[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 51.520912][ T4779] systemd-udevd (4779) used greatest stack depth: 20784 bytes left Warning: Permanently added '10.128.0.68' (ECDSA) to the list of known hosts. 2020/06/27 02:21:44 fuzzer started 2020/06/27 02:21:44 dialing manager at 10.128.0.26:45395 2020/06/27 02:21:45 syscalls: 3118 2020/06/27 02:21:45 code coverage: enabled 2020/06/27 02:21:45 comparison tracing: enabled 2020/06/27 02:21:45 extra coverage: enabled 2020/06/27 02:21:45 setuid sandbox: enabled 2020/06/27 02:21:45 namespace sandbox: enabled 2020/06/27 02:21:45 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/27 02:21:45 fault injection: enabled 2020/06/27 02:21:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/27 02:21:45 net packet injection: enabled 2020/06/27 02:21:45 net device setup: enabled 2020/06/27 02:21:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/27 02:21:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/27 02:21:45 USB emulation: enabled 02:24:12 executing program 0: syz_open_dev$loop(0x0, 0x0, 0x301401) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) [ 206.217620][ T6792] IPVS: ftp: loaded support on port[0] = 21 [ 206.364356][ T6792] chnl_net:caif_netlink_parms(): no params data found 02:24:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffff8}]}) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) [ 206.486660][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.510226][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.539232][ T6792] device bridge_slave_0 entered promiscuous mode [ 206.550203][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.557370][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.580034][ T6792] device bridge_slave_1 entered promiscuous mode [ 206.625871][ T6792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.630152][ T6922] IPVS: ftp: loaded support on port[0] = 21 [ 206.655067][ T6792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.712785][ T6792] team0: Port device team_slave_0 added [ 206.730930][ T6792] team0: Port device team_slave_1 added 02:24:13 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffff8}]}) inotify_init() [ 206.776530][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.797590][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.826410][ T6792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.840698][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.847655][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.881148][ T6792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.998344][ T6973] IPVS: ftp: loaded support on port[0] = 21 [ 207.064075][ T6792] device hsr_slave_0 entered promiscuous mode 02:24:13 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x15}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000140)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) [ 207.155342][ T6792] device hsr_slave_1 entered promiscuous mode [ 207.242198][ T6922] chnl_net:caif_netlink_parms(): no params data found [ 207.496051][ T7111] IPVS: ftp: loaded support on port[0] = 21 [ 207.518758][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state 02:24:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}}, 0x0) [ 207.548938][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.568498][ T6922] device bridge_slave_0 entered promiscuous mode [ 207.678570][ T6922] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.700696][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.708428][ T6922] device bridge_slave_1 entered promiscuous mode [ 207.771314][ T6973] chnl_net:caif_netlink_parms(): no params data found [ 207.852469][ T6792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.902180][ T6922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.918225][ T6922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.939713][ T6792] netdevsim netdevsim0 netdevsim1: renamed from eth1 02:24:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) alarm(0x0) [ 208.005318][ T7260] IPVS: ftp: loaded support on port[0] = 21 [ 208.014692][ T6792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.127231][ T6792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.191857][ T6922] team0: Port device team_slave_0 added [ 208.224254][ T6922] team0: Port device team_slave_1 added [ 208.243368][ T6973] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.253920][ T6973] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.262390][ T6973] device bridge_slave_0 entered promiscuous mode [ 208.303143][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.307472][ T7301] IPVS: ftp: loaded support on port[0] = 21 [ 208.310777][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.344528][ T6922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.359994][ T6973] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.367144][ T6973] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.377039][ T6973] device bridge_slave_1 entered promiscuous mode [ 208.417841][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.426867][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.454327][ T6922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.493598][ T6973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.541152][ T6973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.558158][ T7111] chnl_net:caif_netlink_parms(): no params data found [ 208.601870][ T6922] device hsr_slave_0 entered promiscuous mode [ 208.629914][ T6922] device hsr_slave_1 entered promiscuous mode [ 208.669156][ T6922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.677224][ T6922] Cannot create hsr debugfs directory [ 208.769472][ T6973] team0: Port device team_slave_0 added [ 208.807711][ T6973] team0: Port device team_slave_1 added [ 208.832669][ T7111] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.843038][ T7111] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.854122][ T7111] device bridge_slave_0 entered promiscuous mode [ 208.900834][ T7111] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.907915][ T7111] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.917514][ T7111] device bridge_slave_1 entered promiscuous mode [ 208.925397][ T6973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.933014][ T6973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.959165][ T6973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.010901][ T6973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.017871][ T6973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.046621][ T6973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.105905][ T7111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.153055][ T6973] device hsr_slave_0 entered promiscuous mode [ 209.229317][ T6973] device hsr_slave_1 entered promiscuous mode [ 209.278975][ T6973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.286551][ T6973] Cannot create hsr debugfs directory [ 209.315458][ T7111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.414412][ T6792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.438118][ T7301] chnl_net:caif_netlink_parms(): no params data found [ 209.462733][ T7111] team0: Port device team_slave_0 added [ 209.474106][ T7260] chnl_net:caif_netlink_parms(): no params data found [ 209.501848][ T7111] team0: Port device team_slave_1 added [ 209.569949][ T7111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.576928][ T7111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.604902][ T7111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.635850][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.644437][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.662982][ T7111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.670531][ T7111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.699057][ T7111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.773090][ T6792] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.833401][ T7111] device hsr_slave_0 entered promiscuous mode [ 209.861924][ T7111] device hsr_slave_1 entered promiscuous mode [ 209.909080][ T7111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.916686][ T7111] Cannot create hsr debugfs directory [ 209.927518][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.935218][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.944138][ T7301] device bridge_slave_0 entered promiscuous mode [ 209.955725][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.964023][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.972600][ T7301] device bridge_slave_1 entered promiscuous mode [ 209.981489][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.992737][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.003571][ T2512] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.010818][ T2512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.019508][ T6922] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.107695][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.134041][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.141273][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.152524][ T7260] device bridge_slave_0 entered promiscuous mode [ 210.160449][ T6922] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.218571][ T6922] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.277191][ T6922] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.328150][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.336033][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.344916][ T7260] device bridge_slave_1 entered promiscuous mode [ 210.360134][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.369563][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.377941][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.385077][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.410362][ T7301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.454611][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.471450][ T7301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.489483][ T7260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.516664][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.525923][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.535774][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.546791][ T7260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.597142][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.605757][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.615531][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.624353][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.633438][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.642757][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.652816][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.681341][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.695244][ T6973] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.732610][ T6973] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.792373][ T7301] team0: Port device team_slave_0 added [ 210.801676][ T7260] team0: Port device team_slave_0 added [ 210.835737][ T6973] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.872579][ T7301] team0: Port device team_slave_1 added [ 210.878498][ T6973] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.933255][ T7260] team0: Port device team_slave_1 added [ 210.988213][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.995805][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.023040][ T7301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.072843][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.080318][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.107042][ T7301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.130743][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.137711][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.164769][ T7260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.177574][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.185096][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.211861][ T7260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.238639][ T7111] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.294533][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.302021][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.382284][ T7260] device hsr_slave_0 entered promiscuous mode [ 211.439415][ T7260] device hsr_slave_1 entered promiscuous mode [ 211.489978][ T7260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.497558][ T7260] Cannot create hsr debugfs directory [ 211.505889][ T7111] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.604065][ T7301] device hsr_slave_0 entered promiscuous mode [ 211.659448][ T7301] device hsr_slave_1 entered promiscuous mode [ 211.698906][ T7301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.706485][ T7301] Cannot create hsr debugfs directory [ 211.734821][ T7111] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.796093][ T6792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.833690][ T7111] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.039978][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.054986][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.192597][ T6922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.206482][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.216337][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.229051][ T6973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.238599][ T6792] device veth0_vlan entered promiscuous mode [ 212.249679][ T7260] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.299463][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.307254][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.315733][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.324897][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.346460][ T6792] device veth1_vlan entered promiscuous mode [ 212.354753][ T7260] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.394512][ T6922] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.416140][ T7260] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.466572][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.475787][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.485092][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.508832][ T7260] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.575812][ T6973] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.598885][ T7301] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.631545][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 212.641498][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.651344][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.660991][ T2514] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.668355][ T2514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.676648][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.685912][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.694929][ T2514] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.702122][ T2514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.730241][ T7301] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.793505][ T7111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.825238][ T7111] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.834225][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.842706][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.852410][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.861338][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.868564][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.877292][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.886926][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.895928][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.904842][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.911963][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.920312][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.928909][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.939596][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.947332][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.957574][ T7301] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.014939][ T7301] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.087314][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.101220][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.128833][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.137565][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.147014][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.156560][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.166045][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.174991][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.186280][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.194545][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.205370][ T6792] device veth0_macvtap entered promiscuous mode [ 213.246375][ T6792] device veth1_macvtap entered promiscuous mode [ 213.255088][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.263714][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.275526][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.284540][ T2512] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.291714][ T2512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.300285][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.309387][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.317833][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.327254][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.336322][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.345151][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.354244][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.362833][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.371694][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.380627][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.389627][ T2512] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.396702][ T2512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.429888][ T6922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.462727][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.471783][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.481729][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.491401][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.501508][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.510563][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.519197][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.530178][ T6973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.549927][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.562030][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.605307][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.613905][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.624064][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.633766][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.643027][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.663441][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.687145][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.696203][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.723794][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.738487][ T7111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.752859][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.767402][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.779828][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.787503][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.796887][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.805971][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.814008][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.821718][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.830927][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.844748][ T6922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.876745][ T6973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.960211][ T7260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.041075][ T7260] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.057331][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.066100][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.075693][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.085515][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.095021][ T2485] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.102536][ T2485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.111916][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.202413][ T7111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.231701][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.243101][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.252212][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.264292][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.274235][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.285255][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 02:24:20 executing program 0: [ 214.309242][ T2514] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.316337][ T2514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.327260][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.337567][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.352763][ T7301] 8021q: adding VLAN 0 to HW filter on device bond0 02:24:21 executing program 0: [ 214.410352][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.429907][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.438515][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.450838][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.499238][ T6922] device veth0_vlan entered promiscuous mode [ 214.517158][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.535706][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 02:24:21 executing program 0: [ 214.560173][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.572090][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.581117][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.591358][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.604657][ T7301] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.627638][ T6973] device veth0_vlan entered promiscuous mode 02:24:21 executing program 0: [ 214.654229][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.663175][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.674984][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.684482][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.693679][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.703747][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.713336][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.764604][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.776995][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.800654][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 02:24:21 executing program 0: [ 214.810733][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.820429][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.829639][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.838166][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.845318][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.853744][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 02:24:21 executing program 0: [ 214.863074][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.879583][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.886676][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.904999][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.914311][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.926564][ T6973] device veth1_vlan entered promiscuous mode [ 214.971617][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.986840][ T6922] device veth1_vlan entered promiscuous mode [ 214.999133][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.009501][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 02:24:21 executing program 0: [ 215.018076][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.040157][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.054383][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.075428][ T7111] device veth0_vlan entered promiscuous mode [ 215.129783][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.138295][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.147597][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.170268][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.179344][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.192140][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.239103][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.247161][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.258008][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.266580][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.274661][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.283631][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.293252][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.302533][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.312136][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.322544][ T7111] device veth1_vlan entered promiscuous mode [ 215.344524][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.355325][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.373147][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.388285][ T6973] device veth0_macvtap entered promiscuous mode [ 215.401246][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.417016][ T7260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.430089][ T6973] device veth1_macvtap entered promiscuous mode [ 215.459935][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.468119][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.477953][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.486662][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.496140][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.512065][ T6922] device veth0_macvtap entered promiscuous mode [ 215.564469][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.576036][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.587125][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.602191][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 215.613253][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.625402][ T6973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.634830][ T6922] device veth1_macvtap entered promiscuous mode [ 215.650960][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.664187][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.673483][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.685539][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.697309][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.713744][ T7301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.723480][ T7111] device veth0_macvtap entered promiscuous mode [ 215.741299][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 215.753472][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.767459][ T6973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.781785][ T7111] device veth1_macvtap entered promiscuous mode [ 215.799358][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.816097][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.826486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.836163][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.991934][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.012211][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.023175][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.034410][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.046526][ T6922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.140713][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.160738][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.200345][ T29] audit: type=1326 audit(1593224662.752:2): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8076 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f95a code=0xffff0000 [ 216.229087][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.238025][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.264063][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.278200][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.313622][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.324867][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.335242][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.346699][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.356604][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.367139][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.379570][ T7111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.388528][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 216.401851][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.411961][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 216.422730][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.434338][ T6922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.457897][ T7260] device veth0_vlan entered promiscuous mode [ 216.466117][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.475869][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.485790][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.495070][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.504159][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.512940][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.524571][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 216.535758][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.545716][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 216.556224][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.568735][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 216.579485][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.591546][ T7111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.616175][ T7260] device veth1_vlan entered promiscuous mode [ 216.626717][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.635099][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.644421][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.653565][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.662653][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.672910][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.682334][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.751422][ T7301] device veth0_vlan entered promiscuous mode [ 216.771451][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.779716][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.837353][ T7301] device veth1_vlan entered promiscuous mode [ 216.968260][ T29] audit: type=1326 audit(1593224663.512:3): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8076 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f95a code=0xffff0000 [ 217.054877][ T29] audit: type=1326 audit(1593224663.602:4): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8082 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f95a code=0xffff0000 [ 217.103052][ T7260] device veth0_macvtap entered promiscuous mode [ 217.135313][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 217.147416][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 217.164263][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 217.173677][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.183343][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.198202][ T7260] device veth1_macvtap entered promiscuous mode [ 217.222591][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.232975][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.282504][ T7301] device veth0_macvtap entered promiscuous mode [ 217.292451][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.305346][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.329355][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.342530][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.353820][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.375050][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.394276][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.407656][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.425700][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.436792][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.460881][ T7260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.472800][ T7301] device veth1_macvtap entered promiscuous mode [ 217.488110][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.511039][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.520507][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.529903][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.543729][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.554586][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.566702][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.578847][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.588772][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.599857][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.609975][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.621033][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.633101][ T7260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.654458][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.663558][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.686148][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.699803][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.710990][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.721953][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.732760][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.743818][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.754329][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.766542][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.776974][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.787993][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.802599][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.828957][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.837729][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.854502][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 02:24:24 executing program 1: 02:24:24 executing program 0: [ 217.867540][ T29] audit: type=1326 audit(1593224664.422:5): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8082 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f95a code=0xffff0000 [ 217.875865][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.899133][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.911615][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.927089][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.946504][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.956494][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.987853][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.025374][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 02:24:24 executing program 3: [ 218.056800][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.077609][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.128653][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.137445][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.445554][ T8109] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.466505][ T8109] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 02:24:25 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) flock(0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x2) wait4(0x0, 0x0, 0x80000002, 0x0) dup(0xffffffffffffffff) 02:24:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2, 0x0, 0x0, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:24:25 executing program 2: 02:24:25 executing program 0: 02:24:25 executing program 1: 02:24:25 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) io_submit(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) 02:24:25 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000ffffffffffffaaaa94aaaaaa86dd"], 0x52) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 218.672051][ C1] hrtimer: interrupt took 51060 ns 02:24:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), 0x8) 02:24:25 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) socket$inet6(0xa, 0x0, 0x0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) 02:24:25 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x72, 0x2}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:24:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r4 = dup2(r0, r0) write$cgroup_type(r4, &(0x7f0000000080)='threaded\x00', 0xd10a) 02:24:25 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000002900)=""/165, 0xa5}], 0x1, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f00000029c0)=ANY=[], 0xfc4, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) 02:24:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x0) 02:24:26 executing program 5: keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', 0x0, 0x0) 02:24:26 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@union={0x0, 0x5, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @struct={0x0, 0xa, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xfffffffffffffd0b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 02:24:26 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) 02:24:26 executing program 5: getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:24:26 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ptype\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x1a) 02:24:26 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f0000000840)=[{&(0x7f0000000680)="30dd96866c8619c7522155d10efb2cc5b0a761c91083a81d8483c1db9a56744d590452367251d70f3ce7bbb664fe975a105cadf789618f7a51abddc6ad6564ac6f08b316b1de15f1c2bb3f58722383a5a9c68233a39fba38b43f871fb52eabc279cf67bd8dc1cbc964fece03ffd57b8a789640692dbbb17fbe53bce58c461d9fae317cbf87901aed080b695e19f766bb1413ae000000000000002d1e15875ad5b244082fac18c28973c5677ba706d48f019a6973cc21278c6533c792f292e952ccbd96e0a9c5117a4d9b85f2ac4c72deaf542c3369a34dce3775f849be4a77095980f6eeb79a1798d8ca6e383267790219917c635f6d3db5000000000000009e47d7c7f5ee98e29287cfb1f09d4bfe4a6936fb96770f51d161ca774752e97b4cbba0cc84176c009586bfbea7fb1e7b9a995c6a175a694a30a64feed3730151503404777bc6b1bcea4755ab8aacc81ead62ebf576d13445d09fa510033c5a4971b48f0907477ceeaf717d4d429c70191b65a8e35197524bd11c988eff77ad06896a01c497c10034e2", 0xffffff32}], 0x1, 0x0) 02:24:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 219.827804][ T8188] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.835509][ T8188] bridge0: port 1(bridge_slave_0) entered forwarding state 02:24:26 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000440)='./file0\x00') mount(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0, 0x0) 02:24:26 executing program 4: 02:24:26 executing program 2: 02:24:26 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x9d', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f96765ce27b90300060000000000000000b738000000570035f4c38422a3bc822000050000000402030006000000000000000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 02:24:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b6a, 0x0) 02:24:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 220.242699][ T8216] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.3 proc:/self/fd/3' not defined. 