PID: 25869 Comm: syz-executor.0 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 859.003551][T25869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 859.013647][T25869] Call Trace: [ 859.016956][T25869] dump_stack+0x18f/0x20d [ 859.021306][T25869] should_fail.cold+0x5/0x14 [ 859.025916][T25869] should_failslab+0x5/0xf [ 859.030354][T25869] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 859.036444][T25869] kmem_cache_alloc+0x46/0x3a0 [ 859.041222][T25869] ? lockdep_hardirqs_on+0x6a/0xe0 [ 859.046353][T25869] __d_alloc+0x2a/0x920 [ 859.050540][T25869] d_alloc_pseudo+0x19/0x70 [ 859.055058][T25869] alloc_file_pseudo+0xc6/0x250 [ 859.059924][T25869] ? lockdep_init_map_waits+0x26a/0x890 [ 859.065742][T25869] ? alloc_file+0x5a0/0x5a0 [ 859.070274][T25869] ? shmem_get_inode+0x499/0x930 [ 859.075232][T25869] __shmem_file_setup+0x144/0x310 [ 859.080269][T25869] ? _copy_from_user+0x138/0x190 [ 859.085226][T25869] __do_sys_memfd_create+0x269/0x440 [ 859.091318][T25869] ? memfd_file_seals_ptr+0x150/0x150 [ 859.096878][T25869] ? lock_is_held_type+0xb0/0xe0 [ 859.101832][T25869] ? do_syscall_64+0x1c/0xe0 [ 859.106614][T25869] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 859.112632][T25869] do_syscall_64+0x60/0xe0 [ 859.118721][T25869] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 859.124803][T25869] RIP: 0033:0x45cba9 [ 859.128698][T25869] Code: Bad RIP value. [ 859.132767][T25869] RSP: 002b:00007f4ea4ebfa68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 859.141178][T25869] RAX: ffffffffffffffda RBX: 000000000050b400 RCX: 000000000045cba9 [ 859.149156][T25869] RDX: 0000000020000018 RSI: 0000000000000000 RDI: 00000000004c1d11 [ 859.157134][T25869] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 859.165136][T25869] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000003 [ 859.173116][T25869] R13: 0000000000000c5c R14: 00000000004cea13 R15: 00007f4ea4ec06d4 [ 859.184642][ T2666] usb 2-1: device descriptor read/64, error 18 18:04:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:08 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) process_vm_writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/246, 0xf6}, {&(0x7f0000000200)=""/187, 0xbb}], 0x2, &(0x7f0000000540)=[{&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/36, 0x24}, {&(0x7f0000000440)=""/39, 0x27}, {&(0x7f0000000480)=""/157, 0x9d}], 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="003ac10a51b7b9c67c5c11d7250a8418200b691b1fd8fc8f0e4321b4f989ab74ab19b1e932ac1a5cf36e3244caddf5f30b27499bf7dd1c28f1c4", 0x3a}], 0x1}, 0x0) 18:04:08 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000000)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0xc020) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000000)={0x283, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) dup2(r4, r7) 18:04:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) [ 859.504322][ T3077] usb 6-1: new high-speed USB device number 100 using dummy_hcd 18:04:08 executing program 0 (fault-call:0 fault-nth:3): syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 859.574198][ T2666] usb 2-1: device descriptor read/64, error 18 [ 859.694348][ T2666] usb usb2-port1: attempt power cycle [ 859.732444][T25910] FAULT_INJECTION: forcing a failure. [ 859.732444][T25910] name failslab, interval 1, probability 0, space 0, times 0 [ 859.904390][T25910] CPU: 0 PID: 25910 Comm: syz-executor.0 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 859.914313][T25910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 859.924407][T25910] Call Trace: [ 859.927710][T25910] dump_stack+0x18f/0x20d [ 859.932051][T25910] should_fail.cold+0x5/0x14 [ 859.936653][T25910] should_failslab+0x5/0xf [ 859.941113][T25910] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 859.947195][T25910] kmem_cache_alloc+0x46/0x3a0 18:04:09 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffbff) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/52}) r2 = socket$kcm(0x2, 0x5, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e24, @empty}, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f00000001c0)='vlan0\x00', 0x2, 0x3ff, 0x4}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x2000c000) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r2, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 859.951980][T25910] __alloc_file+0x21/0x350 [ 859.956415][T25910] alloc_empty_file+0x6d/0x170 [ 859.961202][T25910] alloc_file+0x5e/0x5a0 [ 859.965470][T25910] alloc_file_pseudo+0x165/0x250 [ 859.970422][T25910] ? alloc_file+0x5a0/0x5a0 [ 859.974946][T25910] ? shmem_get_inode+0x499/0x930 [ 859.979901][T25910] __shmem_file_setup+0x144/0x310 [ 859.984961][T25910] ? _copy_from_user+0x138/0x190 [ 859.989918][T25910] __do_sys_memfd_create+0x269/0x440 [ 859.996101][T25910] ? memfd_file_seals_ptr+0x150/0x150 [ 860.001494][T25910] ? lock_is_held_type+0xb0/0xe0 [ 860.006498][T25910] ? do_syscall_64+0x1c/0xe0 [ 860.011126][T25910] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 860.017127][T25910] do_syscall_64+0x60/0xe0 [ 860.021555][T25910] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 860.027456][T25910] RIP: 0033:0x45cba9 [ 860.031427][T25910] Code: Bad RIP value. [ 860.035525][T25910] RSP: 002b:00007f4ea4ebfa68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 860.043947][T25910] RAX: ffffffffffffffda RBX: 000000000050b400 RCX: 000000000045cba9 [ 860.051926][T25910] RDX: 0000000020000018 RSI: 0000000000000000 RDI: 00000000004c1d11 [ 860.059906][T25910] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 860.067884][T25910] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000003 [ 860.075889][T25910] R13: 0000000000000c5c R14: 00000000004cea13 R15: 00007f4ea4ec06d4 [ 860.086647][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.135823][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.192324][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 860.236050][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.250903][ T3077] usb 6-1: config 0 descriptor?? 18:04:09 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) [ 860.625112][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 860.631225][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 860.646267][ T3077] usb 6-1: USB disconnect, device number 100 [ 860.804242][ T2666] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 861.066038][ T2666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.077372][ T2666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.087612][ T2666] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 861.100900][ T2666] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 861.110954][ T2666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.123541][ T2666] usb 2-1: config 0 descriptor?? [ 861.154286][ T3077] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 861.155701][T25931] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 861.494479][ T2666] usbhid 2-1:0.0: can't add hid device: -71 [ 861.507268][ T2666] usbhid: probe of 2-1:0.0 failed with error -71 [ 861.518503][ T2666] usb 2-1: USB disconnect, device number 28 [ 861.534705][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.554269][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.564057][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 861.577740][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.588982][ T3077] usb 6-1: config 0 descriptor?? [ 862.088585][ T3077] wacom 0003:056A:0331.0049: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 862.293803][ T17] usb 6-1: USB disconnect, device number 101 [ 863.075232][ T3077] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 863.444327][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.455501][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.468279][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 863.478094][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.488765][ T3077] usb 6-1: config 0 descriptor?? 