Warning: Permanently added '10.128.0.129' (ECDSA) to the list of known hosts. 2020/05/26 12:15:04 fuzzer started 2020/05/26 12:15:04 dialing manager at 10.128.0.26:36489 2020/05/26 12:15:05 syscalls: 3055 2020/05/26 12:15:05 code coverage: enabled 2020/05/26 12:15:05 comparison tracing: enabled 2020/05/26 12:15:05 extra coverage: enabled 2020/05/26 12:15:05 setuid sandbox: enabled 2020/05/26 12:15:05 namespace sandbox: enabled 2020/05/26 12:15:05 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/26 12:15:05 fault injection: enabled 2020/05/26 12:15:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/26 12:15:05 net packet injection: enabled 2020/05/26 12:15:05 net device setup: enabled 2020/05/26 12:15:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/26 12:15:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/26 12:15:05 USB emulation: enabled 12:16:24 executing program 0: [ 141.145563][ T6805] IPVS: ftp: loaded support on port[0] = 21 12:16:24 executing program 1: [ 141.292499][ T6805] chnl_net:caif_netlink_parms(): no params data found [ 141.405837][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.442352][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.450683][ T6805] device bridge_slave_0 entered promiscuous mode [ 141.475815][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.492429][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.500358][ T6805] device bridge_slave_1 entered promiscuous mode [ 141.550560][ T6805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.553508][ T6935] IPVS: ftp: loaded support on port[0] = 21 [ 141.583757][ T6805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.640906][ T6805] team0: Port device team_slave_0 added [ 141.666212][ T6805] team0: Port device team_slave_1 added 12:16:25 executing program 2: [ 141.717945][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.725625][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.773702][ T6805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.809001][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.822625][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.882596][ T6805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 12:16:25 executing program 3: [ 141.985997][ T6805] device hsr_slave_0 entered promiscuous mode [ 142.042748][ T6805] device hsr_slave_1 entered promiscuous mode [ 142.158669][ T6991] IPVS: ftp: loaded support on port[0] = 21 [ 142.305638][ T6935] chnl_net:caif_netlink_parms(): no params data found 12:16:25 executing program 4: [ 142.381372][ T7092] IPVS: ftp: loaded support on port[0] = 21 [ 142.693041][ T6935] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.700193][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.720092][ T6935] device bridge_slave_0 entered promiscuous mode [ 142.735650][ T6935] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.743785][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.751947][ T6935] device bridge_slave_1 entered promiscuous mode [ 142.801988][ T6991] chnl_net:caif_netlink_parms(): no params data found [ 142.827721][ T6935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 12:16:26 executing program 5: [ 142.868373][ T6935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.884277][ T7250] IPVS: ftp: loaded support on port[0] = 21 [ 142.903376][ T6805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.024082][ T6805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.060540][ T6805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.116462][ T6935] team0: Port device team_slave_0 added [ 143.126927][ T6935] team0: Port device team_slave_1 added [ 143.147593][ T6805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.201920][ T7303] IPVS: ftp: loaded support on port[0] = 21 [ 143.318892][ T6935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.329036][ T6935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.357029][ T6935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.371976][ T6935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.379974][ T6935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.408487][ T6935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.422934][ T6991] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.429995][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.438577][ T6991] device bridge_slave_0 entered promiscuous mode [ 143.451509][ T7092] chnl_net:caif_netlink_parms(): no params data found [ 143.476774][ T6991] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.484540][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.493576][ T6991] device bridge_slave_1 entered promiscuous mode [ 143.538680][ T6991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.656952][ T6935] device hsr_slave_0 entered promiscuous mode [ 143.692698][ T6935] device hsr_slave_1 entered promiscuous mode [ 143.744806][ T6935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.752710][ T6935] Cannot create hsr debugfs directory [ 143.778668][ T6991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.831605][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.840288][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.850204][ T7092] device bridge_slave_0 entered promiscuous mode [ 143.906613][ T7092] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.914422][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.923576][ T7092] device bridge_slave_1 entered promiscuous mode [ 143.943281][ T6991] team0: Port device team_slave_0 added [ 143.973730][ T6991] team0: Port device team_slave_1 added [ 144.081038][ T7092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.099347][ T7092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.129586][ T6991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.139482][ T6991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.168376][ T6991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.226648][ T6991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.233938][ T6991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.263352][ T6991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.279213][ T7250] chnl_net:caif_netlink_parms(): no params data found [ 144.302754][ T7303] chnl_net:caif_netlink_parms(): no params data found [ 144.317153][ T7092] team0: Port device team_slave_0 added [ 144.329759][ T7092] team0: Port device team_slave_1 added [ 144.440882][ T7092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.456986][ T7092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.484151][ T7092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.536055][ T6991] device hsr_slave_0 entered promiscuous mode [ 144.592837][ T6991] device hsr_slave_1 entered promiscuous mode [ 144.635959][ T6991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.643579][ T6991] Cannot create hsr debugfs directory [ 144.650484][ T6935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 144.693621][ T7092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.700829][ T7092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.728423][ T7092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.759684][ T6805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.774727][ T6935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 144.859952][ T7250] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.870214][ T7250] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.879416][ T7250] device bridge_slave_0 entered promiscuous mode [ 144.891481][ T6935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 144.936108][ T7250] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.950999][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.960029][ T7250] device bridge_slave_1 entered promiscuous mode [ 144.970041][ T6935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 145.076831][ T7092] device hsr_slave_0 entered promiscuous mode [ 145.132952][ T7092] device hsr_slave_1 entered promiscuous mode [ 145.192487][ T7092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.200106][ T7092] Cannot create hsr debugfs directory [ 145.260424][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.269856][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.295821][ T7250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.316674][ T7303] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.327614][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.337520][ T7303] device bridge_slave_0 entered promiscuous mode [ 145.349893][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.357297][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.365870][ T7303] device bridge_slave_1 entered promiscuous mode [ 145.376390][ T6805] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.385843][ T7250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.504476][ T7303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.545307][ T7250] team0: Port device team_slave_0 added [ 145.567570][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.577448][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.587168][ T2485] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.594497][ T2485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.604241][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.613865][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.622832][ T2485] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.630335][ T2485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.638355][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.650084][ T7303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.680872][ T7250] team0: Port device team_slave_1 added [ 145.712372][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.722333][ T7303] team0: Port device team_slave_0 added [ 145.736445][ T7303] team0: Port device team_slave_1 added [ 145.769184][ T7250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.777877][ T7250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.806921][ T7250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.824238][ T7250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.831293][ T7250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.857857][ T7250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.871325][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.884422][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.897170][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.906217][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.915710][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.977965][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.988505][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.998251][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.019851][ T6805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.032288][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.041453][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.049269][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.075575][ T7303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.145791][ T7250] device hsr_slave_0 entered promiscuous mode [ 146.193667][ T7250] device hsr_slave_1 entered promiscuous mode [ 146.252224][ T7250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.259807][ T7250] Cannot create hsr debugfs directory [ 146.270850][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.280629][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.305213][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.312618][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.341952][ T7303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.459742][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.470296][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.482902][ T6991] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 146.575568][ T6991] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 146.624433][ T6991] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 146.669969][ T6991] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 146.766076][ T7303] device hsr_slave_0 entered promiscuous mode [ 146.822710][ T7303] device hsr_slave_1 entered promiscuous mode [ 146.883184][ T7303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.891021][ T7303] Cannot create hsr debugfs directory [ 146.904022][ T6805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.008132][ T7092] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 147.073830][ T6935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.098480][ T7092] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 147.138802][ T7092] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 147.205147][ T7092] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 147.300373][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.310616][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.320798][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.330185][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.358913][ T7250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.397881][ T6935] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.429092][ T7250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 147.469874][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.479130][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.501991][ T7250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 147.536057][ T7250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 147.596282][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.604326][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.612816][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.621433][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.631746][ T2519] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.638886][ T2519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.648681][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.658117][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.666876][ T2519] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.674234][ T2519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.682837][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.692151][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.719186][ T6805] device veth0_vlan entered promiscuous mode [ 147.757316][ T6991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.770332][ T6805] device veth1_vlan entered promiscuous mode [ 147.804121][ T7303] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.894321][ T7303] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.966567][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 147.975001][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.984741][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.994201][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.003831][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.013807][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.023121][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.031449][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.040347][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.049430][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.061399][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.083368][ T7303] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.116934][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.136719][ T6991] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.157693][ T7303] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.203993][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.211819][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.220231][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.229407][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.238122][ T2519] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.245437][ T2519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.254467][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.288439][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.297906][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.309351][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.316490][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.324356][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.342204][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.351446][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.413676][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.427506][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.436471][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.447413][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.464594][ T6805] device veth0_macvtap entered promiscuous mode [ 148.481307][ T6805] device veth1_macvtap entered promiscuous mode [ 148.499549][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.509106][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.524690][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.539718][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.577366][ T7092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.589350][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.598942][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.609244][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.621429][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.630494][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.638694][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.647516][ T6991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.705012][ T6935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.718711][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.730973][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.743121][ T6805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.770192][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.779566][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.789486][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.797651][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.808822][ T7092] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.834950][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.846709][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.855952][ T2485] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.863109][ T2485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.871548][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.895349][ T6805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.916327][ T7250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.930212][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.941168][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.955942][ T6991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.986569][ T7303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.995144][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.008440][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.017211][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.024342][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.035888][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.044543][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.052959][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.090108][ T7250] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.099745][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.109278][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.118482][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.206410][ T7303] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.214779][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.227403][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.237638][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.247294][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.256620][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.265596][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.274859][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.283873][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.293219][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.302486][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.314446][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.321524][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.330592][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.339054][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.347403][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.357537][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.370921][ T6935] device veth0_vlan entered promiscuous mode [ 149.441924][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.449890][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.460293][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.468525][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.476807][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.486485][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.497814][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.507809][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.516089][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.525413][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.535032][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.544194][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.551979][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.560733][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.570839][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.577979][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.586318][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.595612][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.605482][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.615304][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.624047][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.633007][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.647377][ T7092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.660541][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.694471][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.703317][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.711121][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.722608][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.730852][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.740575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.819431][ T6935] device veth1_vlan entered promiscuous mode [ 149.841971][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.850191][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.866322][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 12:16:33 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 149.929230][ T7092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.944293][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.957569][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.976238][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.991355][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.006254][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.015626][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.024735][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.034666][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.055209][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.073623][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.083370][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.102654][ T6991] device veth0_vlan entered promiscuous mode [ 150.129914][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.142266][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.150195][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.160819][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.170320][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.180523][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.194617][ T7303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.209164][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.229466][ T6991] device veth1_vlan entered promiscuous mode [ 150.238625][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.252664][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.302567][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.313136][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.349225][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.363697][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.389233][ T7250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.407762][ T7303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.420709][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.429397][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.437645][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.442155][ T2485] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 150.449470][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.472351][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.487314][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.499403][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.511719][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.525487][ T6935] device veth0_macvtap entered promiscuous mode [ 150.541474][ T7092] device veth0_vlan entered promiscuous mode [ 150.581462][ T6991] device veth0_macvtap entered promiscuous mode [ 150.616206][ T6935] device veth1_macvtap entered promiscuous mode [ 