02:24:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b6a, 0x0) 02:24:29 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) unshare(0x2a000400) mkdir(0x0, 0x0) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 02:24:29 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x9d', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f96765ce27b90300060000000000000000b738000000570035f4c38422a3bc822000050000000402030006000000000000000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a9010001007ea85ca6576b9a992da4880348d1849ae697139777cc64e81a1ac4bc769e8d"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, 0x0) 02:24:29 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xd}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0x0) 02:24:29 executing program 3: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 02:24:29 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fb}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000300)={0xfffffffffffffff9, 0x0, 0x800, 0x100000001, 0x0, 0x3f}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 02:24:29 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fb}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000300)={0xfffffffffffffff9, 0x9, 0x0, 0x0, 0x0, 0x3f}) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000bf) socket$netlink(0x10, 0x3, 0x10) [ 222.545047][ T8230] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.2 proc:/self/fd/3' not defined. 02:24:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b6a, 0x0) 02:24:29 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) unlink(&(0x7f0000000080)='./file0\x00') clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 02:24:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b6a, 0x0) 02:24:29 executing program 3: msync(&(0x7f000084a000/0x4000)=nil, 0x4000, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) fchdir(0xffffffffffffffff) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12d0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) 02:24:29 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/112, 0x70}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}], 0x7}}, {{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000540)=""/178, 0xb2}], 0x1, &(0x7f00000006c0)=""/66, 0x42}}], 0x2, 0x0, 0x0) 02:24:29 executing program 4: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b6a, 0x0) 02:24:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00') getdents64(r0, &(0x7f0000000df0)=""/528, 0xfe06) getdents64(r0, 0x0, 0x0) 02:24:30 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fb}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000300)={0xfffffffffffffff9, 0x9, 0x0, 0x0, 0x0, 0x3f}) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000bf) socket$netlink(0x10, 0x3, 0x10) 02:24:30 executing program 4: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b6a, 0x0) 02:24:30 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 02:24:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000080)={0xa, 0x4e22, 0x1000000080000, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0x0) 02:24:30 executing program 4: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b6a, 0x0) 02:24:30 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fb}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000300)={0xfffffffffffffff9, 0x9, 0x0, 0x0, 0x0, 0x3f}) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000bf) socket$netlink(0x10, 0x3, 0x10) 02:24:30 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x300) r1 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) wait4(0x0, 0x0, 0x80000002, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) 02:24:30 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) unlink(&(0x7f0000000080)='./file0\x00') clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 02:24:31 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0xffe, 0x0) 02:24:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b6a, 0x0) 02:24:31 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) 02:24:31 executing program 5: creat(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f0000000000)=0x38) 02:24:31 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b6a, 0x0) 02:24:31 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000300)={0xfffffffffffffff9, 0x9, 0x800, 0x100000001}) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) 02:24:31 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b6a, 0x0) [ 224.728382][ T29] audit: type=1804 audit(1593224671.273:6): pid=8332 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir339316677/syzkaller.66SJlr/9/file0" dev="sda1" ino=15811 res=1 02:24:31 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x228, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706000000b1000000124ac31d4fda375c7794e420aa63529ebcf847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'wg1\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "29f0be44329ad4d94a815c71ad95092b933b5e380a7e5d3c56c51e9d0027"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x300) flock(0xffffffffffffffff, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) dup(0xffffffffffffffff) 02:24:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) 02:24:31 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b6a, 0x0) 02:24:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000001300)="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", 0xbe0}], 0x1) 02:24:33 executing program 1: 02:24:33 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:24:33 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)=ANY=[@ANYBLOB="1201fe0009003c0800380042ef420000000109021b00017600000009040002010209db00070581070001"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x181, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x4c) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 02:24:33 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011f79e08070ada00488f000000010902240001000000000904120002c750dc000905850b0003000e0009050103"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f00000003c0)='D', 0x1) 02:24:33 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) 02:24:33 executing program 2: 02:24:33 executing program 2: 02:24:33 executing program 0: 02:24:33 executing program 1: 02:24:33 executing program 2: 02:24:33 executing program 1: 02:24:34 executing program 0: 02:24:34 executing program 2: [ 227.527287][ T2514] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 227.527418][ T5] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 227.542693][ T2512] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 227.767143][ T2514] usb 4-1: Using ep0 maxpacket: 8 [ 227.817217][ T2512] usb 5-1: Using ep0 maxpacket: 16 [ 227.822508][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 227.887191][ T2514] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 227.921126][ T2514] usb 4-1: config 118 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.932717][ T2514] usb 4-1: config 118 interface 0 has no altsetting 0 [ 227.940352][ T2514] usb 4-1: New USB device found, idVendor=3800, idProduct=4200, bcdDevice=42.ef [ 227.950178][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.967543][ T2512] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 227.980560][ T5] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 227.990407][ T5] usb 6-1: config 0 has no interface number 0 [ 227.996612][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.003254][ T2514] hub 4-1:118.0: bad descriptor, ignoring hub [ 228.021555][ T5] usb 6-1: config 0 interface 18 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 228.023302][ T2514] hub: probe of 4-1:118.0 failed with error -5 [ 228.034061][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.053135][ T5] usb 6-1: config 0 interface 18 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 228.066698][ T2514] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device [ 228.072539][ T2512] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 228.093512][ T5] usb 6-1: config 0 interface 18 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.116441][ T5] usb 6-1: New USB device found, idVendor=0a07, idProduct=00da, bcdDevice=8f.48 [ 228.129798][ T2512] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 228.139682][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.148110][ T2512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.161547][ T2512] usb 5-1: config 0 descriptor?? [ 228.167628][ T5] usb 6-1: config 0 descriptor?? [ 228.347185][ T5] usb 4-1: USB disconnect, device number 2 [ 228.418004][ T2510] usb 6-1: USB disconnect, device number 2 [ 228.656485][ T2512] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0001/input/input5 [ 228.675751][ T2512] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0001/input/input6 [ 228.780490][ T2512] kye 0003:0458:5013.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 228.875984][ T2512] usb 5-1: USB disconnect, device number 2 [ 229.206944][ T2510] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 229.206956][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 229.446926][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 229.477048][ T2510] usb 4-1: Using ep0 maxpacket: 8 [ 229.566924][ T23] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 229.575192][ T23] usb 6-1: config 0 has no interface number 0 [ 229.587731][ T23] usb 6-1: config 0 interface 18 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 229.602880][ T23] usb 6-1: config 0 interface 18 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 229.614805][ T23] usb 6-1: config 0 interface 18 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.617006][ T2510] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 229.626152][ T23] usb 6-1: New USB device found, idVendor=0a07, idProduct=00da, bcdDevice=8f.48 [ 229.641659][ T2510] usb 4-1: config 118 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.645316][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.655396][ T2512] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 229.666383][ T23] usb 6-1: config 0 descriptor?? [ 229.693250][ T2510] usb 4-1: config 118 interface 0 has no altsetting 0 [ 229.702963][ T2510] usb 4-1: New USB device found, idVendor=3800, idProduct=4200, bcdDevice=42.ef [ 229.720466][ T2510] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.777608][ T2510] hub 4-1:118.0: bad descriptor, ignoring hub [ 229.783796][ T2510] hub: probe of 4-1:118.0 failed with error -5 [ 229.796328][ T2510] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device [ 229.920113][ T2510] usb 6-1: USB disconnect, device number 3 [ 229.948477][ T2512] usb 5-1: Using ep0 maxpacket: 16 [ 230.086876][ T2512] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 230.097773][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.098064][ T23] usb 4-1: USB disconnect, device number 3 [ 230.109618][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.124988][ T2512] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 230.146255][ T2512] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 230.166249][ T2512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.183975][ T2512] usb 5-1: config 0 descriptor?? 02:24:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:24:36 executing program 0: 02:24:36 executing program 1: 02:24:36 executing program 2: 02:24:36 executing program 5: 02:24:36 executing program 3: 02:24:37 executing program 5: 02:24:37 executing program 3: 02:24:37 executing program 1: [ 230.446699][ T2512] usbhid 5-1:0.0: can't add hid device: -71 [ 230.455270][ T2512] usbhid: probe of 5-1:0.0 failed with error -71 02:24:37 executing program 0: 02:24:37 executing program 2: socket(0x1, 0x5, 0x7e) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000440)={0x30, 0x2, 0x0, 0x4, 0x8, 0x3, 0x800000000000}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000002200)=[{{&(0x7f0000001540)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000000680)=""/219, 0xdb}, 0x7}, {{&(0x7f0000001600)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001700)}, 0x728b553b}, {{&(0x7f0000002a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001940)=""/8, 0x8}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/255, 0xff}], 0x3, &(0x7f00000017c0)=""/175, 0xaf}, 0xffffffff}, {{&(0x7f0000004cc0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000005240)=[{&(0x7f0000005740)=""/187, 0xbb}, {&(0x7f0000004e00)=""/250, 0xfa}, {&(0x7f0000004f00)=""/200, 0xc8}, {&(0x7f0000005000)=""/151, 0x97}, {&(0x7f0000005700)=""/56, 0x38}, {&(0x7f0000001880)=""/138, 0x8a}, {&(0x7f00000051c0)=""/28, 0x1c}, {&(0x7f0000005200)=""/33, 0x21}], 0x8, &(0x7f0000001a80)=""/244, 0xf4}, 0x201f}, {{&(0x7f00000053c0)=@ipx, 0x80, &(0x7f00000054c0)=[{&(0x7f0000005440)=""/89, 0x59}], 0x1, &(0x7f0000005500)=""/121, 0x79}, 0x2f4}, {{&(0x7f0000001a00)=@sco, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000015c0)=""/39, 0x27}, 0x8}, {{&(0x7f0000001680)=@xdp, 0x80, &(0x7f0000001780)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f00000019c0)=""/40, 0x28}, {&(0x7f0000001740)=""/43, 0x2b}], 0x3, &(0x7f0000001b80)=""/246, 0xf6}, 0xd9}], 0x7, 0x20, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x1ffe, 0x3, 0xfffffffffffffffe}, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f00000003c0)=""/75) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='t', 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)=@builtin='builtin_trusted\x00') keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r5, 0x121, 0x1000}, &(0x7f0000005800)=ANY=[], &(0x7f0000000540)="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", &(0x7f0000003a80)=""/4096) listen(r4, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x4cb62, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0x200004) perf_event_open(&(0x7f0000001c80)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x47d58, 0x0, 0x6, 0x0, 0xaa93}, 0x0, 0x3, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x1fc}) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) 02:24:37 executing program 5: [ 230.510900][ T2512] usb 5-1: USB disconnect, device number 3 [ 230.956794][ T2512] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 231.206546][ T2512] usb 5-1: Using ep0 maxpacket: 16 [ 231.336678][ T2512] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 231.347600][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.360570][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.370648][ T2512] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 231.384003][ T2512] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 231.393251][ T2512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.405356][ T2512] usb 5-1: config 0 descriptor?? [ 231.893003][ T2512] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0002/input/input7 [ 231.923491][ T2512] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0002/input/input8 [ 232.050277][ T2512] kye 0003:0458:5013.0002: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 232.121172][ T2512] usb 5-1: USB disconnect, device number 4 02:24:39 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:24:39 executing program 0: 02:24:39 executing program 3: 02:24:39 executing program 1: 02:24:39 executing program 5: 02:24:39 executing program 2: 02:24:39 executing program 1: 02:24:39 executing program 2: 02:24:39 executing program 3: 02:24:39 executing program 1: 02:24:39 executing program 0: 02:24:39 executing program 5: [ 233.017390][ T2512] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 233.277812][ T2512] usb 5-1: Using ep0 maxpacket: 16 [ 233.416510][ T2512] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 233.427748][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.440236][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.451451][ T2512] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 233.465108][ T2512] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 233.474792][ T2512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.484405][ T2512] usb 5-1: config 0 descriptor?? [ 233.973148][ T2512] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0003/input/input9 [ 233.989723][ T2512] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0003/input/input10 [ 234.077024][ T2512] kye 0003:0458:5013.