18:04:12 executing program 4: r0 = socket$kcm(0x2, 0x7, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000700)}, 0x0) 18:04:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) fchdir(0xffffffffffffffff) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:12 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:04:12 executing program 0 (fault-call:0 fault-nth:4): syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:12 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) 18:04:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022f33552a664917705000000bad36fd0e18933c9df3457666f"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4203, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x83, 0x8, 0x4}, 0xc) r4 = dup(r2) r5 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r5, &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x0) connect$netlink(r8, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 863.688904][T25991] FAULT_INJECTION: forcing a failure. [ 863.688904][T25991] name failslab, interval 1, probability 0, space 0, times 0 [ 863.706055][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 863.717862][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 863.775041][ T3077] usb 6-1: USB disconnect, device number 102 [ 863.804204][T25991] CPU: 1 PID: 25991 Comm: syz-executor.0 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 863.814218][T25991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.825156][T25991] Call Trace: [ 863.828464][T25991] dump_stack+0x18f/0x20d [ 863.832820][T25991] should_fail.cold+0x5/0x14 [ 863.837431][T25991] should_failslab+0x5/0xf [ 863.841856][T25991] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 863.847957][T25991] kmem_cache_alloc+0x46/0x3a0 [ 863.852743][T25991] ? __alloc_file+0x21/0x350 [ 863.857366][T25991] security_file_alloc+0x34/0x170 [ 863.862438][T25991] __alloc_file+0xd8/0x350 [ 863.866885][T25991] alloc_empty_file+0x6d/0x170 [ 863.871666][T25991] alloc_file+0x5e/0x5a0 [ 863.875924][T25991] alloc_file_pseudo+0x165/0x250 [ 863.881007][T25991] ? alloc_file+0x5a0/0x5a0 [ 863.885539][T25991] ? shmem_get_inode+0x499/0x930 [ 863.890501][T25991] __shmem_file_setup+0x144/0x310 [ 863.895565][T25991] ? _copy_from_user+0x138/0x190 [ 863.900528][T25991] __do_sys_memfd_create+0x269/0x440 [ 863.906201][T25991] ? memfd_file_seals_ptr+0x150/0x150 [ 863.911585][T25991] ? lock_is_held_type+0xb0/0xe0 [ 863.916531][T25991] ? do_syscall_64+0x1c/0xe0 [ 863.921144][T25991] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 863.927144][T25991] do_syscall_64+0x60/0xe0 [ 863.931838][T25991] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 863.937747][T25991] RIP: 0033:0x45cba9 [ 863.941643][T25991] Code: Bad RIP value. [ 863.945705][T25991] RSP: 002b:00007f4ea4ebfa68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 863.954122][T25991] RAX: ffffffffffffffda RBX: 000000000050b400 RCX: 000000000045cba9 [ 863.962152][T25991] RDX: 0000000020000018 RSI: 0000000000000000 RDI: 00000000004c1d11 18:04:13 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) fchdir(0xffffffffffffffff) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) [ 863.970158][T25991] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 863.978144][T25991] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000003 [ 863.986122][T25991] R13: 0000000000000c5c R14: 00000000004cea13 R15: 00007f4ea4ec06d4 18:04:13 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x1f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) setresuid(0x0, r5, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) statx(r6, &(0x7f0000000280)='./file0\x00', 0x6000, 0x7ff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r5, r7) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x0, @multicast, 'veth1_to_bond\x00'}}) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="abeff9d415d9725a15232d64449c53315fc6d61464c2349f4eda0ec4a8f78880d8497c6213abd2b4ba41bf9a043f75c67a68d46ea06edcab41bbdc2f22dea8f3", 0x40}, {&(0x7f0000000100)="8be7126968ae39f865ac994bad4799aafc082acf677f7618b03b", 0x1a}, {&(0x7f0000000140)="f502a48c3dcbaf4fd93ccfd01ca3db5913b01834c681e26d23b72e279fc677e15d9e68e2243291e493d18103403d8961f31c65e83c1e3086e8cf", 0x3a}], 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00') sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='u', 0x1}], 0x1, 0x0, 0xd}, 0x40000) [ 864.154308][ T7430] usb 2-1: new high-speed USB device number 29 using dummy_hcd 18:04:13 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) fchdir(0xffffffffffffffff) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) [ 864.324195][ T3077] usb 6-1: new high-speed USB device number 103 using dummy_hcd 18:04:13 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4) 18:04:13 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) [ 864.524529][ T7430] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 864.556642][ T7430] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 864.568300][ T7430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.583035][ T7430] usb 2-1: config 0 descriptor?? 18:04:13 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:14 executing program 4: r0 = socket$kcm(0x2, 0x7, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x121100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c6530207524403a26230a405ea65edd19"], 0x18) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x61a080, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f00000001c0)=r7, 0x4) recvfrom$inet6(r6, &(0x7f0000000200)=""/198, 0xc6, 0x21, &(0x7f0000000300)={0xa, 0x4e20, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}, 0x1c) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x10) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000100)={0x77, "276e5e90cade92ab1c315794c729c88afc3d416acdbe4ab9241a02c79ad75facc9560d31cc504fadd97bc61bcb74f2b482a88c90010000000000000097a4d216a341fcb251528a2b46ebe8b41c0cdaa13159941b9a82167b1c7910a4cd7d5a60184969688d050420f4e0d1488f2c24e3d40900"}) [ 864.615635][T25993] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 864.635323][ T7430] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 864.704434][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.741989][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.783655][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 864.815883][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:04:14 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 864.847855][ T23] usb 2-1: USB disconnect, device number 29 [ 864.905446][ T3077] usb 6-1: config 0 descriptor?? 18:04:14 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:14 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 865.276270][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 865.282373][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 865.307040][ T3077] usb 6-1: USB disconnect, device number 103 18:04:14 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) [ 865.687372][ T5] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 865.734567][ T3077] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 866.084384][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 866.098114][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 866.107813][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.122850][ T5] usb 2-1: config 0 descriptor?? [ 866.145641][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.158122][T26081] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 866.161511][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.175977][ T5] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 866.187256][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 866.196971][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.216358][ T3077] usb 6-1: config 0 descriptor?? [ 866.378292][ T5] usb 2-1: USB disconnect, device number 30 [ 866.984378][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 866.990465][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 [ 867.023667][ T3077] usb 6-1: USB disconnect, device number 104 [ 867.744239][ T3077] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 868.115049][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.126155][ T3077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.137288][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 868.147072][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.157149][ T3077] usb 6-1: config 0 descriptor?? 18:04:17 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) accept(r4, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000080)=0xfffffffffffffda3) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r5, 0x7f}, &(0x7f0000000040)=0x8) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) tkill(0x0, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:04:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) flistxattr(r1, &(0x7f0000000080)=""/12, 0xc) r2 = socket$kcm(0x2, 0x7, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r2, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:04:17 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:17 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:17 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 18:04:17 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902240001000000002100000001220500090581030000000000787c60059e16dabc279c472ea2d1c7969d5e1bccd6ed02324c"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002233ff40760000000000"], 0x0}, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x5, 0x401}]}, 0xc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 868.464329][ T3077] usbhid 6-1:0.0: can't add hid device: -71 [ 868.471850][ T3077] usbhid: probe of 6-1:0.0 failed with error -71 18:04:17 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 868.536233][ T3077] usb 6-1: USB disconnect, device number 105 18:04:17 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:18 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 868.734245][ T7430] usb 2-1: new high-speed USB device number 31 using dummy_hcd 18:04:18 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000100)="7a39fdf856fd7096018010253f0817", 0xf}], 0x1}, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000080)=0xffffffff) 18:04:18 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:18 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 868.944321][ T3077] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 869.124731][ T7430] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 869.169613][ T7430] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 869.195159][ T7430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.221256][ T7430] usb 2-1: config 0 descriptor?? [ 869.285565][ T7430] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 869.324297][ T3077] usb 6-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 869.350776][ T3077] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 18:04:18 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x18, 0x800, 0x2, 0x8, 0x1, "ff1689ed1c22467cfece980d8124dd1da35372"}) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = getpgrp(r3) tkill(r4, 0x20001e) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:04:18 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) [ 869.391505][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 869.401542][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.418565][ T3077] usb 6-1: config 0 descriptor?? 18:04:18 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:18 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000100)={[0x1, 0x2, 0x9002, 0x5000], 0x8, 0x89, 0x8}) [ 869.487982][ T7430] usb 2-1: USB disconnect, device number 31 [ 869.673357][ T3077] usb 6-1: USB disconnect, device number 106 18:04:19 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 870.245549][ T3077] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 870.344542][ T7430] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 870.614386][ T3077] usb 6-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 870.629488][ T3077] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 870.638672][ T3077] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 870.647889][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.660722][ T3077] usb 6-1: config 0 descriptor?? [ 870.744650][ T7430] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 870.757564][ T7430] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 870.768705][ T7430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.782187][ T7430] usb 2-1: config 0 descriptor?? [ 870.830379][ T7430] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 871.031260][ T3077] usb 2-1: USB disconnect, device number 32 18:04:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x20c0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f00000000c0)) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x70, 0x7, 0x3, 0x5, 0x72, 0x0, 0x20, 0xd0010, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x4000, 0xffff, 0x4, 0x9, 0x10000, 0x1f, 0x1ff}, r1, 0x3, r1, 0x2) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000000)={0x100, 0xd2, 0x4, 0x80, 0x5, "04e3cbf82daa10d45da59bfc00814529d92e08", 0x73, 0x7}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:04:21 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0xf0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:21 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000200)={0xd5a, 0x4, 0x2, 0x2, 0x101}) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="17", 0x1}, {&(0x7f0000000100)="5c7d8feb4dba02ee7f97674d36797cd7c023dc05bdbfcf3966f26802145766bb401a2b234812fcd95b5c44694a6a226151735084ce1ef1028686db0a9ab50fb1b67455fd2e258e114a07ce1981cf61ae7254831824b2dfb079b7a6254a5d05cddc3988d303bfa05b246bbd166af7fc73922a3cd90603ab670abebcf808ffc2c4ef3b6b9a8f4f667336369ce48ae925ea080530ae9725785e3f3dddf6cc95352e09fc1562871d609a3158c0e99d59a45a11419a11972ee0308edf0b594bebe448e756a359effa6e7954e6ad35e1a8bc9d053ad6c7e612cbb36677d1df6296971a6ce65cdc7eedd828f83bd70d15", 0xed}], 0x2}, 0x0) 18:04:21 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:21 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000300)={{0x20, 0xd7}, {0x5, 0x7}, 0x6, 0x2, 