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 234.197263][ T23] usb 5-1: USB disconnect, device number 5 02:24:41 executing program 3: 02:24:41 executing program 2: 02:24:41 executing program 1: 02:24:41 executing program 5: 02:24:41 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:24:41 executing program 0: 02:24:41 executing program 5: 02:24:41 executing program 3: 02:24:41 executing program 1: 02:24:41 executing program 2: 02:24:41 executing program 0: 02:24:41 executing program 5: 02:24:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b4b, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) [ 235.136067][ T2514] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 235.376003][ T2514] usb 5-1: Using ep0 maxpacket: 16 [ 235.496190][ T2514] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 235.511437][ T2514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.523980][ T2514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.534819][ T2514] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 235.548644][ T2514] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 235.558432][ T2514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.568076][ T2514] usb 5-1: config 0 descriptor?? [ 236.053311][ T2514] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0004/input/input11 [ 236.070644][ T2514] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0004/input/input12 [ 236.154149][ T2514] kye 0003:0458:5013.0004: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 236.276682][ T2512] usb 5-1: USB disconnect, device number 6 02:24:43 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x2) 02:24:43 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x6ca, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 02:24:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[], 0x880}, 0x1, 0x0, 0x0, 0x8040}, 0x40004) r1 = dup(r0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, 0x0, 0x1) mkdirat$cgroup_root(0xffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r3 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f0000000240), 0x0, r3) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f00000004c0)="0b7708355bca851c96d156aa77893c6c7ea1dafeab6c9ad9b44b4577d9bab60767d4f9945a5281e574415edbdccc75fba6b3cd640e11a90c971148353441a6843305f98df51941c0cc5c8e3b906005d693c9fe4bd44673d3717f511a15a45ed63efe9c80c09ad94982b08293e3d16b99bb0e5dfb3f482c0d40c100be1248bb4d41dc93c130136a92d9e2de454daea3a4e35eb121b076b8845df91afe2ddfee721848add78456675ea4c79f221766a5ae21e44c4b0d739664d3a7b7d316abcf31052354b96877358a00b8f821eba14bd85fd606de3d316defc235ae0544c028ecd68104b513c6ee1eebc990999f510eca5ab93c4be1f48a0efa0f176b11942366d6cadc0539de93578fd9f5963171", 0x10e, r3) keyctl$read(0xb, r4, &(0x7f0000001280)=""/233, 0xe9) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x0, 0x5, 0x2000000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) add_key(&(0x7f0000000240)='rxrpc\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000003c0)="7326a9c288bbd8d8792d8b0b2cd77921e6a80da7b4cf7e02e7b620a963efaf8c5d5a5789482a07a9aec8ab989140840085224f5f3a11306ea76cf523a6f94a4d08c76512f6efd2066239cd54f0494095b748a9efb255ecabe73fd5cd4efbc59fd7b1741bd0966bcae1ad09040ab4d2f11ff55a98f44f00e2db495dcf57d4a9e92ea133e7f1444f4f56c65c1c7bdcba0f8956d59f7f465a5ad5a78530b9277df9ff38af39122a6937440b8b1c18d76f8814c3c8a99e64e4843bc23ab38810e6ab646de63a5760598e2b0be599e463ccd8463e9cb7d351e95e192dc057e08a7c9057f7333c827c9f8a99c0130e9ea4", 0xee, 0xfffffffffffffffb) setsockopt$packet_fanout(r1, 0x107, 0x68, 0x0, 0x0) 02:24:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b4b, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) 02:24:43 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @loopback}, "00006371ae9b1c01"}}}}}, 0x0) 02:24:43 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x7, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x7f2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7f2) 02:24:43 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pipe(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x6ca, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) write$cgroup_subtree(r1, 0x0, 0x0) 02:24:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050017624007a2a30005000040", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002d003f02000000000000000700000000", @ANYRES32=r5, @ANYBLOB="000b0100000000001f00f1ff"], 0x24}}, 0x0) 02:24:43 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pipe(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000380)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'io'}]}, 0x4) 02:24:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 237.147443][ T8764] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:24:43 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) [ 237.197556][ T8764] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:24:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x8, 'bridge_slave_1\x00', {'geneve1\x00'}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41800, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 237.336903][ T2512] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 237.479243][ T8783] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 237.585826][ T2512] usb 5-1: Using ep0 maxpacket: 16 [ 237.736910][ T2512] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 237.756246][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.775651][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.785519][ T2512] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 237.818625][ T2512] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 237.828213][ T2512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.839517][ T2512] usb 5-1: config 0 descriptor?? [ 238.317929][ T2512] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0005/input/input13 [ 238.334272][ T2512] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0005/input/input14 [ 238.423936][ T2512] kye 0003:0458:5013.0005: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 238.508985][ T2511] usb 5-1: USB disconnect, device number 7 02:24:45 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x8, "0164e9c873a71849"}) mkdir(&(0x7f0000000000)='./file0\x00', 0x4e) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000001940)='./file0\x00', 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000440)=""/159, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000380)={0x1, 'vlan0\x00'}) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x400caeaa, &(0x7f00000003c0)={0x5b, 0x6}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="2400000008eaef31f2da6a50424dd45fd42f3b603d3b4fa6fea98f89850f6385bd44525796c50bedc90b5a72458cb99a3c31b0d68d1f80b6c4c2f3f21f3444038c1723358a1ea8e459389d389c6678ce74c0b3f2ff8008f1cfde4093ceb41205b48aedefb7efd8b12ea241590ce4c34a6066bb38eb9f89d99e0a97e714bd453e0db793a7e7a55c0d96d8f14fb8ef656d62783f10ff1945128c4ab2e80f144d40dd1b1b89025095db3b0427acb19130d225b94ee28b8e3a000000000000", @ANYRES16=r2, @ANYBLOB="080029bd7000fcdbdf251300000008000100040000000600120106000000"], 0x24}}, 0x240480d5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB, @ANYBLOB="2c6408000000cd7e00ec1b4df26590f35d41c05b923492c71f7b8ccece9a58733aebacc38555f5e7492f956704f4ff7254b6f4dc99112c56ed237fd8aea024e1de3483cac4c986c5", @ANYRESHEX=0x0, @ANYBLOB]) fchown(0xffffffffffffffff, 0x0, r3) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f00000001c0)) 02:24:45 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pipe(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000380)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'io'}]}, 0x4) 02:24:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) lchown(&(0x7f00000000c0)='./bus\x00', 0x0, 0xffffffffffffffff) clone(0x10020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000100)=""/249, 0x37, 0xf9, 0x1}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/keys\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x705, 0x0, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x1078}}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'dummy0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="03000000359f9d0508a783f8fc0d8cb06fe4304bee74af06cdf197fecc4b3bd6dcac7e4dbb0d99ba5d554ddf8f7d043ffb7f2f5d31229f9e29dc92dd89e6bc1d9e6eb3a3a27058f9619d6dca7108d8371461e4fa725325a7a7f4553646e4a6e93a4c887fefcbc42d459a7f6edf66b428f765a8bf95cacdadb29a73bd355b4117d60d44d7b60b5d10928f99290776f9b74256187061872aa9a9331aab739b3bc8a1e908745e134e7f8053b15a4660a8c4a723325a23deb02fd5f3b6361fe09a0000000001000000000000000000008002000000f52bfd90dc39cda095a453f8c9ef4c91e301e1719fa2e5ea2fc58c4de25c226d20e87034318244f4c67a5fa7cd5d6b4bfbfba790479eef512d60e2d1700669e1609fd78a582c26af75"]}) rmdir(&(0x7f0000000000)='./bus\x00') 02:24:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB]) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000340)) dup(0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x1600bd78, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x21c, 0xb8, 0x0, 0x1c030011, 0xb8, 0x64000000, 0x188, 0x188, 0x188, 0x188, 0x188, 0x42f, 0x0, {[{{@ip={@multicast1=0xe000e400, @remote}, 0xa000000, 0x70, 0xb8, 0x0, {0x900000000000000, 0x3e00000000000000}}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0xec00000000000000}}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94, 0x0, {0xa}}, {0x24}}}}, 0x278) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4e83, 0xcd) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 02:24:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pipe(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000380)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'io'}]}, 0x4) 02:24:45 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x2) 02:24:45 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pipe(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000380)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'io'}]}, 0x4) 02:24:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) [ 239.356597][ T29] audit: type=1800 audit(1593224685.905:7): pid=8870 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15912 res=0 [ 239.375925][ T2512] usb 5-1: new high-speed USB device number 8 using dummy_hcd 02:24:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 02:24:46 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, "0164e9c873a71849"}) mkdir(&(0x7f0000000000)='./file0\x00', 0x4e) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000001940)='./file0\x00', 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000440)=""/159, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000380)={0x1, 'vlan0\x00'}) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x400caeaa, &(0x7f00000003c0)={0x5b, 0x6}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="2400000008eaef31f2da6a50424dd45fd42f3b603d3b4fa6fea98f89850f6385bd44525796c50bedc90b5a72458cb99a3c31b0d68d1f80b6c4c2f3f21f3444038c1723358a1ea8e459389d389c6678ce74c0b3f2ff8008f1cfde4093ceb41205b48aedefb7efd8b12ea241590ce4c34a6066bb38eb9f89d99e0a97e714bd453e0db793a7e7a55c0d96d8f14fb8ef656d62783f10ff1945128c4ab2e80f144d40dd1b1b89025095db3b0427acb19130d225b94ee28b8e3a000000000000", @ANYRES16=r2, @ANYBLOB="080029bd7000fcdbdf251300000008000100040000000600120106000000"], 0x24}}, 0x240480d5) socket(0x0, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB, @ANYBLOB="2c6408000000cd7e00ec1b4df26590f35d41c05b923492c71f7b8ccece9a58733aebacc38555f5e7492f956704f4ff7254b6f4dc99112c56ed237fd8aea024e1de3483cac4c986c5", @ANYRESHEX=0x0, @ANYBLOB]) fchown(0xffffffffffffffff, 0x0, r3) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f00000001c0)) [ 239.655418][ T2512] usb 5-1: Using ep0 maxpacket: 16 02:24:46 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pipe(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000380)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'io'}]}, 0x4) 02:24:46 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc494) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 239.775744][ T2512] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 239.800318][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.827232][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.838994][ T2512] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 239.857642][ T2512] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 239.919044][ T2512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.008289][ T2512] usb 5-1: config 0 descriptor?? [ 240.491986][ T2512] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0006/input/input15 [ 240.556940][ T2512] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0006/input/input16 [ 240.705050][ T2512] kye 0003:0458:5013.0006: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 240.775395][ T2512] usb 5-1: USB disconnect, device number 8 02:24:47 executing program 1: mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000040)='pstore\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1140e1, 0x0) 02:24:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000340)) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="3d9c73742e6251ce29273475bbef981cce5fe47aaa79fb8e8c862b0caf3f0a97646edb378f6b448ced083d756b5f4617367d0fbb09032b08d7b3fe1bf027b6b5c30771ae35a78dd2bb21c7addfb356746709ca4807501b9ca1c3a1cea6459515903a9827ac3e759510f88371c68b489d3417dce0c0aa2bb5aa8546e7cc391aaee3d6beb3aa0080b6597229504e269df4"], 0x190}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x1600bd78, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x21c, 0xb8, 0x0, 0x1c030011, 0xb8, 0x64000000, 0x188, 0x188, 0x188, 0x188, 0x188, 0x42f, 0x0, {[{{@ip={@multicast1=0xe000e400, @remote}, 0xa000000, 0x70, 0xb8, 0x0, {0x900000000000000, 0x3e00000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x88000000}}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0xec00000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6400]}}}}], {{[], 0x0, 0x70, 0x94, 0x0, {0xa}}, {0x24}}}}, 0x278) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4e83, 0xcd) r4 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x208200) sendfile(r0, r4, 0x0, 0x8000fffffffe) 02:24:47 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pipe(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000380)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x6ca, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_out(r1, 0x0, &(0x7f0000000280)) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x0) 02:24:47 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x2) 02:24:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b4b, &(0x7f0000000040)={0x300, &(0x7f0000000000)=[{}]}) 02:24:47 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, "0164e9c873a71849"}) mkdir(&(0x7f0000000000)='./file0\x00', 0x4e) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000001940)='./file0\x00', 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000440)=""/159, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000380)={0x1, 'vlan0\x00'}) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x400caeaa, &(0x7f00000003c0)={0x5b, 0x6}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="2400000008eaef31f2da6a50424dd45fd42f3b603d3b4fa6fea98f89850f6385bd44525796c50bedc90b5a72458cb99a3c31b0d68d1f80b6c4c2f3f21f3444038c1723358a1ea8e459389d389c6678ce74c0b3f2ff8008f1cfde4093ceb41205b48aedefb7efd8b12ea241590ce4c34a6066bb38eb9f89d99e0a97e714bd453e0db793a7e7a55c0d96d8f14fb8ef656d62783f10ff1945128c4ab2e80f144d40dd1b1b89025095db3b0427acb19130d225b94ee28b8e3a000000000000", @ANYRES16=r2, @ANYBLOB="080029bd7000fcdbdf251300000008000100040000000600120106000000"], 0x24}}, 0x240480d5) socket(0x0, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB, @ANYBLOB="2c6408000000cd7e00ec1b4df26590f35d41c05b923492c71f7b8ccece9a58733aebacc38555f5e7492f956704f4ff7254b6f4dc99112c56ed237fd8aea024e1de3483cac4c986c5", @ANYRESHEX=0x0, @ANYBLOB]) fchown(0xffffffffffffffff, 0x0, r3) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f00000001c0)) 02:24:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) lchown(0x0, 0x0, 0x0) quotactl(0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0xa, 0x0) keyctl$revoke(0x3, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240408d1, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0xffffffff, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x18) [ 241.531528][ T29] audit: type=1800 audit(1593224688.086:8): pid=8968 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15868 res=0 [ 241.705296][ T2512] usb 5-1: new high-speed USB device number 9 using dummy_hcd 02:24:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f00000000c0)) 02:24:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x10000000000000e0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2002) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 02:24:48 executing program 3: r0 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r0, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r1, 0xc) [ 241.975286][ T2512] usb 5-1: Using ep0 maxpacket: 16 02:24:48 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) listen(r0, 0x0) [ 242.105823][ T2512] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 02:24:48 executing program 2: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000000)=';\x00\xa1\x8am\xe7\x96\x0f\xd0\xec\xd8\xdc\x8f\xe05/\xd5f\xcb\xd5\xabE', 0x0) ftruncate(r1, 0xe901) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x40080}) lseek(r1, 0x0, 0x3) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a30472153f8d0163ba0116b29d0d89f0adec38629fb8330a247397909073c68801fa10c93d95e81dfe0c5188d29d2cb05cc20e54cfa8369ad38bfd26c202f634c0efdff2879d54308ba40a7a40260fb156011e362804c82e4a073f88a5b7bb7da01692360bc98048b4267623eae5a34858acebd7f847a2e53ddb11f004402b539fa33adbf9dfccc0cadf5302baff90629276abfd14ad1edd93f1d"], 0x99) [ 242.149262][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 02:24:48 executing program 3: clone(0x2000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x434, 0x2e4, 0x2e4, 0x2e4, 0x2e4, 0x2e4, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x4, 0x0, {[{{@ip={@dev, @rand_addr, 0x0, 0x0, '\x00', 'sit0\x00'}, 0x0, 0x1f4, 0x250, 0x0, {}, [@common=@addrtype={{0x2c, 'addrtype\x00'}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'syzkaller0\x00', {0x204, 0x0, 0x40, 0x0, 0x0, 0x28000000, 0x8}}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@ipv4}}}, {{@ip={@multicast1, @dev, 0x0, 0x0, 'veth1_to_bond\x00', 'sit0\x00'}, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xbc, 0x0, {}, [@common=@unspec=@cpu={{0x28, 'cpu\x00'}}]}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x4e1) [ 242.260271][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 02:24:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000340)) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="3d9c73742e6251ce29273475bbef981cce5fe47aaa79fb8e8c862b0caf3f0a97646edb378f6b448ced083d756b5f4617367d0fbb09032b08d7b3fe1bf027b6b5c30771ae35a78dd2bb21c7addfb356746709ca4807501b9ca1c3a1cea6459515903a9827ac3e759510f88371c68b489d3417dce0c0aa2bb5aa8546e7cc391aaee3d6beb3aa0080b6597229504e269df4"], 0x190}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x1600bd78, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x21c, 0xb8, 0x0, 0x1c030011, 0xb8, 0x64000000, 0x188, 0x188, 0x188, 0x188, 0x188, 0x42f, 0x0, {[{{@ip={@multicast1=0xe000e400, @remote}, 0xa000000, 0x70, 0xb8, 0x0, {0x900000000000000, 0x3e00000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x88000000}}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0xec00000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6400]}}}}], {{[], 0x0, 0x70, 0x94, 0x0, {0xa}}, {0x24}}}}, 0x278) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4e83, 0xcd) r4 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x208200) sendfile(r0, r4, 0x0, 0x8000fffffffe) 02:24:48 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 242.307975][ T2512] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 242.376653][ T2512] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 242.407099][ T2512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.437027][ T2512] usb 5-1: config 0 descriptor?? [ 242.547985][ T29] audit: type=1800 audit(1593224689.106:9): pid=9022 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15928 res=0 [ 242.922119][ T2512] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0007/input/input17 [ 242.979222][ T2512] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0007/input/input18 [ 243.104011][ T2512] kye 0003:0458:5013.0007: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 243.210422][ T2512] usb 5-1: USB disconnect, device number 9 02:24:50 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:24:50 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="0000001000000000e2"]) 02:24:50 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000080000e2"]) 02:24:50 executing program 1: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x145042, 0x0) sendfile(r1, r3, 0x0, 0x2000005) 02:24:50 executing program 0: clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x575de567c4c96d5b, 0x0, 0x0, 0x0, 0x0) 02:24:50 executing program 5: exit(0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000140)='\x05th0\x00\xd2\xbd\xed\xdf\xa3uR\"\x1a\r\x10\x0e\xb9\x88Y\xbfgm\xbe\x03r\xe6F\x15\xa7;\xe8$S\xe1$\x96\xb1\xbep1&\xac\x0eG\x12\xe8\x98]\x19,B\xedc\x1c\xe3\xd9V9\xdd\x0f\x13^?