0x4}) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200cc080}, 0x20000010) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x400, 0x0) sendto$x25(r3, &(0x7f00000003c0)="8a991e1a0654fa4840478bf2c5bd1f7e344c5ecd5c6721f2a5258739fef87a14", 0x20, 0x8000, &(0x7f0000000400)={0x9, @remote={[], 0x0}}, 0x12) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000440)={0x80000001}) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x22) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f00000004c0)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000480)={0x2}) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) 18:04:21 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 872.620634][ T23] usb 6-1: USB disconnect, device number 107 18:04:22 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:04:22 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x300, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:22 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x79212d, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000108000000000000000000004800", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=r4, @ANYBLOB="1400030067656e65766530000000000000000000"], 0x3c}, 0x1, 0x81000000}, 0x0) connect$can_j1939(r1, &(0x7f0000000040)={0x1d, r4, 0x3, {0x0, 0xf1, 0x3}, 0x2}, 0x18) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r5) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:04:22 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) [ 872.964592][ T17] usb 2-1: new high-speed USB device number 33 using dummy_hcd 18:04:22 executing program 4: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:04:22 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x500, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 873.099182][T26298] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 873.164290][ T23] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 873.354570][ T17] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 873.391009][ T17] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 873.430008][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.458167][ T17] usb 2-1: config 0 descriptor?? [ 873.505621][ T17] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 873.586572][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.618469][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.639126][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 873.651609][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.677838][ T23] usb 6-1: config 0 descriptor?? [ 873.724500][ T17] usb 2-1: USB disconnect, device number 33 [ 873.752860][T26318] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 874.024736][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 874.031098][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 874.043199][ T23] usb 6-1: USB disconnect, device number 108 [ 874.504398][ T23] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 874.774240][ T23] usb 6-1: device descriptor read/64, error 18 [ 875.164240][ T23] usb 6-1: device descriptor read/64, error 18 [ 875.434311][ T23] usb 6-1: new high-speed USB device number 110 using dummy_hcd 18:04:25 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000100)={0xf, 0x0, 0x101, 0x3, 'syz0\x00', 0xffffff04}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000140)={0x99, 0x4, 0x3}) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:04:25 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x600, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:25 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x2008b000b84, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x13) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1f, @null, @bpq0='bpq0\x00', 0x2, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x1) chdir(&(0x7f0000000000)='./file0\x00') 18:04:25 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x240000, 0x0) read$char_usb(r4, &(0x7f0000000300)=""/4096, 0x1000) 18:04:25 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) [ 875.704240][ T23] usb 6-1: device descriptor read/64, error 18 18:04:25 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x700, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 875.779502][T26343] QAT: Invalid ioctl [ 875.920315][T26358] QAT: Invalid ioctl 18:04:25 executing program 4: pipe2$9p(&(0x7f0000000080), 0x80800) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 18:04:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:25 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x3f00, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 876.064316][ T2563] usb 2-1: new high-speed USB device number 34 using dummy_hcd 18:04:25 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0xf000, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:25 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) [ 876.265186][ T23] usb 6-1: device descriptor read/64, error -71 [ 876.384409][ T23] usb usb6-port1: attempt power cycle [ 876.434677][ T2563] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 876.477694][ T2563] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 876.514030][ T2563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.540440][ T2563] usb 2-1: config 0 descriptor?? [ 876.615512][ T2563] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 876.818017][ T2666] usb 2-1: USB disconnect, device number 34 [ 877.094259][ T23] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 877.304408][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.315450][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.334215][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 877.343357][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.359913][ T23] usb 6-1: config 0 descriptor?? [ 877.704364][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 877.710395][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 877.719074][ T23] usb 6-1: USB disconnect, device number 111 [ 878.174275][ T23] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 878.535107][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.546094][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.558214][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 878.567803][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.578003][ T23] usb 6-1: config 0 descriptor?? [ 879.062364][ T23] wacom 0003:056A:0331.004A: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 879.269540][ T7430] usb 6-1: USB disconnect, device number 112 [ 880.044255][ T2666] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 880.424340][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.435266][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.448281][ T2666] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 880.457866][ T2666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.467801][ T2666] usb 6-1: config 0 descriptor?? 18:04:29 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:29 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) 18:04:29 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() recvmsg$can_bcm(r1, &(0x7f0000000300)={&(0x7f00000001c0)=@generic, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f00000004c0)=""/146, 0x92}, {&(0x7f0000000080)=""/41, 0x29}], 0x3}, 0x1a103) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) mmap$fb(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000006, 0x50, r3, 0xb2000) prctl$PR_SET_PTRACER(0x59616d61, r2) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f0000000040)) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:04:29 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x80000, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 880.664456][ T2666] usbhid 6-1:0.0: can't add hid device: -71 [ 880.670924][ T2666] usbhid: probe of 6-1:0.0 failed with error -71 [ 880.688379][T26451] FAT-fs (loop2): bogus number of reserved sectors [ 880.704521][ T2666] usb 6-1: USB disconnect, device number 113 [ 880.708903][T26451] FAT-fs (loop2): Can't find a valid FAT filesystem 18:04:30 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0xf0ffff, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 880.924553][ T8051] usb 2-1: new high-speed USB device number 35 using dummy_hcd 18:04:30 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:30 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 881.154239][ T2666] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 881.209430][T26476] FAT-fs (loop2): bogus number of reserved sectors [ 881.244390][T26476] FAT-fs (loop2): Can't find a valid FAT filesystem 18:04:30 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 881.284460][ T8051] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 18:04:30 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 881.365185][ T8051] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 18:04:30 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) [ 881.422397][ T8051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.455544][ T8051] usb 2-1: config 0 descriptor?? [ 881.515478][ T8051] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 881.544981][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 18:04:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) [ 881.569010][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.638553][ T2666] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 881.672486][ T2666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.703688][ T2666] usb 6-1: config 0 descriptor?? [ 881.718824][ T8051] usb 2-1: USB disconnect, device number 35 [ 882.044473][ T2666] usbhid 6-1:0.0: can't add hid device: -71 [ 882.051770][ T2666] usbhid: probe of 6-1:0.0 failed with error -71 [ 882.070322][ T2666] usb 6-1: USB disconnect, device number 114 18:04:31 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x5, 0x0, 0xfd}}]}}}]}}]}}, 0x0) 18:04:31 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x4000000, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:31 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000a0e666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) [ 882.534326][ T2666] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 882.584432][ T5] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 882.944389][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.955422][ T2666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.965672][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 882.979519][ T2666] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 882.988826][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 882.997966][ T2666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.006079][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.016617][ T2666] usb 6-1: config 0 descriptor?? [ 883.022297][ T5] usb 2-1: config 0 descriptor?? [ 883.085636][ T5] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 883.287246][ T8051] usb 2-1: USB disconnect, device number 36 [ 883.503266][ T2666] wacom 0003:056A:0331.004B: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 883.701323][ T2666] usb 6-1: USB disconnect, device number 115 [ 884.484281][ T5] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 884.895787][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.906749][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.918595][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 884.928377][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.942055][ T5] usb 6-1: config 0 descriptor?? 18:04:34 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1fffc0000, 0x500) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:04:34 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:34 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x5000000, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:34 executing program 4 (fault-call:3 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:04:34 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff, 0x0, 0x0, 0xfd}}]}}}]}}]}}, 0x0) 18:04:34 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x990000, 0x1ae26b2b, 0x1, r3, 0x0, &(0x7f0000000080)={0x9909d9, 0x9, [], @p_u16=&(0x7f0000000000)=0x3}}) write$binfmt_aout(r4, &(0x7f0000000100)={{0xcc, 0x0, 0xe0, 0x214, 0x348, 0x3, 0xde, 0x4}, "06b67ff9b0946c0318df9d17d6ab22282133ac1aa14ba235f18982da82287c610daec7965ef08308d14474ffa9ee0b17089796ee73cea2b7792115b540dbfd4c40eadb40a1d7ed02249d22ea4d613ea1f63386aa36426a75686e2557"}, 0x7c) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000180)={0xfffffff8, 0x10001, 0x6, 0x5, 0x3, "94f398d46539bb2aff0ce1e9025e3f678a45c9"}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x2) [ 885.114337][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 885.122188][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 885.153916][T26587] FAULT_INJECTION: forcing a failure. 18:04:34 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6000000, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 885.153916][T26587] name failslab, interval 1, probability 0, space 0, times 0 [ 885.167359][T26586] FAT-fs (loop2): bogus number of reserved sectors [ 885.195735][ T5] usb 6-1: USB disconnect, device number 116 [ 885.207827][T26586] FAT-fs (loop2): Can't find a valid FAT filesystem [ 885.259916][T26587] CPU: 1 PID: 26587 Comm: syz-executor.4 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 885.269843][T26587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.279951][T26587] Call Trace: [ 885.283277][T26587] dump_stack+0x18f/0x20d [ 885.287640][T26587] should_fail.cold+0x5/0x14 [ 885.292282][T26587] should_failslab+0x5/0xf [ 885.296718][T26587] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 885.302807][T26587] kmem_cache_alloc_node_trace+0x5d/0x400 [ 885.308546][T26587] __kmalloc_node+0x38/0x60 [ 885.313589][T26587] kvmalloc_node+0x61/0xf0 [ 885.318019][T26587] seq_read_iter+0x791/0x10c0 [ 885.322722][T26587] ? aa_file_perm+0x5e2/0x1100 [ 885.327617][T26587] ? lock_is_held_type+0xb0/0xe0 [ 885.332596][T26587] proc_reg_read_iter+0x1fb/0x2d0 [ 885.337724][T26587] new_sync_read+0x41a/0x6e0 [ 885.342455][T26587] ? vfs_dedupe_file_range+0x780/0x780 [ 885.348112][T26587] ? __fdget_pos+0xe9/0x100 [ 885.352684][T26587] vfs_read+0x45c/0x520 [ 885.356858][T26587] ksys_read+0x12d/0x250 [ 885.361121][T26587] ? vfs_write+0x6b0/0x6b0 [ 885.365551][T26587] ? lock_is_held_type+0xb0/0xe0 [ 885.371464][T26587] ? do_syscall_64+0x1c/0xe0 [ 885.376188][T26587] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 885.382295][T26587] do_syscall_64+0x60/0xe0 [ 885.387255][T26587] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 885.393149][T26587] RIP: 0033:0x45cba9 [ 885.397036][T26587] Code: Bad RIP value. [ 885.401651][T26587] RSP: 002b:00007fa76d6eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 18:04:34 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x7000000, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 