\x9d\xebb@z]\x96\x91\x1c/\x15v\xef\xd1\xcf\xce\x97&q\x06\xc7u\xc2?\xf6\xbfN\xf7#\xc6\xdc\x8b\x8f0\xdc\xba Q\x7f~\xa9\xce!\x00\x00\x00\x00\x00\x00\x00\x00\xc1\xaaDB\xd4\xc2b\xaa\x84\xef \xea\x9b\x9f=[\x10\xb5M\xb6\x1f\xc4\xc4!S\x85\x0f\xab\x95\xf7\xba\xd0\xf5\\\x18\xf6\x95{l\xda\xdc\xc1a\x8e\xdd\xa6\xb8\x17)\x1c\xb7\x1ak\x02\xb4\xf8\x1d\xc23\xbc\x13\xcc\xee\xe1\x83\xe2\x05_v\xf7l\x86qg\xa9\a9\xdb\x81\x1cq\x96T\x17\x1c\v7\xb3Q\xee#\xcc\xf8z\x8f\x1b\tRH\\?)\xc3\xd3\xcbC\xebN\xf3\xeb_\x0fh\xd8\xed!\x1d\xd0.\xadz%\x17\x97aX/\xaa\xc8\x06\x1d\f\xca\xd4\xebq\n\x1b\x7f\"\xf5\x8e\x8f]g\xb4\xd9\x9e5\xb1\x15\xc6\x06\xf4A\x1d\xa0\xc6\xb5\xe0\xce\xea\xa7\xf0\xe9>\x80\x90\x9a\x14/r;Xl\xbf\x06\x18\x06\x88\x90\xf2\xe6\x9e\xc6\x1ex\xbe\x17\xfc\x82X\"D\xd5\x12~6T\xa9\x89\xeb\xb1\xb9%@ D\xfb\xb7\x15\xcf\x7f\xa2\xf4\fr\xf9\xf1\x95\xbf\xeccK\xa8g\x90\x80\x12\x7f\'\xea\xb1\x9c\x87\xad\xa5|[\x14\xe1D\x81j\nV\xd6w%\xd9L\xc55<~\xdd\t>\x92\xf7.M\x91\xed\xcb\xc5\xb7\xd8C', 0x40, 0x0, 0x0) 02:24:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) close(r0) [ 243.733784][ T9070] IPVS: ftp: loaded support on port[0] = 21 02:24:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 02:24:50 executing program 1: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x79) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000100)="0400", 0x2, 0x20008002, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 02:24:50 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)={0x0, 0xffffffffffffffe2, 0x4}) 02:24:50 executing program 1: clone(0x200300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e6700000000000000000000000000000000000000000000000000000018040000000000000c0000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cd21b1ef7a584cf100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000027327243426c7d2d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000019d129f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c770000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff00000000"]}, 0xa38) 02:24:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) [ 244.034913][ T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 244.061498][ T9121] ebt_among: dst integrity fail: 200 [ 244.135129][ T7] tipc: TX() has been purged, node left! [ 244.294917][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 244.415158][ T23] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 244.428108][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.439532][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.449628][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 244.462614][ T23] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 244.471768][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.484052][ T23] usb 5-1: config 0 descriptor?? [ 245.024824][ T23] usbhid 5-1:0.0: can't add hid device: -71 [ 245.030966][ T23] usbhid: probe of 5-1:0.0 failed with error -71 [ 245.045838][ T23] usb 5-1: USB disconnect, device number 10 02:24:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:24:52 executing program 3: open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 02:24:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) 02:24:52 executing program 1: r0 = syz_open_procfs(0x0, 0xffffffffffffffff) close(r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 02:24:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002340)=""/4069, 0xfe5}], 0x1, 0x0, 0x0, 0x1f4}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 02:24:52 executing program 5: request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)='{\x00', 0x0) 02:24:52 executing program 5: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES64]) 02:24:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@setlink={0x20, 0x13, 0x32b}, 0x20}}, 0x0) 02:24:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_bond\x00'}) 02:24:52 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="0000006428000000e2"]) 02:24:52 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003080800418e00000004fcff", 0x58}], 0x1) 02:24:52 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 245.924760][ T2511] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 246.175769][ T2511] usb 5-1: Using ep0 maxpacket: 16 [ 246.296236][ T2511] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 246.321423][ T2511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.347165][ T2511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.363815][ T2511] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 246.388314][ T2511] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 246.421585][ T2511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.450840][ T2511] usb 5-1: config 0 descriptor?? [ 247.004591][ T2511] usbhid 5-1:0.0: can't add hid device: -71 [ 247.010736][ T2511] usbhid: probe of 5-1:0.0 failed with error -71 [ 247.036458][ T2511] usb 5-1: USB disconnect, device number 11 02:24:54 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:24:54 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="82e7", 0x2}, {&(0x7f0000000180)="d0bdd0d6588a59feefcc0f00aae30a558abc1394", 0x14}], 0x2}}], 0x1, 0x2406a464) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000100)="d840", 0x2) 02:24:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fcff", 0x58}], 0x1) 02:24:54 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802102001dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 02:24:54 executing program 2: syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000caa"], 0x0) 02:24:54 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:24:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) 02:24:54 executing program 2: r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmmsg$sock(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@timestamping={{0x10, 0x1, 0x25, 0x7ff}}], 0x10}}], 0x2, 0x0) 02:24:54 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:24:54 executing program 5: clone(0x1000000000011, &(0x7f0000000600), 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x1000006, 0x0) 02:24:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r0, &(0x7f0000001580)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x0, @remote}, 0x80, 0x0}}], 0x1, 0x0) 02:24:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvmmsg(r0, &(0x7f0000003d40)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000140)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "4acdbf0522fd6a5d805f1e4b834dfb00ea002857819706542175027b75617fc5", "3da9874f30c6f9e582c60e20a3d14f7d", {'\r\x00', "479073564b7cd535802e40187fe308c3"}}}}}}}, 0x0) [ 247.824654][ T2511] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 248.087738][ T2511] usb 5-1: Using ep0 maxpacket: 16 [ 248.204509][ T2511] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 248.215442][ T2511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.228259][ T2511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.239124][ T2511] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 248.253319][ T2511] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 248.263056][ T2511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.277335][ T2511] usb 5-1: config 0 descriptor?? [ 248.814373][ T2511] usbhid 5-1:0.0: can't add hid device: -71 [ 248.820426][ T2511] usbhid: probe of 5-1:0.0 failed with error -71 [ 248.830302][ T2511] usb 5-1: USB disconnect, device number 12 02:24:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:24:55 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x194, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x244, 0x244, 0x244, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x94, 0xd4, 0x0, {}, [@common=@ttl={{0x24, 'ttl\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1f}}}, {{@uncond, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@addrtype={{0x2c, 'addrtype\x00'}}]}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "0f819477bb40b7dc5e9e6a5cd3de4ddf1b4d722442753e7b6fd4645c8f08"}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x334) 02:24:55 executing program 2: syz_mount_image$tmpfs(&(0x7f0000001280)='tmpfs\x00', &(0x7f00000012c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={[{@nr_blocks={'nr_blocks', 0x3d, [0x37]}}]}) 02:24:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4}}], 0x1, 0x40000002, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 02:24:55 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:24:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_tcp_int(r1, 0x6, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x4) 02:24:55 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='user.syz\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 02:24:55 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x800000000000013, 0x1, 0x7, 0x2, 0x0, 0x0, 0x6101a, 0xec9be7f3b59bf870, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x0, 0x4, 0x204000, 0x0, 0x0, 0x1, 0x1001}, 0x0, 0x0, 0xffffffffffffffff, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) syz_genetlink_get_family_id$team(0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) write$binfmt_elf64(r1, &(0x7f0000001240)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], 0xa) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0xffffffffffffffff, 0x1ee) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x108000, 0x3, 0x4ba4}, 0x14) shutdown(r1, 0x1) 02:24:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="78010000170001000000fbfffbfffffffe8000010000000000000000060c6a86170a33cd00000000ac141400000000000000000000000000ac142caa001000000000000000000000ac1414bb0000de0d6c1dc62100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000030080fa000000765100000000000000082b0000000100000002000000000a00000006000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000023d252062bb4a3e34d00000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000037f38e0a59a44125ffff0000010000000000040044000500fe8000000000000000000000000000bb0000000032"], 0x178}}, 0x0) 02:24:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x4) ptrace$cont(0x20, r0, 0x0, 0x0) 02:24:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b80)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x1c, 0x0}}], 0x1, 0x0) 02:24:56 executing program 0: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RLERRORu(r0, 0x0, 0x0) [ 249.600762][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 249.634230][ T2512] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 249.904157][ T2512] usb 5-1: Using ep0 maxpacket: 16 [ 250.024225][ T2512] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 250.035099][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.047796][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.058996][ T2512] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 250.086920][ T2512] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 250.118563][ T2512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.136973][ T2512] usb 5-1: config 0 descriptor?? [ 250.684225][ T2512] usbhid 5-1:0.0: can't add hid device: -71 [ 250.690381][ T2512] usbhid: probe of 5-1:0.0 failed with error -71 [ 250.702848][ T2512] usb 5-1: USB disconnect, device number 13 02:24:57 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:24:57 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) 02:24:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000680)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000004a80)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYRES16, @ANYRESDEC], 0x0) bind$alg(r0, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0x35a3aad1) socket(0x1, 0x803, 0x0) r2 = socket(0x2b, 0x6, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000002900)=""/4096, 0xfffffe6d}], 0x1, &(0x7f0000001400)=""/123, 0x7b, 0x10}, 0x0) 02:24:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:24:57 executing program 1: syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60352668004484dffe800000000000000000ecffffff00aafe8000000000000000000000000000aa04298a32895dbc35acad3bd300000000628bf289000086dd080088be0000000010000000010000000000264e6f240e9b18d667b02d0328cb9a0000080022eb0000000020"], 0x0) 02:24:57 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 251.195294][ T29] audit: type=1804 audit(1593224697.757:10): pid=9351 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir339316677/syzkaller.66SJlr/34/bus" dev="sda1" ino=16010 res=1 02:24:57 executing program 1: utimes(0x0, &(0x7f0000000140)={{0xc}}) readv(0xffffffffffffff9c, &(0x7f00000016c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) mknod(&(0x7f0000000100)='./bus\x00', 0x8000, 0x86128) r0 = open(&(0x7f0000000040)='./bus\x00', 0x861, 0x0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000240)="fa1204a49155ce1e00", 0x9}], 0x1, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140), 0x8}], 0x28d, 0x0) 02:24:57 executing program 5: pipe(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000001740)=""/4096, 0x1000) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) fcntl$setstatus(r3, 0x4, 0x80) pwritev(r3, &(0x7f00000003c0), 0x273, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x10, r2, 0x0) write(r1, &(0x7f0000000100)='w', 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) writev(r1, &(0x7f0000000200)=[{0x0}], 0x10000000000000ab) execve(0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') 02:24:58 executing program 1: syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff09000000b9cb86dd6000000000283aff21405aafca51147426c00f82783347a0fe8000000000000000000000000000aa8900907800000000ce5d626bc97ff373c4be492a8da30fe9ff01000000000000000000000000000167832f37b1dde4075c99b62c15e0343c6d06fc0a6eb12c6fb5e191a2e94632d36bddbcf4a1c13ae6972ad286607e75df8f2349a12ab6b5b964b245c5b65a61dbf771e1df59665c310f50d7db0587bf17d2eb5467402379"], 0x0) [ 251.564025][ T5] usb 5-1: new high-speed USB device number 14 using dummy_hcd 02:24:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:24:58 executing program 1: r0 = socket(0x18, 0x1, 0x0) connect(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00182e5c6ffa0000feef"], 0x1c) 02:24:58 executing program 1: syz_emit_ethernet(0x12e, &(0x7f0000000180)=ANY=[@ANYBLOB="2f000000000000000000000086dd6020000000f82ffffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) [ 251.813944][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 251.946912][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 251.964812][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.991554][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.013211][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 252.060977][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 252.082599][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.111007][ T5] usb 5-1: config 0 descriptor?? [ 252.673957][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 252.680026][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 252.693648][ T5] usb 5-1: USB disconnect, device number 14 02:24:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:24:59 executing program 1: open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) open(&(0x7f0000000040)='./file0\x00', 0x400000003fd, 0x0) 02:24:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:24:59 executing program 0: 02:24:59 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) 02:24:59 executing program 5: 02:24:59 executing program 0: 02:24:59 executing program 5: pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000100)='erspan0\x00') ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f00000000c0)) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x1, 0x7, 0x3, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFACCT_BYTES={0xc}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffff80}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x98}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x42410e86}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 02:24:59 executing program 1: syz_emit_ethernet(0x12e, &(0x7f0000000180)=ANY=[@ANYBLOB="2f000000000000000000000086dd6020000000f82ffffe8000000000000000000000000000bbff02000000000000000000000000000103"], 0x0) 02:24:59 executing program 0: syz_emit_ethernet(0x826, &(0x7f0000000380)={@broadcast, @local, @val, {@ipv4}}, 0x0) 02:24:59 executing program 1: 02:25:00 executing program 0: [ 253.513870][ T5] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 253.753870][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 253.873824][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 253.884739][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.913706][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.923559][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 253.953715][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 253.963744][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.996633][ T5] usb 5-1: config 0 descriptor?? [ 254.553764][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 254.559947][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 254.572294][ T5] usb 5-1: USB disconnect, device number 15 02:25:01 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x2) 02:25:01 executing program 1: 02:25:01 executing program 0: 02:25:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:01 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) 02:25:01 executing program 5: 02:25:01 executing program 5: 02:25:01 executing program 1: 02:25:01 executing program 0: 02:25:01 executing program 5: 02:25:01 executing program 1: 02:25:01 executing program 0: 02:25:02 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x2) 02:25:02 executing program 1: 02:25:02 executing program 5: 02:25:02 executing program 0: 02:25:02 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) 02:25:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:02 executing program 