885.410066][T26587] RAX: ffffffffffffffda RBX: 00000000004fca80 RCX: 000000000045cba9 [ 885.419024][T26587] RDX: 0000000000001000 RSI: 0000000020000800 RDI: 0000000000000003 [ 885.430243][T26587] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 885.438249][T26587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 885.446226][T26587] R13: 00000000000008b6 R14: 00000000004cb9ff R15: 00007fa76d6eb6d4 18:04:34 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x3f000000, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:35 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0xf6ffffff, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 885.644213][ T2666] usb 2-1: new high-speed USB device number 37 using dummy_hcd 18:04:35 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0xfcfdffff, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 885.780239][T26619] FAT-fs (loop2): bogus number of reserved sectors [ 885.787031][ T5] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 885.808389][T26619] FAT-fs (loop2): Can't find a valid FAT filesystem [ 886.053954][ T2666] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 886.074931][ T2666] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 886.086664][ T2666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.106790][ T2666] usb 2-1: config 0 descriptor?? [ 886.145722][T26591] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 886.157063][ T2666] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 18:04:35 executing program 4 (fault-call:3 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:04:35 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0xfeffffff, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:35 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) [ 886.214731][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.230811][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.265912][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 886.297572][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.320850][T26640] FAT-fs (loop2): bogus number of reserved sectors [ 886.335771][ T5] usb 6-1: config 0 descriptor?? [ 886.337256][T26641] FAULT_INJECTION: forcing a failure. [ 886.337256][T26641] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 886.344480][T26640] FAT-fs (loop2): Can't find a valid FAT filesystem [ 886.354029][T26641] CPU: 1 PID: 26641 Comm: syz-executor.4 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 886.354039][T26641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.354044][T26641] Call Trace: [ 886.354072][T26641] dump_stack+0x18f/0x20d [ 886.354093][T26641] should_fail.cold+0x5/0x14 [ 886.354110][T26641] ? mark_lock+0xbc/0x1710 [ 886.354141][T26641] __alloc_pages_nodemask+0x1db/0x2a20 [ 886.354159][T26641] ? __lock_acquire+0x16e3/0x56e0 [ 886.354203][T26641] ? warn_alloc+0x120/0x120 [ 886.414011][T26641] ? seq_read_iter+0xb1/0x10c0 [ 886.418911][T26641] ? lock_acquire+0x1f1/0xad0 [ 886.423609][T26641] ? fs_reclaim_acquire+0xa1/0x110 [ 886.428738][T26641] ? find_held_lock+0x2d/0x110 [ 886.433517][T26641] ? fs_reclaim_release+0x94/0xf0 [ 886.438565][T26641] cache_grow_begin+0x71/0x430 [ 886.443346][T26641] cache_alloc_refill+0x27b/0x340 [ 886.448382][T26641] ? lockdep_hardirqs_off+0x66/0xa0 [ 886.453619][T26641] kmem_cache_alloc_node_trace+0x3dc/0x400 [ 886.459453][T26641] __kmalloc_node+0x38/0x60 [ 886.463970][T26641] kvmalloc_node+0x61/0xf0 [ 886.468580][T26641] seq_read_iter+0x791/0x10c0 [ 886.473264][T26641] ? aa_file_perm+0x5e2/0x1100 [ 886.478050][T26641] ? lock_is_held_type+0xb0/0xe0 [ 886.483022][T26641] proc_reg_read_iter+0x1fb/0x2d0 [ 886.488065][T26641] new_sync_read+0x41a/0x6e0 [ 886.492675][T26641] ? vfs_dedupe_file_range+0x780/0x780 [ 886.498150][T26641] ? __fdget_pos+0xe9/0x100 [ 886.502695][T26641] vfs_read+0x45c/0x520 [ 886.506868][T26641] ksys_read+0x12d/0x250 [ 886.511213][T26641] ? vfs_write+0x6b0/0x6b0 [ 886.515772][T26641] ? lock_is_held_type+0xb0/0xe0 [ 886.520720][T26641] ? do_syscall_64+0x1c/0xe0 [ 886.525346][T26641] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 886.531949][T26641] do_syscall_64+0x60/0xe0 [ 886.536375][T26641] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 886.542297][T26641] RIP: 0033:0x45cba9 [ 886.546189][T26641] Code: Bad RIP value. [ 886.550431][T26641] RSP: 002b:00007fa76d6eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 886.558845][T26641] RAX: ffffffffffffffda RBX: 00000000004fca80 RCX: 000000000045cba9 [ 886.566821][T26641] RDX: 0000000000001000 RSI: 0000000020000800 RDI: 0000000000000003 [ 886.574802][T26641] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 886.582781][T26641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 886.590761][T26641] R13: 00000000000008b6 R14: 00000000004cb9ff R15: 00007fa76d6eb6d4 [ 886.621878][ T2666] usb 2-1: USB disconnect, device number 37 [ 886.924456][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 886.930958][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 886.947088][ T5] usb 6-1: USB disconnect, device number 117 18:04:36 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff}}]}}}]}}]}}, 0x0) [ 887.434203][ T5] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 887.444309][ T8051] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 887.804440][ T8051] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 887.814472][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.817476][ T8051] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 887.835412][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.838529][ T8051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.856674][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 887.861395][ T8051] usb 2-1: config 0 descriptor?? [ 887.882063][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.904210][T26676] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 887.912958][ T5] usb 6-1: config 0 descriptor?? [ 887.915386][ T8051] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 18:04:37 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0xfffff000, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:37 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, 0xfffffffffffffffd) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) 18:04:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:37 executing program 4 (fault-call:3 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) [ 888.135621][ T2666] usb 2-1: USB disconnect, device number 38 18:04:37 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220570a094fd6792859e4ef1e4c973f82cea9dbe403ba428f9c3406c575e4fbecc74f47c3aea670ff40f1783fd6eb84bd373acf7baeebf70704f7ebf102e5e7288bf7449acb9e26ec903ea74c268b46bada663da271bf1aa3e063c00cf6e7ee969cfe5d11d"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1b}]}, 0x1c}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) r9 = open(&(0x7f0000000240)='./file0\x00', 0x400800, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="2000965c7a1d37973ed78e1a19f8727026bd7000fbdbdf25330000000854dc945880cb455fe1b1a90001000100000006001000c20100"], 0x3c}, 0x1, 0x0, 0x0, 0x4004010}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1) [ 888.224345][T26698] FAT-fs (loop2): bogus number of reserved sectors [ 888.244258][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 888.251710][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 888.280346][ T5] usb 6-1: USB disconnect, device number 118 [ 888.287997][T26698] FAT-fs (loop2): Can't find a valid FAT filesystem 18:04:37 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0xfffffdfc, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1000) 18:04:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:37 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0xfffffff6, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 888.688087][T26723] FAT-fs (loop2): bogus number of reserved sectors 18:04:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x18) [ 888.736087][T26723] FAT-fs (loop2): Can't find a valid FAT filesystem [ 888.762927][ T5] usb 6-1: new high-speed USB device number 119 using dummy_hcd 18:04:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '3A@v'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:04:38 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffe, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x1c) [ 889.154470][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.154483][ T8051] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 889.195813][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.213491][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 889.223570][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.241146][ T5] usb 6-1: config 0 descriptor?? [ 889.514648][ T8051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.526664][ T8051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.536900][ T8051] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 889.546360][ T8051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.560283][ T8051] usb 2-1: config 0 descriptor?? [ 889.594407][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 889.600718][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 889.625298][ T5] usb 6-1: USB disconnect, device number 119 [ 889.904294][ T8051] usbhid 2-1:0.0: can't add hid device: -71 [ 889.910376][ T8051] usbhid: probe of 2-1:0.0 failed with error -71 [ 889.926128][ T8051] usb 2-1: USB disconnect, device number 39 [ 890.104274][ T5] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 890.394205][ T8051] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 890.494664][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.505770][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.517007][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 890.526259][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.541621][ T5] usb 6-1: config 0 descriptor?? [ 890.764549][ T8051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.775643][ T8051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.785916][ T8051] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 890.796763][ T8051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.807081][ T8051] usb 2-1: config 0 descriptor?? 18:04:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:40 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x1000000000000, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:40 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "7b0f081c407a28359a2acdfdd77a6801"}, 0x11, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0xffffffff, 0x4) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f00000001c0)=""/132) [ 891.255068][T26784] FAT-fs (loop2): bogus number of reserved sectors [ 891.261626][T26784] FAT-fs (loop2): Can't find a valid FAT filesystem [ 891.289803][ T8051] wacom 0003:056A:0331.004C: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0 [ 891.344374][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 891.350601][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 891.370056][ T5] usb 6-1: USB disconnect, device number 120 [ 891.510710][ T8051] usb 2-1: USB disconnect, device number 40 [ 892.094286][ T5] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 892.494463][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.505465][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.518440][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 892.528234][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.543206][ T5] usb 6-1: config 0 descriptor?? 18:04:41 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x7ffffffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) 18:04:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x74) 18:04:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000) 18:04:42 executing program 1 (fault-call:0 fault-nth:0): syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb9, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x5ff}}]}}}]}}]}}, 0x0) [ 892.721923][T26840] FAULT_INJECTION: forcing a failure. [ 892.721923][T26840] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 892.744487][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 892.750994][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 892.751584][T26839] FAT-fs (loop2): bogus number of reserved sectors [ 892.768517][ T5] usb 6-1: USB disconnect, device number 121 18:04:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0x8c) 18:04:42 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x8000000000000, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 892.800006][T26839] FAT-fs (loop2): Can't find a valid FAT filesystem 18:04:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98, 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f0000000800), 0xe4) 18:04:42 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x331, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0040760859f23ad4971e8b5f8e3e16f979f67b259061e8bfb826a5a90cbe791086d95debbd4fc3035604000000000000004a5dd43d118379081c9f4006e95acdfaaa45a829534b18ffba7b7630b8964942"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = pidfd_getfd(r3, r5, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r7) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x79, &(0x7f0000000000)=@assoc_value={r9}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000002400)=@assoc_value={r9, 0x2}, &(0x7f0000002440)=0x8) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0xc0280) [ 892.870202][T26840] CPU: 0 PID: 26840 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 892.887174][T26840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 892.897243][T26840] Call Trace: [ 892.900579][T26840] dump_stack+0x18f/0x20d [ 892.904922][T26840] should_fail.cold+0x5/0x14 [ 892.909532][T26840] __alloc_pages_nodemask+0x1db/0x2a20 [ 892.915022][T26840] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 892.921015][T26840] ? warn_alloc+0x120/0x120 [ 892.925535][T26840] ? find_held_lock+0x2d/0x110 [ 892.930312][T26840] ? count_memcg_event_mm.part.0+0x20b/0x3c0 [ 892.936317][T26840] ? lock_downgrade+0x820/0x820 [ 892.941200][T26840] alloc_pages_vma+0xdd/0x720 [ 892.945890][T26840] handle_mm_fault+0x27b0/0x45e0 [ 892.950851][T26840] ? apply_to_existing_page_range+0x40/0x40 [ 892.956766][T26840] ? vmacache_update+0xce/0x140 [ 892.961631][T26840] do_user_addr_fault+0x598/0xbf0 [ 892.975535][T26840] exc_page_fault+0xab/0x170 [ 892.980139][T26840] ? asm_exc_page_fault+0x8/0x30 [ 892.985090][T26840] asm_exc_page_fault+0x1e/0x30 [ 892.989942][T26840] RIP: 0033:0x4072ff [ 892.993826][T26840] Code: Bad RIP value. [ 892.997890][T26840] RSP: 002b:00007feae3c80ab0 EFLAGS: 00010246 [ 893.003958][T26840] RAX: 0000000000000000 RBX: 0000000020000000 RCX: 