5: 02:25:02 executing program 1: 02:25:02 executing program 0: 02:25:02 executing program 5: 02:25:02 executing program 1: 02:25:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:02 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x2) 02:25:02 executing program 0: 02:25:02 executing program 1: 02:25:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:03 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:03 executing program 5: 02:25:03 executing program 1: 02:25:03 executing program 0: 02:25:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:03 executing program 5: 02:25:03 executing program 0: 02:25:03 executing program 1: 02:25:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:03 executing program 5: 02:25:03 executing program 1: 02:25:04 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:04 executing program 0: 02:25:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:04 executing program 5: 02:25:04 executing program 1: 02:25:04 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:04 executing program 0: 02:25:04 executing program 5: 02:25:04 executing program 1: 02:25:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:04 executing program 0: 02:25:04 executing program 5: 02:25:05 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:05 executing program 0: 02:25:05 executing program 1: 02:25:05 executing program 5: 02:25:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:05 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:05 executing program 1: 02:25:05 executing program 0: 02:25:05 executing program 5: 02:25:05 executing program 1: 02:25:05 executing program 0: 02:25:05 executing program 5: 02:25:06 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:06 executing program 1: 02:25:06 executing program 5: 02:25:06 executing program 0: 02:25:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:06 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:06 executing program 5: 02:25:06 executing program 0: 02:25:06 executing program 1: 02:25:06 executing program 5: 02:25:06 executing program 0: 02:25:06 executing program 1: [ 259.853473][ T2485] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 260.123132][ T2485] usb 5-1: device descriptor read/64, error 18 02:25:07 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:07 executing program 5: 02:25:07 executing program 0: 02:25:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:07 executing program 1: [ 260.512977][ T2485] usb 5-1: device descriptor read/64, error 18 [ 260.783119][ T2485] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 261.062917][ T2485] usb 5-1: device descriptor read/64, error 18 [ 261.452933][ T2485] usb 5-1: device descriptor read/64, error 18 [ 261.573028][ T2485] usb usb5-port1: attempt power cycle [ 262.292827][ T2485] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 262.383125][ T2485] usb 5-1: Invalid ep0 maxpacket: 0 02:25:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:09 executing program 1: 02:25:09 executing program 0: 02:25:09 executing program 5: 02:25:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:09 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 262.542806][ T2485] usb 5-1: new high-speed USB device number 19 using dummy_hcd 02:25:09 executing program 5: 02:25:09 executing program 0: 02:25:09 executing program 1: 02:25:09 executing program 5: 02:25:09 executing program 5: 02:25:09 executing program 1: [ 263.022877][ T2485] usb 5-1: device not accepting address 19, error -71 [ 263.033204][ T2485] usb usb5-port1: unable to enumerate USB device [ 263.402713][ T2485] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 263.712710][ T2485] usb 5-1: device descriptor read/64, error 18 [ 264.122608][ T2485] usb 5-1: device descriptor read/64, error 18 [ 264.392777][ T2485] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 264.682615][ T2485] usb 5-1: device descriptor read/64, error 18 [ 265.092578][ T2485] usb 5-1: device descriptor read/64, error 18 [ 265.214084][ T2485] usb usb5-port1: attempt power cycle 02:25:12 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:12 executing program 0: 02:25:12 executing program 5: 02:25:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:12 executing program 1: 02:25:12 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:12 executing program 0: 02:25:12 executing program 1: 02:25:12 executing program 5: 02:25:12 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:12 executing program 0: 02:25:12 executing program 5: [ 265.923721][ T9693] syz-executor.2 (9693) used greatest stack depth: 20632 bytes left [ 266.242637][ T2485] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 266.334498][ T2485] usb 5-1: Invalid ep0 maxpacket: 0 [ 266.492452][ T2485] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 266.582527][ T2485] usb 5-1: Invalid ep0 maxpacket: 0 [ 266.588121][ T2485] usb usb5-port1: unable to enumerate USB device 02:25:15 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:15 executing program 1: 02:25:15 executing program 0: 02:25:15 executing program 2: setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:15 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:15 executing program 5: 02:25:15 executing program 1: 02:25:15 executing program 5: 02:25:15 executing program 0: 02:25:15 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:15 executing program 2: setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:15 executing program 1: [ 269.172253][ T2485] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 269.412186][ T2485] usb 5-1: Using ep0 maxpacket: 16 [ 269.532427][ T2485] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 269.546293][ T2485] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 269.557064][ T2485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.569607][ T2485] usb 5-1: config 0 descriptor?? [ 269.617075][ T2485] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 02:25:18 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:18 executing program 5: 02:25:18 executing program 0: 02:25:18 executing program 2: setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:18 executing program 1: 02:25:18 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 271.865680][ T2510] usb 5-1: USB disconnect, device number 24 02:25:18 executing program 1: 02:25:18 executing program 0: 02:25:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:18 executing program 5: 02:25:18 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:18 executing program 0: [ 272.441971][ T2510] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 272.691964][ T2510] usb 5-1: Using ep0 maxpacket: 16 [ 272.821969][ T2510] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 272.834893][ T2510] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 272.844436][ T2510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.856453][ T2510] usb 5-1: config 0 descriptor?? [ 272.928443][ T2510] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 02:25:21 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:21 executing program 1: 02:25:21 executing program 5: 02:25:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:21 executing program 0: 02:25:21 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 274.967087][ T2512] usb 5-1: USB disconnect, device number 25 02:25:21 executing program 1: 02:25:21 executing program 5: 02:25:21 executing program 0: 02:25:21 executing program 1: 02:25:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:21 executing program 0: [ 275.481620][ T2512] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 275.721733][ T2512] usb 5-1: Using ep0 maxpacket: 16 [ 275.841796][ T2512] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 275.858934][ T2512] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 275.868582][ T2512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.884248][ T2512] usb 5-1: config 0 descriptor?? [ 275.922797][ T2512] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 02:25:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:24 executing program 1: 02:25:24 executing program 5: 02:25:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:24 executing program 0: 02:25:24 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 278.077214][ T2510] usb 5-1: USB disconnect, device number 26 02:25:24 executing program 5: 02:25:24 executing program 1: 02:25:24 executing program 0: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file1\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0)="eb3c906d6b667305", 0x8, 0x9}], 0x8080, 0x0) 02:25:24 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file1\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0)="eb3c906d6b6673050000000000000002", 0x10}], 0x8080, 0x0) 02:25:24 executing program 1: 02:25:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) [ 278.641356][ T2510] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 278.898229][ T2510] usb 5-1: Using ep0 maxpacket: 16 [ 279.023294][ T2510] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 279.040152][ T2510] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.051918][ T2510] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.062444][ T2510] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 279.075893][ T2510] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 279.085527][ T2510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.095524][ T2510] usb 5-1: config 0 descriptor?? [ 279.142759][ T2510] usbhid 5-1:0.0: can't add hid device: -22 [ 279.149257][ T2510] usbhid: probe of 5-1:0.0 failed with error -22 02:25:27 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:27 executing program 1: 02:25:27 executing program 0: 02:25:27 executing program 5: 02:25:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:27 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 281.182851][ T2512] usb 5-1: USB disconnect, device number 27 02:25:27 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa08060001080006040001"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:25:27 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000001c0)={0x1, [0x0]}) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000001880)=ANY=[@ANYBLOB="020000000100020000000000040000000000000008000000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000000000000000200000000000"], 0x34, 0x0) write$P9_RSTAT(r0, &(0x7f0000000080)={0x55, 0x7d, 0x2, {0x0, 0x4e, 0x9, 0x4, {0xa46baff8bc6c8974, 0x0, 0x1}, 0x30000000, 0x9, 0x78, 0x7, 0xb, 'asymmetric\x00', 0xb, 'asymmetric\x00', 0x0, '', 0x5, '}^\\@@'}}, 0x55) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="f2", 0xfffff, 0x0) 02:25:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="f2", 0xfffff, 0x0) 02:25:28 executing program 0: unshare(0x40000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'raw\x00', 0xa0028000}, &(0x7f0000000240)=0x54) 02:25:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ustat(0x1, &(0x7f0000000240)) [ 281.573434][ T9942] IPVS: ftp: loaded support on port[0] = 21 02:25:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) [ 281.692572][ T9942] IPVS: ftp: loaded support on port[0] = 21 [ 281.701046][ T2512] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 281.950955][ T2512] usb 5-1: Using ep0 maxpacket: 16 [ 282.001131][ T7] tipc: TX() has been purged, node left! [ 282.071284][ T2512] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 282.090987][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.115570][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.141153][ T2512] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 282.181006][ T2512] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 282.190313][ T2512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.218205][ T2512] usb 5-1: config 0 descriptor?? [ 282.272313][ T2512] usbhid 5-1:0.0: can't add hid device: -22 [ 282.278498][ T2512] usbhid: probe of 5-1:0.0 failed with error -22 02:25:30 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = epoll_create1(0x0) r5 = dup3(r3, r4, 0x0) setns(r5, 0x0) 02:25:30 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="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", 0xfa}, {0x0}, {&(0x7f00000001c0)}], 0x3}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 02:25:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @x25}, 0xd) 02:25:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:30 executing program 3: timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 284.316866][ T2512] usb 5-1: USB disconnect, device number 28 02:25:31 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700163da682530c0000053c27bc3376003639405cb4aed12f0040001500ae47a825d86800278dcff47df5bf00805acf4f8f36460204002479aed75d492b415bcee00a9fc0ebf8b0b14f2ac662e42924654e9620dd5c65a4b61e46905cc56561009a7aa0f84ed3372469898924e88f0796562202097f8daf1967be3985", 0x7f}], 0x4, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 02:25:31 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="665f07000005eb3014203833760035f300000000007dc0c6b1", 0x19}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0x0, 0x400000}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 02:25:31 executing program 5: syz_mount_image$tmpfs(&(0x7f0000001280)='tmpfs\x00', &(0x7f00000012c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mode={'mode'}}]}) [ 284.629194][T10056] ptrace attach of "/root/syz-executor.1"[10054] was attempted by "/root/syz-executor.1"[10056] [ 284.631495][T10057] ptrace attach of "/root/syz-executor.0"[10055] was attempted by "/root/syz-executor.0"[10057] 02:25:31 executing program 1: socket(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}]}, 0x34}}, 0x0) syz_open_procfs(0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 02:25:31 executing program 0: 02:25:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) [ 284.870865][ T2512] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 285.120743][ T2512] usb 5-1: Using ep0 maxpacket: 16 [ 285.251168][ T2512] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 285.270853][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.283389][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.294359][ T2512] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 285.308112][ T2512] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 285.317935][ T2512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.330564][ T2512] usb 5-1: config 0 descriptor?? [ 285.372216][ T2512] usbhid 5-1:0.0: can't add hid device: -22 [ 285.378290][ T2512] usbhid: probe of 5-1:0.0 failed with error -22 [ 285.420919][ T7] tipc: TX() has been purged, node left! 02:25:34 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r1, 0x100000001, 0x0, 0x2811ffff) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x20001280) 02:25:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendfile(r1, r0, 0x0, 0xedc0) 02:25:34 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private1, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 02:25:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:34 executing program 3: timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 287.445476][ T23] usb 5-1: USB disconnect, device number 29 [ 287.530962][T10100] FAT-fs (loop0): bogus number of FAT sectors [ 287.544359][T10100] FAT-fs (loop0): Can't find a valid FAT filesystem 02:25:34 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0x38}, @timestamp={0x44, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 02:25:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendfile(r1, r0, 0x0, 0xedc0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 02:25:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) [ 287.726631][T10100] FAT-fs (loop0): bogus number of FAT sectors [ 287.775711][T10100] FAT-fs (loop0): Can't find a valid FAT filesystem 02:25:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000380)='system.posix_acl_access\x00', 0x0, 0x34, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r0], 0xfffffdef) shutdown(r0, 0x1) 02:25:34 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c27bc3376003639405cb4aed1", 0x13}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 02:25:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000300)={'L-', 0xffffffff}, 0x16, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) clock_gettime(0x4, &(0x7f0000000040)) open(0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) [ 288.041859][ T23] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 288.155269][T10136] ptrace attach of "/root/syz-executor.0"[10135] was attempted by "/root/syz-executor.0"[10136] [ 288.280538][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 288.404031][ T23] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 288.418574][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.431969][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.443297][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 288.457747][ T23] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 288.468091][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.480082][ T23] usb 5-1: config 0 descriptor?? [ 289.030696][ T23] usbhid 5-1:0.0: can't add hid device: -71 [ 289.037241][ T23] usbhid: probe of 5-1:0.0 failed with error -71 [ 289.045865][ T23] usb 5-1: USB disconnect, device number 30 02:25:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:36 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c27bc3376003639405cb4aed12f0040001500ae47a825d86800278dcff47d01", 0x26}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 02:25:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000300)={'L-', 0xffffffff}, 0x16, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) clock_gettime(0x4, &(0x7f0000000040)) open(0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) 02:25:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="f2", 0xfffff, 0x0) [ 289.523646][T10166] ptrace attach of "/root/syz-executor.0"[10165] was attempted by "/root/syz-executor.0"[10166] [ 289.870335][ T17] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 290.110346][ T17] usb 5-1: Using ep0 maxpacket: 16 [ 290.230618][ T17] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 290.241552][ T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.252797][ T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.263316][ T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 290.276513][ T17] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 290.286590][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.299197][ T17] usb 5-1: config 0 descriptor?? 