0000000000000000 [ 893.011948][T26840] RDX: 0000000020000000 RSI: 0000000020000000 RDI: 00000000004c1ebe [ 893.029039][T26840] RBP: 000000000000003f R08: 0000000000401eb0 R09: 0000000000000000 [ 893.037044][T26840] R10: 0000000000000064 R11: 0000000000000000 R12: 0000000000000000 [ 893.045020][T26840] R13: 0000000000000c99 R14: 00000000004ceeb6 R15: 00007feae3c836d4 18:04:42 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0xf0ffffffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 893.069821][T26840] syz-executor.1 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000 [ 893.079442][T26840] CPU: 0 PID: 26840 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 893.089334][T26840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 893.099412][T26840] Call Trace: [ 893.102733][T26840] dump_stack+0x18f/0x20d [ 893.107076][T26840] dump_header+0x106/0x60f [ 893.111515][T26840] out_of_memory.cold+0xf/0x182 [ 893.116383][T26840] ? mem_cgroup_size+0x50/0x50 18:04:42 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x100000000000000, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 893.121157][T26840] ? alloc_pages_vma+0x135/0x720 [ 893.126186][T26840] ? oom_killer_disable+0x270/0x270 [ 893.131395][T26840] ? mutex_trylock+0x246/0x2c0 [ 893.136162][T26840] ? pagefault_out_of_memory+0xed/0x11c [ 893.141723][T26840] pagefault_out_of_memory+0x109/0x11c [ 893.149184][T26840] ? out_of_memory+0x1340/0x1340 [ 893.154141][T26840] mm_fault_error+0x123/0x380 [ 893.158838][T26840] do_user_addr_fault+0x5f8/0xbf0 [ 893.163877][T26840] exc_page_fault+0xab/0x170 [ 893.168478][T26840] ? asm_exc_page_fault+0x8/0x30 [ 893.173426][T26840] asm_exc_page_fault+0x1e/0x30 [ 893.178289][T26840] RIP: 0033:0x4072ff [ 893.182176][T26840] Code: Bad RIP value. [ 893.186239][T26840] RSP: 002b:00007feae3c80ab0 EFLAGS: 00010246 [ 893.193015][T26840] RAX: 0000000000000000 RBX: 0000000020000000 RCX: 0000000000000000 [ 893.200995][T26840] RDX: 0000000020000000 RSI: 0000000020000000 RDI: 00000000004c1ebe [ 893.208967][T26840] RBP: 000000000000003f R08: 0000000000401eb0 R09: 0000000000000000 18:04:42 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000000000, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00202000000000001000000c98f13", 0x12, 0x400}], 0x0, 0x0) [ 893.216936][T26840] R10: 0000000000000064 R11: 0000000000000000 R12: 0000000000000000 [ 893.224909][T26840] R13: 0000000000000c99 R14: 00000000004ceeb6 R15: 00007feae3c836d4 [ 893.254456][T26840] Mem-Info: [ 893.260566][T26840] active_anon:181655 inactive_anon:4416 isolated_anon:0 [ 893.260566][T26840] active_file:6437 inactive_file:94311 isolated_file:0 [ 893.260566][T26840] unevictable:0 dirty:234 writeback:0 [ 893.260566][T26840] slab_reclaimable:22093 slab_unreclaimable:100208 [ 893.260566][T26840] mapped:60731 shmem:4636 pagetables:4017 bounce:0 [ 893.260566][T26840] free:1093865 free_pcp:474 free_cma:0 [ 893.382404][T26840] Node 0 active_anon:728692kB inactive_anon:17664kB active_file:25612kB inactive_file:377244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:242924kB dirty:932kB writeback:0kB shmem:18544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 706560kB writeback_tmp:0kB kernel_stack:12064kB all_unreclaimable? no [ 893.454217][T26840] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:32kB all_unreclaimable? no [ 893.483980][T26840] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 893.534831][T26840] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 893.540606][T26840] Node 0 DMA32 free:597432kB min:35916kB low:44892kB high:53868kB reserved_highatomic:0KB active_anon:726552kB inactive_anon:17664kB active_file:25612kB inactive_file:377244kB unevictable:0kB writepending:932kB present:3129332kB managed:2578208kB mlocked:0kB pagetables:15920kB bounce:0kB free_pcp:2032kB local_pcp:604kB free_cma:0kB [ 893.584226][ T5] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 893.592956][T26840] lowmem_reserve[]: 0 0 0 0 0 [ 893.599050][T26840] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 893.643001][T26840] lowmem_reserve[]: 0 0 0 0 0 [ 893.648904][T26840] Node 1 Normal free:3762500kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 893.680438][T26840] lowmem_reserve[]: 0 0 0 0 0 [ 893.685984][T26840] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 893.705523][T26840] Node 0 DMA32: 2032*4kB (UME) 191*8kB (UME) 328*16kB (UME) 260*32kB (UME) 74*64kB (UME) 27*128kB (UME) 4*256kB (U) 3*512kB (UE) 2*1024kB (U) 4*2048kB (UME) 135*4096kB (M) = 597176kB [ 893.728604][T26840] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 893.740960][T26840] Node 1 Normal: 99*4kB (UME) 223*8kB (UME) 170*16kB (UM) 101*32kB (UME) 40*64kB (UME) 23*128kB (UM) 8*256kB (U) 4*512kB (UE) 1*1024kB (M) 2*2048kB (ME) 913*4096kB (M) = 3762500kB [ 893.790111][T26840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 893.815878][T26840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 893.835026][T26840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 893.871522][T26840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 893.896865][T26840] 71378 total pagecache pages [ 893.901584][T26840] 0 pages in swap cache [ 893.907564][T26840] Swap cache stats: add 0, delete 0, find 0/0 [ 893.913760][T26840] Free swap = 0kB [ 893.918064][T26840] Total swap = 0kB [ 893.921883][T26840] 1965979 pages RAM [ 893.926675][T26840] 0 pages HighMem/MovableOnly [ 893.931347][T26840] 349900 pages reserved [ 893.937351][T26840] 0 pages cma reserved [ 893.941427][T26840] Out of memory and no killable processes... [ 893.948278][T26840] Kernel panic - not syncing: System is deadlocked on memory [ 893.955646][T26840] CPU: 1 PID: 26840 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0 [ 893.965536][T26840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 893.975586][T26840] Call Trace: [ 893.978866][T26840] dump_stack+0x18f/0x20d [ 893.983186][T26840] panic+0x2e3/0x75c [ 893.987063][T26840] ? __warn_printk+0xf3/0xf3 [ 893.991651][T26840] ? out_of_memory.cold+0x95/0x182 [ 893.996762][T26840] out_of_memory.cold+0xa6/0x182 [ 894.001686][T26840] ? mem_cgroup_size+0x50/0x50 [ 894.006431][T26840] ? alloc_pages_vma+0x135/0x720 [ 894.011352][T26840] ? oom_killer_disable+0x270/0x270 [ 894.016550][T26840] ? mutex_trylock+0x246/0x2c0 [ 894.021293][T26840] ? pagefault_out_of_memory+0xed/0x11c [ 894.026837][T26840] pagefault_out_of_memory+0x109/0x11c [ 894.032291][T26840] ? out_of_memory+0x1340/0x1340 [ 894.037235][T26840] mm_fault_error+0x123/0x380 [ 894.041926][T26840] do_user_addr_fault+0x5f8/0xbf0 [ 894.046954][T26840] exc_page_fault+0xab/0x170 [ 894.051552][T26840] ? asm_exc_page_fault+0x8/0x30 [ 894.056486][T26840] asm_exc_page_fault+0x1e/0x30 [ 894.061336][T26840] RIP: 0033:0x4072ff [ 894.065217][T26840] Code: Bad RIP value. [ 894.069266][T26840] RSP: 002b:00007feae3c80ab0 EFLAGS: 00010246 [ 894.075335][T26840] RAX: 0000000000000000 RBX: 0000000020000000 RCX: 0000000000000000 [ 894.083297][T26840] RDX: 0000000020000000 RSI: 0000000020000000 RDI: 00000000004c1ebe [ 894.091260][T26840] RBP: 000000000000003f R08: 0000000000401eb0 R09: 0000000000000000 [ 894.099224][T26840] R10: 0000000000000064 R11: 0000000000000000 R12: 0000000000000000 [ 894.107196][T26840] R13: 0000000000000c99 R14: 00000000004ceeb6 R15: 00007feae3c836d4 [ 894.116478][T26840] Kernel Offset: disabled [ 894.120928][T26840] Rebooting in 86400 seconds..