02:25:37 executing program 3: timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000300)={'L-', 0xffffffff}, 0x16, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) clock_gettime(0x4, &(0x7f0000000040)) open(0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) 02:25:37 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @broadcast, 0x0, 0x0, 'lblcr\x00', 0x0, 0x1}, {@empty}}, 0x44) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r3) creat(&(0x7f00000003c0)='./bus\x00', 0x0) 02:25:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 02:25:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) [ 290.528390][T10190] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:25:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f000058bfe4)="29000000140003b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) read(r0, &(0x7f0000000000)=""/239, 0xd00) [ 290.701140][ T457] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 290.840552][ T17] usbhid 5-1:0.0: can't add hid device: -71 [ 290.846994][ T17] usbhid: probe of 5-1:0.0 failed with error -71 [ 290.880500][ T17] usb 5-1: USB disconnect, device number 31 02:25:37 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:37 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xffffffffffffff01, 0x1}, 0x1040, 0x0, 0x20, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x4, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7ff, 0x0, 0xff, 0x8}, {0x2e, 0x2, 0x42, 0x7}, {0x9, 0x4, 0x3}, {0x3fd, 0x20, 0x3, 0x4d}, {0x2, 0xaa, 0x9, 0x9f}, {0xfff7, 0x4, 0x0, 0x1}]}) clock_gettime(0x0, 0x0) getpid() r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, 0x0, 0x0) gettid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x2b, 0x19, 0x12, 0xd, 0x8, 0x10000, 0x0, 0x0, 0x1}}) ioctl$RTC_UIE_OFF(r1, 0x7004) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x3}}, 0x0) write$binfmt_script(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/548], 0xad) clone(0x820103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000040)='./bus\x00', 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) 02:25:37 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:25:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) [ 291.382150][T10236] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 291.494698][T10236] rtc_cmos 00:00: Alarms can be up to one day in the future 02:25:38 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xffffffffffffff01, 0x1}, 0x1040, 0x0, 0x20, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x4, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7ff, 0x0, 0xff, 0x8}, {0x2e, 0x2, 0x42, 0x7}, {0x9, 0x4, 0x3}, {0x3fd, 0x20, 0x3, 0x4d}, {0x2, 0xaa, 0x9, 0x9f}, {0xfff7, 0x4, 0x0, 0x1}]}) clock_gettime(0x0, 0x0) getpid() r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, 0x0, 0x0) gettid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x2b, 0x19, 0x12, 0xd, 0x8, 0x10000, 0x0, 0x0, 0x1}}) ioctl$RTC_UIE_OFF(r1, 0x7004) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x3}}, 0x0) write$binfmt_script(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/548], 0xad) clone(0x820103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000040)='./bus\x00', 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 291.670535][ T2511] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 291.920304][ T2511] usb 5-1: Using ep0 maxpacket: 16 [ 291.946522][T10235] device ip6tnl1 entered promiscuous mode [ 292.040536][ T2511] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 292.058264][ T2511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.083979][ T2511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.099897][ T2511] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 292.122038][ T2511] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 292.136222][ T2511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.148002][ T2511] usb 5-1: config 0 descriptor?? [ 292.159694][T10240] device ip6tnl1 entered promiscuous mode [ 292.422446][ T2510] rtc_cmos 00:00: Alarms can be up to one day in the future [ 292.430002][ T2510] rtc_cmos 00:00: Alarms can be up to one day in the future [ 292.437571][ T2510] rtc_cmos 00:00: Alarms can be up to one day in the future [ 292.445133][ T2510] rtc_cmos 00:00: Alarms can be up to one day in the future [ 292.452545][ T2510] rtc rtc0: __rtc_set_alarm: err=-22 [ 292.700198][ T2511] usbhid 5-1:0.0: can't add hid device: -71 [ 292.706356][ T2511] usbhid: probe of 5-1:0.0 failed with error -71 [ 292.715157][ T2511] usb 5-1: USB disconnect, device number 32 02:25:40 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:40 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xffffffffffffff01, 0x1}, 0x1040, 0x0, 0x20, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x4, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7ff, 0x0, 0xff, 0x8}, {0x2e, 0x2, 0x42, 0x7}, {0x9, 0x4, 0x3}, {0x3fd, 0x20, 0x3, 0x4d}, {0x2, 0xaa, 0x9, 0x9f}, {0xfff7, 0x4, 0x0, 0x1}]}) clock_gettime(0x0, 0x0) getpid() r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, 0x0, 0x0) gettid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x2b, 0x19, 0x12, 0xd, 0x8, 0x10000, 0x0, 0x0, 0x1}}) ioctl$RTC_UIE_OFF(r1, 0x7004) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x3}}, 0x0) write$binfmt_script(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="cd57e1e12f627573202f6465764c72746330003973797374656d203a2d6367726f7570472f64d1504c657468302028776cac6e30766d6e6574302d25400a301c1834e8470238b4f5dc61f6048b9679c7af498912277a1c926aad16e006b008f36986ced40900016be866c0240cc9511adf21d20027529175ca6742518b279352bc5095a0500e33e283efdbe86e79ff437567eff49615000000000000000000000000000000000000000000000000000000000000003dc480b51591edaf807685a528f8e66299a250884c21e63a1259460cf27172902daa4069bd4972a50996dd6b6ad11f5845855ce2029569e5211707860927d060468b015d031d6ef6d5cad2dd1877946d089bc07ccbe6bab8fb952da8cee8ead314290de544687a2e0a536f7bf7dc6db7ea13dc65cf6c0397bb5a4df586cd10fcc34d4349cdc59be6a352719b98939bc9a134f2a5db97ce630b55ee474c29c38844b0a34212657e6fdf989b5d2f15614fb2158e5892df642bece74c370fb66ee30cd72381f1d4aa54c2a61c68ac6f66d28cc0499ccde6d9ce161e218c0e92b996967b14136da4acd616ff8e1a5100a6abd2848bf6aa1e07896b7b3382451bb7926c2c0fe2f64602ae48e9bc00294cf8ab1f06f860d78e1ef68796fa4ad0622b513163531e855c419266b2cc2b1a05295e2437f89c5803a069cce531d56d7d7dc19b83430908514934e66f123b75f6177c99f085b5235e849f01f4a8675232392d5d98e55dcf00"/548], 0xad) clone(0x820103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000040)='./bus\x00', 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) 02:25:40 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xffffffffffffff01, 0x1}, 0x1040, 0x0, 0x20, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x4, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7ff, 0x0, 0xff, 0x8}, {0x2e, 0x2, 0x42, 0x7}, {0x9, 0x4, 0x3}, {0x3fd, 0x20, 0x3, 0x4d}, {0x2, 0xaa, 0x9, 0x9f}, {0xfff7, 0x4, 0x0, 0x1}]}) clock_gettime(0x0, 0x0) getpid() r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, 0x0, 0x0) gettid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x2b, 0x19, 0x12, 0xd, 0x8, 0x10000, 0x0, 0x0, 0x1}}) ioctl$RTC_UIE_OFF(r1, 0x7004) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x3}}, 0x0) write$binfmt_script(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/548], 0xad) clone(0x820103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000040)='./bus\x00', 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) 02:25:40 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:25:40 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) [ 293.680200][T10286] device ip6tnl1 entered promiscuous mode 02:25:40 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:40 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xffffffffffffff01, 0x1}, 0x1040, 0x0, 0x20, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x4, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7ff, 0x0, 0xff, 0x8}, {0x2e, 0x2, 0x42, 0x7}, {0x9, 0x4, 0x3}, {0x3fd, 0x20, 0x3, 0x4d}, {0x2, 0xaa, 0x9, 0x9f}, {0xfff7, 0x4, 0x0, 0x1}]}) clock_gettime(0x0, 0x0) getpid() r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, 0x0, 0x0) gettid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x2b, 0x19, 0x12, 0xd, 0x8, 0x10000, 0x0, 0x0, 0x1}}) ioctl$RTC_UIE_OFF(r1, 0x7004) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="b0eab3f687a53821b95a1702772cf57c4c287ec6286e64ed915a8b815bc28690e04d264b532276c81150f51d984766aab3747de5f5f9aba69bcf93c8fdc1917f8919466cf1b971dfee49290c7ae61e0ea4153aa604bb323ce11f61ad15b5383f5aa20589b8e6b6e2fed2f7f525e7527feb4172df81028a2c98794eb309406009d9ede38f7d8d1d186985eeb50d118bf7708dddb8404760bf829b31ae65c1ce98656aa30b4f981a189e881b950c90c9840e2c309c7149232f62723df8c7733bdc8b2326e8b51f2243e25d2ee1a280000000a1e94b29aa862e5f07000000092ec00000000000000000002d0000003af2a292a2d40b1ebf9d8f17974cb8e361517df088c6681ba55d1fbdd0b3ff0000000600000000000000005ebdfc75d02f251799b2769132f5e3c1ab5fd5e0c4205028630297e8e5559a920a26d6c52c2b54470ffbfe7dbf653522e7881a04c3faa5beb934b0f4fd7416a0b78a7cd25f91ecc795dd09a07899c15d47efa0ed16a8627b0426a7002639cb0ca45fc882cf7ab05f7a848f0398481c94a62e426dcb5d34b70808e49a1821f7a5631947cbed0e4aa66d38971b5e09b8a926405ef790709147298a7320301ae6c12a4fd526b56d033c827df1718c51037842af0d2437aedbb58709b1503ccd16f30a24bc1d1ade9eaad1211fca3880f16dc88236acfc10e902f918920fbeec4f0802496ee9509d7d631c3bae3c00ab13facf66535c4adeb0d1b8596c1c944dd6a2d4d5e39d16393ca4615be100406a661edcb05d8c5975cbcfd967b5244a558a0afc78e5ce0d4c68a1f164fa85f4d9617d9ec4111f23207d3313cd4b3271bce7a8572c66d0ad61273ffe68597f", @ANYRES32=0x0, @ANYBLOB="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"], 0x3}}, 0x0) write$binfmt_script(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/548], 0xad) clone(0x820103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000040)='./bus\x00', 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) 02:25:40 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xffffffffffffff01, 0x1}, 0x1040, 0x0, 0x20, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x4, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7ff, 0x0, 0xff, 0x8}, {0x2e, 0x2, 0x42, 0x7}, {0x9, 0x4, 0x3}, {0x3fd, 0x20, 0x3, 0x4d}, {0x2, 0xaa, 0x9, 0x9f}, {0xfff7, 0x4, 0x0, 0x1}]}) clock_gettime(0x0, 0x0) getpid() r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, 0x0, 0x0) gettid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x2b, 0x19, 0x12, 0xd, 0x8, 0x10000, 0x0, 0x0, 0x1}}) ioctl$RTC_UIE_OFF(r1, 0x7004) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x3}}, 0x0) write$binfmt_script(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/548], 0xad) clone(0x820103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000040)='./bus\x00', 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 293.950687][ T2510] usb 5-1: new high-speed USB device number 33 using dummy_hcd 02:25:40 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 294.200155][ T2510] usb 5-1: Using ep0 maxpacket: 16 02:25:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:40 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:40 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xffffffffffffff01, 0x1}, 0x1040, 0x0, 0x20, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x4, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7ff, 0x0, 0xff, 0x8}, {0x2e, 0x2, 0x42, 0x7}, {0x9, 0x4, 0x3}, {0x3fd, 0x20, 0x3, 0x4d}, {0x2, 0xaa, 0x9, 0x9f}, {0xfff7, 0x4, 0x0, 0x1}]}) clock_gettime(0x0, 0x0) getpid() r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, 0x0, 0x0) gettid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x2b, 0x19, 0x12, 0xd, 0x8, 0x10000, 0x0, 0x0, 0x1}}) ioctl$RTC_UIE_OFF(r1, 0x7004) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x3}}, 0x0) write$binfmt_script(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/548], 0xad) clone(0x820103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000040)='./bus\x00', 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 294.320369][ T2510] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 294.355973][ T2510] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.410070][ T2510] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.444845][ T2510] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 294.488391][ T2510] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 294.517050][ T2510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.577212][ T2510] usb 5-1: config 0 descriptor?? 02:25:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x3b, 0x0, @private1, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 02:25:41 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000002004000000000000800200000000000000000000800000005003000050030000500300005003000050030000030000000000000000000000fe800000c000000000000000000000bbff020000400000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e657470636930000000000000000000000000d40400000000000000000000000000000000000000001d000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000027465616d5f736c6176655f310000000000000000000000000000000000000000000000008800000000000000000000000000000000000000000000000000000000ff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000fe18b61af10800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a60000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x3a, 0x0, @private1, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 02:25:41 executing program 0: add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="f2", 0xfffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={0x0, 0x0, 0xea}, &(0x7f0000000200)=ANY=[@ANYBLOB="656e633d706b63733120686173683d6e68706f6c7931841fbc1ed99100a5abc447a34c6604e63330350000000000000a9419d9faccb725d2b4dabe22000000000000000000000000000082"], &(0x7f00000000c0), &(0x7f0000000100)=""/234) [ 294.742376][T10333] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 02:25:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) [ 294.816760][T10338] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 294.849211][T10342] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 295.154782][ T2510] usbhid 5-1:0.0: can't add hid device: -71 [ 295.166693][ T2510] usbhid: probe of 5-1:0.0 failed with error -71 [ 295.186819][ T2510] usb 5-1: USB disconnect, device number 33 02:25:42 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:42 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000632000/0x3000)=nil, 0x3000, 0xa) clone3(0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x404000, 0x14) 02:25:42 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @private}, @private2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x96, 0x2, 0x0, 0x0, 0x7, 0xfc], 0x0, 0x0}}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 02:25:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x541d, &(0x7f0000000040)={0x0, 0x0}) 02:25:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:42 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x790000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 295.873331][T10366] syz-executor.2 (10366) used greatest stack depth: 19264 bytes left [ 295.909117][T10378] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 295.941147][T10378] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 295.951986][T10378] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 295.970154][ T17] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 295.971776][T10378] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 296.230014][ T17] usb 5-1: Using ep0 maxpacket: 16 [ 296.360314][ T17] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 296.371192][ T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.393556][ T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.405053][ T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 296.418921][ T17] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 296.429368][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.442379][ T17] usb 5-1: config 0 descriptor?? [ 296.979930][ T17] usbhid 5-1:0.0: can't add hid device: -71 [ 296.986165][ T17] usbhid: probe of 5-1:0.0 failed with error -71 [ 296.998749][ T17] usb 5-1: USB disconnect, device number 34 02:25:43 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:43 executing program 0: setitimer(0x0, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @broadcast, 0x0, 0x0, 'lblcr\x00', 0x0, 0x1}, {@empty}}, 0x44) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000100)=0x54) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)="bf", 0x1}], 0x1) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) pipe(&(0x7f0000000000)) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80000010008, 0x0) dup(0xffffffffffffffff) 02:25:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendfile(r1, r0, 0x0, 0xedc0) sendmsg(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[], 0x230}, 0x0) 02:25:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000002004000000000000800200000000000000000000800000005003000050030000500300005003000050030000030000000000000000000000fe800000c000000000000000000000bbff020000400000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e657470636930000000000000000000000000d40400000000000000000000000000000000000000001d000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000027465616d5f736c6176655f310000000000000000000000000000000000000000000000008800000000000000000000000000000000000000000000000000000000ff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000fe18b61af10800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a60000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private1, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) [ 297.386090][T10409] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 297.390913][T10408] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 02:25:44 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0xfffffdef) shutdown(r0, 0x1) [ 297.608310][ T29] audit: type=1804 audit(1593224744.171:11): pid=10409 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir017494575/syzkaller.6ifCls/100/bus" dev="sda1" ino=15794 res=1 [ 297.665373][T10415] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 297.729114][T10413] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:25:44 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="665f07000005eb3014203873bc3376000736f30000", 0x15}], 0x4, 0x0) request_key(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 297.879956][ T17] usb 5-1: new high-speed USB device number 35 using dummy_hcd 02:25:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @private=0xa010101}, @private2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x96, 0x2, 0x0, 0x0, 0x7, 0xfc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r4}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x40000000) 02:25:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xe0, 0x0) [ 297.925104][T10433] ptrace attach of "/root/syz-executor.1"[10432] was attempted by "/root/syz-executor.1"[10433] 02:25:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) [ 298.055111][T10438] Dead loop on virtual device ip6_vti0, fix it urgently! 02:25:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @private=0xa010101}, @private2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x96, 0x2, 0x0, 0x0, 0x7, 0xfc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r4}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x40000000) [ 298.096864][T10439] FAT-fs (loop1): bogus number of FAT sectors [ 298.112438][T10438] Dead loop on virtual device ip6_vti0, fix it urgently! [ 298.115672][T10439] FAT-fs (loop1): Can't find a valid FAT filesystem [ 298.128352][ T17] usb 5-1: Using ep0 maxpacket: 16 [ 298.250109][ T17] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 298.263213][T10439] FAT-fs (loop1): bogus number of FAT sectors [ 298.283817][T10439] FAT-fs (loop1): Can't find a valid FAT filesystem [ 298.305192][ T29] audit: type=1804 audit(1593224744.871:12): pid=10421 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir017494575/syzkaller.6ifCls/100/bus" dev="sda1" ino=15794 res=1 [ 298.331281][ T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.365434][ T29] audit: type=1804 audit(1593224744.921:13): pid=10413 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir017494575/syzkaller.6ifCls/100/bus" dev="sda1" ino=15794 res=1 [ 298.380894][T10452] Dead loop on virtual device ip6_vti0, fix it urgently! [ 298.413547][T10452] Dead loop on virtual device ip6_vti0, fix it urgently! [ 298.427979][ T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.438308][T10452] Dead loop on virtual device ip6_vti0, fix it urgently! [ 298.486159][ T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 298.538364][ T17] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 298.553537][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.563319][ T17] usb 5-1: config 0 descriptor?? [ 299.079773][ T17] usbhid 5-1:0.0: can't add hid device: -71 [ 299.085913][ T17] usbhid: probe of 5-1:0.0 failed with error -71 [ 299.101942][ T17] usb 5-1: USB disconnect, device number 35 02:25:47 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:47 executing program 0: setitimer(0x0, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @broadcast, 0x0, 0x0, 'lblcr\x00', 0x0, 0x1}, {@empty}}, 0x44) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000100)=0x54) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)="bf", 0x1}], 0x1) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) pipe(&(0x7f0000000000)) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80000010008, 0x0) dup(0xffffffffffffffff) 02:25:47 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x8, [@restrict, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "dc"}, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}, @array]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x90, 0x0, 0x3}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 02:25:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200005429b907405a8d639bef6844883fe974fa6245e560e46e3312bd45b6e9f44dc92575ccf778a81529cf415b0057f6bbb410a9f87588a163a9d6fb1663d662655739c904accf7b676515cfc8de1644bd7eff57a9d8156bc51550460957133ca9f621c78bc8be062eea75ae29bb444fb5fcf2543a2dc107a02864adc3a08ffded00e908447b21"], 0x48}}, 0x0) ioctl$KVM_GET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)) 02:25:47 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private1, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 300.503448][T10484] ptrace attach of "/root/syz-executor.5"[10481] was attempted by "/root/syz-executor.5"[10484] [ 300.682637][T10479] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 300.702990][ T29] audit: type=1804 audit(1593224747.271:14): pid=10498 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir017494575/syzkaller.6ifCls/101/bus" dev="sda1" ino=16316 res=1 02:25:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200005429b907405a8d639bef6844883fe974fa6245e560e46e3312bd45b6e9f44dc92575ccf778a81529cf415b0057f6bbb410a9f87588a163a9d6fb1663d662655739c904accf7b676515cfc8de1644bd7eff57a9d8156bc51550460957133ca9f621c78bc8be062eea75ae29bb444fb5fcf2543a2dc107a02864adc3a08ffded00e908447b21"], 0x48}}, 0x0) ioctl$KVM_GET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)) [ 300.769847][ T2485] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 300.808875][T10505] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 02:25:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200005429b907405a8d639bef6844883fe974fa6245e560e46e3312bd45b6e9f44dc92575ccf778a81529cf415b0057f6bbb410a9f87588a163a9d6fb1663d662655739c904accf7b676515cfc8de1644bd7eff57a9d8156bc51550460957133ca9f621c78bc8be062eea75ae29bb444fb5fcf2543a2dc107a02864adc3a08ffded00e908447b21"], 0x48}}, 0x0) ioctl$KVM_GET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)) [ 301.029887][ T2485] usb 5-1: Using ep0 maxpacket: 16 02:25:47 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)={[{@size={'size', 0x3d, [0x4d]}}]}) [ 301.169613][ T2485] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 301.207161][ T2485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.279620][ T2485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.332826][ T2485] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 02:25:47 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x5) [ 301.380291][ T2485] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 301.417278][ T2485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.454804][ T2485] usb 5-1: config 0 descriptor?? [ 302.009609][ T2485] usbhid 5-1:0.0: can't add hid device: -71 [ 302.015683][ T2485] usbhid: probe of 5-1:0.0 failed with error -71 [ 302.043853][ T2485] usb 5-1: USB disconnect, device number 36 02:25:50 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:50 executing program 0: timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="f2", 0xfffff, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) 02:25:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200005429b907405a8d639bef6844883fe974fa6245e560e46e3312bd45b6e9f44dc92575ccf778a81529cf415b0057f6bbb410a9f87588a163a9d6fb1663d662655739c904accf7b676515cfc8de1644bd7eff57a9d8156bc51550460957133ca9f621c78bc8be062eea75ae29bb444fb5fcf2543a2dc107a02864adc3a08ffded00e908447b21"], 0x48}}, 0x0) ioctl$KVM_GET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)) 02:25:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x100}}) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x4) dup2(r2, 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x80000, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x7) syz_read_part_table(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e21, @broadcast}, {0x6, @multicast}, 0xa, {0x2, 0x4e20, @loopback}, 'veth1_vlan\x00'}) 02:25:50 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:50 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000002004000000000000800200000000000000000000800000005003000050030000500300005003000050030000030000000000000000000000fe800000c000000000000000000000bbff020000400000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e657470636930000000000000000000000000d40400000000000000000000000000000000000000001d000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000027465616d5f736c6176655f310000000000000000000000000000000000000000000000008800000000000000000000000000000000000000000000000000000000ff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000fe18b61af10800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a60000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private1, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 02:25:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)) [ 303.875559][T10581] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 303.899519][ T2485] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 303.923510][T10581] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 02:25:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa114}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}]}, 0x34}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:25:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)) 02:25:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) [ 304.092133][T10592] device geneve2 entered promiscuous mode 02:25:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendfile(r1, r0, 0x0, 0xedc0) [ 304.149356][ T2485] usb 5-1: Using ep0 maxpacket: 16 [ 304.269693][ T2485] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 304.297221][ T2485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.341034][ T2485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.377730][ T2485] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 304.422148][ T2485] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 304.453988][ T2485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.486079][ T2485] usb 5-1: config 0 descriptor?? [ 305.029435][ T2485] usbhid 5-1:0.0: can't add hid device: -71 [ 305.035636][ T2485] usbhid: probe of 5-1:0.0 failed with error -71 [ 305.048786][ T2485] usb 5-1: USB disconnect, device number 37 02:25:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)) 02:25:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@shortname_lower='shortname=lower'}]}) 02:25:53 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:53 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:53 executing program 5: add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="f2", 0xfffff, 0x0) 02:25:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) [ 306.657544][T10636] FAT-fs (loop0): bogus number of reserved sectors [ 306.708468][T10636] FAT-fs (loop0): Can't find a valid FAT filesystem 02:25:53 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c27", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 02:25:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200005429b907405a8d639bef6844883fe974fa6245e560e46e3312bd45b6e9f44dc92575ccf778a81529cf415b0057f6bbb410a9f87588a163a9d6fb1663d662655739c904accf7b676515cfc8de1644bd7eff57a9d8156bc51550460957133ca9f621c78bc8be062eea75ae29bb444fb5fcf2543a2dc107a02864adc3a08ffded00e908447b21"], 0x48}}, 0x0) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)) 02:25:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x300506, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000fdff86dd60b4090003002f00fe8020aa00a800fbffe0000002ff020000220000b0d04796c34d00000f20018830"], 0x0) 02:25:53 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c27", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 306.899682][ T2485] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 306.915525][T10659] ptrace attach of "/root/syz-executor.5"[10658] was attempted by "/root/syz-executor.5"[10659] 02:25:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200005429b907405a8d639bef6844883fe974fa6245e560e46e3312bd45b6e9f44dc92575ccf778a81529cf415b0057f6bbb410a9f87588a163a9d6fb1663d662655739c904accf7b676515cfc8de1644bd7eff57a9d8156bc51550460957133ca9f621c78bc8be062eea75ae29bb444fb5fcf2543a2dc107a02864adc3a08ffded00e908447b21"], 0x48}}, 0x0) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)) 02:25:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:53 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0xcee42, 0x0) clone(0x3a3dd40084848f01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) [ 307.087236][T10672] ptrace attach of "/root/syz-executor.5"[10670] was attempted by "/root/syz-executor.5"[10672] [ 307.160097][ T2485] usb 5-1: Using ep0 maxpacket: 16 [ 307.223942][ T29] audit: type=1800 audit(1593224753.782:15): pid=10681 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16343 res=0 [ 307.279379][ T2485] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 307.288163][ T29] audit: type=1800 audit(1593224753.792:16): pid=10681 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16343 res=0 [ 307.308954][ T2485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.337021][ T2485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.369217][ T2485] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 307.407250][ T2485] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 307.437126][ T2485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.476690][ T2485] usb 5-1: config 0 descriptor?? [ 308.019117][ T2485] usbhid 5-1:0.0: can't add hid device: -71 [ 308.025260][ T2485] usbhid: probe of 5-1:0.0 failed with error -71 [ 308.038312][ T2485] usb 5-1: USB disconnect, device number 38 02:25:56 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:25:56 executing program 0: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x1) socket$inet6(0xa, 0x0, 0x6b) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160555]}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x1) socket$inet6(0xa, 0x0, 0x0) 02:25:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200005429b907405a8d639bef6844883fe974fa6245e560e46e3312bd45b6e9f44dc92575ccf778a81529cf415b0057f6bbb410a9f87588a163a9d6fb1663d662655739c904accf7b676515cfc8de1644bd7eff57a9d8156bc51550460957133ca9f621c78bc8be062eea75ae29bb444fb5fcf2543a2dc107a02864adc3a08ffded00e908447b21"], 0x48}}, 0x0) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)) 02:25:56 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x4}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000380)=ANY=[], 0x37cb1133) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x75}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 02:25:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 02:25:56 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 02:25:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$tmpfs(&(0x7f0000001280)='tmpfs\x00', &(0x7f00000012c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mode={'mode'}}]}) 02:25:56 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200005429b907405a8d639bef6844883fe974fa6245e560e46e3312bd45b6e9f44dc92575ccf778a81529cf415b0057f6bbb410a9f87588a163a9d6fb1663d662655739c904accf7b676515cfc8de1644bd7eff57a9d8156bc51550460957133ca9f621c78bc8be062eea75ae29bb444fb5fcf2543a2dc107a02864adc3a08ffded00e908447b21"], 0x48}}, 0x0) ioctl$KVM_GET_SREGS(r0, 0x4138ae84, &(0x7f0000000280)) [ 309.792637][T10721] ptrace attach of "/root/syz-executor.5"[10717] was attempted by "/root/syz-executor.5"[10721] 02:25:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) [ 309.870000][T10724] ------------[ cut here ]------------ [ 309.875790][T10724] kernel BUG at arch/x86/kvm/mmu/mmu.c:3719! [ 309.903913][T10724] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 309.910361][T10724] CPU: 0 PID: 10724 Comm: syz-executor.0 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 02:25:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) [ 309.920246][T10724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.930315][T10724] RIP: 0010:kvm_mmu_load+0xbfa/0xe00 [ 309.935605][T10724] Code: ac 23 99 00 48 8b 44 24 08 e9 cf f5 ff ff e8 6d 23 99 00 e9 b7 f4 ff ff 4c 89 f7 e8 90 23 99 00 e9 78 f4 ff ff e8 56 1a 5a 00 <0f> 0b 48 89 df e8 7c 23 99 00 e9 7e f8 ff ff e8 72 23 99 00 e9 c4 [ 309.955297][T10724] RSP: 0018:ffffc900031e7b30 EFLAGS: 00010202 [ 309.961541][T10724] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90001fd9000 02:25:56 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200005429b907405a8d639bef6844883fe974fa6245e560e46e3312bd45b6e9f44dc92575ccf778a81529cf415b0057f6bbb410a9f87588a163a9d6fb1663d662655739c904accf7b676515cfc8de1644bd7eff57a9d8156bc51550460957133ca9f621c78bc8be062eea75ae29bb444fb5fcf2543a2dc107a02864adc3a08ffded00e908447b21"], 0x48}}, 0x0) ioctl$KVM_GET_SREGS(r0, 0x4138ae84, &(0x7f0000000280)) [ 309.969517][T10724] RDX: 000000000000bb20 RSI: ffffffff8118e14a RDI: 0000000000000001 [ 309.977489][T10724] RBP: ffff88804eca0200 R08: ffff88805bf6e480 R09: ffffed1015cc719c [ 309.985555][T10724] R10: ffff8880ae638cdb R11: ffffed1015cc719b R12: 0000000000000000 [ 309.993525][T10724] R13: 0000000000000001 R14: ffff88804eca0618 R15: 0000000000000000 [ 310.001500][T10724] FS: 00007fe5fca87700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 310.010441][T10724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 02:25:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) [ 310.017025][T10724] CR2: 00007ffc3233b418 CR3: 00000000969a7000 CR4: 00000000001426f0 [ 310.024997][T10724] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 310.032971][T10724] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 310.040941][T10724] Call Trace: [ 310.044216][T10724] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 310.050352][T10724] kvm_arch_vcpu_ioctl_run+0x4016/0x68d0 [ 310.055994][T10724] ? kvm_arch_vcpu_runnable+0x6c0/0x6c0 [ 310.061546][T10724] ? lock_downgrade+0x840/0x840 [ 310.066401][T10724] ? rcu_read_lock_held_common+0xa0/0xa0 [ 310.072037][T10724] ? check_preemption_disabled+0x38/0x220 [ 310.077760][T10724] ? kvm_vcpu_ioctl+0x467/0xe10 [ 310.082602][T10724] kvm_vcpu_ioctl+0x467/0xe10 [ 310.087256][T10724] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 310.093749][T10724] ? ioctl_file_clone+0x180/0x180 [ 310.098857][T10724] ? check_preemption_disabled+0x38/0x220 [ 310.104678][T10724] ? __fget_files+0x299/0x400 [ 310.109366][T10724] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 310.115776][T10724] ksys_ioctl+0x11a/0x180 [ 310.120086][T10724] __x64_sys_ioctl+0x6f/0xb0 [ 310.124652][T10724] do_syscall_64+0x60/0xe0 [ 310.129049][T10724] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 310.134917][T10724] RIP: 0033:0x45cb19 [ 310.138874][T10724] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 310.158630][T10724] RSP: 002b:00007fe5fca86c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.167020][T10724] RAX: ffffffffffffffda RBX: 00000000004e8a00 RCX: 000000000045cb19 [ 310.174969][T10724] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 310.182917][T10724] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 310.190865][T10724] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 310.198812][T10724] R13: 00000000000003d0 R14: 00000000004c68ae R15: 00007fe5fca876d4 [ 310.206765][T10724] Modules linked in: [ 310.219402][T10724] ---[ end trace 74e2f01b39b76f31 ]--- [ 310.225016][T10724] RIP: 0010:kvm_mmu_load+0xbfa/0xe00 [ 310.231376][T10724] Code: ac 23 99 00 48 8b 44 24 08 e9 cf f5 ff ff e8 6d 23 99 00 e9 b7 f4 ff ff 4c 89 f7 e8 90 23 99 00 e9 78 f4 ff ff e8 56 1a 5a 00 <0f> 0b 48 89 df e8 7c 23 99 00 e9 7e f8 ff ff e8 72 23 99 00 e9 c4 [ 310.251439][T10724] RSP: 0018:ffffc900031e7b30 EFLAGS: 00010202 [ 310.257513][T10724] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90001fd9000 [ 310.275691][T10724] RDX: 000000000000bb20 RSI: ffffffff8118e14a RDI: 0000000000000001 [ 310.310076][T10724] RBP: ffff88804eca0200 R08: ffff88805bf6e480 R09: ffffed1015cc719c [ 310.337888][T10724] R10: ffff8880ae638cdb R11: ffffed1015cc719b R12: 0000000000000000 [ 310.356080][T10724] R13: 0000000000000001 R14: ffff88804eca0618 R15: 0000000000000000 [ 310.364608][T10724] FS: 00007fe5fca87700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 310.373962][T10724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.380912][ T2514] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 310.384392][T10724] CR2: 000055ebf1cba000 CR3: 00000000969a7000 CR4: 00000000001426f0 [ 310.408791][T10724] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 310.430019][T10724] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 310.438070][T10724] Kernel panic - not syncing: Fatal exception [ 310.445555][T10724] Kernel Offset: disabled [ 310.449918][T10724] Rebooting in 86400 seconds..