150.630475][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.640268][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.649655][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.659010][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.668741][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.681710][ T6991] device veth1_macvtap entered promiscuous mode [ 150.703688][ T7092] device veth1_vlan entered promiscuous mode [ 150.764354][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.776498][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.789492][ T6935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.807353][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.819798][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.831217][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.844021][ T2485] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.855555][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.868772][ T6991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.877551][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.891553][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.900833][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.909649][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.920524][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.930427][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.939883][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.949623][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.959379][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.976750][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.990182][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.003018][ T6935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.032633][ T2485] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.041684][ T2485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.050929][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.063617][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.072742][ T2485] usb 1-1: Product: syz [ 151.077012][ T2485] usb 1-1: Manufacturer: syz [ 151.081601][ T2485] usb 1-1: SerialNumber: syz [ 151.096204][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.108650][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.120988][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.132225][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.148042][ T6991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.179148][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.189097][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.200227][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.209861][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.219093][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.228098][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.245125][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.253359][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.281196][ T7092] device veth0_macvtap entered promiscuous mode [ 151.335886][ T7303] device veth0_vlan entered promiscuous mode [ 151.344959][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.354921][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.364735][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.497606][ T7092] device veth1_macvtap entered promiscuous mode [ 151.550870][ T7303] device veth1_vlan entered promiscuous mode [ 151.622241][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.630502][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 12:16:35 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) [ 151.663194][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.685574][ T7250] device veth0_vlan entered promiscuous mode [ 151.751977][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.759941][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.800719][ T7250] device veth1_vlan entered promiscuous mode [ 151.829785][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 12:16:35 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xffff, 0x0) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x0) [ 151.848085][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.870540][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.893304][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.912120][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.930820][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.944494][ T7092] batman_adv: batadv0: Interface activated: batadv_slave_0 12:16:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) [ 151.971215][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.989803][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.005913][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.021299][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.035980][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.052200][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.064982][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.077095][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.078156][ T8093] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 152.091848][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.144792][ T7092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.182772][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 12:16:35 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) [ 152.213143][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.223647][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.242671][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.251414][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.269819][ T2485] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 152.280327][ T2485] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 152.298176][ T7303] device veth0_macvtap entered promiscuous mode [ 152.328554][ T2485] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 152.344507][ T7303] device veth1_macvtap entered promiscuous mode 12:16:35 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xffff, 0x0) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x0) [ 152.454714][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.480855][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.481842][ T2485] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 152.513030][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.546193][ T7250] device veth0_macvtap entered promiscuous mode [ 152.605084][ T2485] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 152.625122][ T7250] device veth1_macvtap entered promiscuous mode [ 152.657644][ T2485] usb 1-1: USB disconnect, device number 2 [ 152.667616][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 12:16:36 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xffff, 0x0) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x0) [ 152.707006][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.715349][ T2485] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 12:16:36 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0xa020, 0x0) [ 152.760430][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.808122][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.835229][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.861652][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.869040][ T8125] overlayfs: overlapping upperdir path [ 152.885087][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.898040][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 12:16:36 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0xa020, 0x0) [ 152.900900][ T8125] overlayfs: overlapping upperdir path [ 152.914943][ T7303] batman_adv: batadv0: Interface activated: batadv_slave_0 12:16:36 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xffff, 0x0) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x0) [ 153.026468][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.041041][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.061250][ T8132] overlayfs: overlapping upperdir path [ 153.067968][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.110814][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.138131][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.163443][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.191766][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.211592][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.230278][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.241448][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.259437][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.270482][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.290305][ T7303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.304252][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 153.327044][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.354727][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 153.370347][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.387691][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 153.399013][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.431733][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 153.451717][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.471735][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 153.490719][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.523727][ T7250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.537409][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.556054][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.599973][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.611955][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.657354][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.720375][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.742014][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.760220][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.770179][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.780731][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.790783][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.820997][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.831807][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.842353][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.856425][ T7250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.877874][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.888275][ T3260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:16:37 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 12:16:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 12:16:37 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x26003e, 0x0) 12:16:37 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 12:16:37 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000340)=[{}], 0x1, 0x0) 12:16:37 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 154.405059][ C0] hrtimer: interrupt took 69364 ns 12:16:37 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000340)=[{}], 0x1, 0x0) 12:16:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvfrom$inet(r0, &(0x7f0000000680)=""/244, 0xf4, 0x14002, 0x0, 0xfffffffffffffe24) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000003c0)="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") r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8000000000000, 0x40, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x1) dup(r4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="68010002ee89d687abf39b74a988572152f326f3c966a5d6fb07a1cc904facceae9c1aaff6826a98522e230a38c58b88e4e13404f4b258dc58871c3bf45073d4dac39ad1d552f445ddb77de36e8d2dfefd88d1413dbc05398593397461dc8e011ac02e1e8036797837bc8a4bcf7907c8ff5e6a4d9d19eeeed2846191bb8bbaaed7d0f2b77856fc0fda9c29", @ANYRES16=0x0, @ANYBLOB="000029bd7000fddbdf2506000000680001801400020069705f767469300000000000000000000800030001000000140002006970366772657461703000000000000008000100", @ANYBLOB="080003000100000014000200626f6e64300000000000000000000000080003000300000008000300010000000c00018008", @ANYRES32=0x0, @ANYBLOB="3400018014000200697036746e6c300000000000000000001400020065727370616e3000000000000000000008000300020000000c0001800800030002000000180001801400020063616966300000000000000000000000680001800800030003000000140002006d616376746170300000000000000000080003008b012fa908000100", @ANYRES32=r5, @ANYBLOB="08000300010000000800030002000000140002007663616e300000000000000000000000140002006261746164765f736c6176655f31000020000180140002006261746164765f736c6176655f3000000800030000000000"], 0x168}}, 0x20000081) write$tun(r1, &(0x7f00000001c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}, 0x7e) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000100000000ffdbdf2504000000080006000000000000000500eb05000048000380060007004e24000014000200766c616e300000000000000000000000140002006d61637365633000000000000000000014000200697036677265300000000000000000000c00028008000400ff07000008000400ff0700003c000380080001000200000008000300000000000000070600220000060007004e21000008000100000000000800030002000000080005000a010102"], 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040084) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @generic={0x2b, "e598e2861bcefc0000000200"}, @ipx={0x4, 0x0, 0xa453, "9f68bbfde8ed", 0x3}, @phonet={0x23, 0x0, 0x2, 0x20}, 0x3ff, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='vlan1\x00', 0x37, 0x8a, 0x7}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0) [ 154.661936][ T3260] usb 1-1: new high-speed USB device number 3 using dummy_hcd 12:16:38 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000340)=[{}], 0x1, 0x0) 12:16:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvfrom$inet(r0, &(0x7f0000000680)=""/244, 0xf4, 0x14002, 0x0, 0xfffffffffffffe24) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000003c0)="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") r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8000000000000, 0x40, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x1) dup(r4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="68010002ee89d687abf39b74a988572152f326f3c966a5d6fb07a1cc904facceae9c1aaff6826a98522e230a38c58b88e4e13404f4b258dc58871c3bf45073d4dac39ad1d552f445ddb77de36e8d2dfefd88d1413dbc05398593397461dc8e011ac02e1e8036797837bc8a4bcf7907c8ff5e6a4d9d19eeeed2846191bb8bbaaed7d0f2b77856fc0fda9c29", @ANYRES16=0x0, @ANYBLOB="000029bd7000fddbdf2506000000680001801400020069705f767469300000000000000000000800030001000000140002006970366772657461703000000000000008000100", @ANYBLOB="080003000100000014000200626f6e64300000000000000000000000080003000300000008000300010000000c00018008", @ANYRES32=0x0, @ANYBLOB="3400018014000200697036746e6c300000000000000000001400020065727370616e3000000000000000000008000300020000000c0001800800030002000000180001801400020063616966300000000000000000000000680001800800030003000000140002006d616376746170300000000000000000080003008b012fa908000100", @ANYRES32=r5, @ANYBLOB="08000300010000000800030002000000140002007663616e300000000000000000000000140002006261746164765f736c6176655f31000020000180140002006261746164765f736c6176655f3000000800030000000000"], 0x168}}, 0x20000081) write$tun(r1, &(0x7f00000001c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}, 0x7e) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000100000000ffdbdf2504000000080006000000000000000500eb05000048000380060007004e24000014000200766c616e300000000000000000000000140002006d61637365633000000000000000000014000200697036677265300000000000000000000c00028008000400ff07000008000400ff0700003c000380080001000200000008000300000000000000070600220000060007004e21000008000100000000000800030002000000080005000a010102"], 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040084) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @generic={0x2b, "e598e2861bcefc0000000200"}, @ipx={0x4, 0x0, 0xa453, "9f68bbfde8ed", 0x3}, @phonet={0x23, 0x0, 0x2, 0x20}, 0x3ff, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='vlan1\x00', 0x37, 0x8a, 0x7}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0) [ 155.022115][ T3260] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:16:38 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xffff, 0x0) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x0) 12:16:38 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 12:16:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvfrom$inet(r0, &(0x7f0000000680)=""/244, 0xf4, 0x14002, 0x0, 0xfffffffffffffe24) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000003c0)="394473e2e86a291e5046a7ec562303f8f1815b382c8ba7e71f4aa945786f37be301c3ce315e201da9c41a5ee99f8916133205440819d75e43c3d25e32a3a3738fc9907024ce94c63b4a5adb66f2dcca1b58520c553050fcd4dbf813914bd503ae60d95e1355ee4d74ff2ef47b367122a4b3cd5e89f54df320895a8ca41844dc4918685311a8dacd43b1c7f79a2c7393522f94d773898f94fc67144afa924bf18829872619b5fb21a6bd00aa7bc12ddbac68e39851763cdb29115fc382cd33f08fa335cedd9091bfa82ec907e23cea6673f85e3532ab4dc4bf09f2c84c1d3243d0d8eae00f2019e882a46c5a1a47c93a37f0e323dc82291fa3c0923b82d644629") r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8000000000000, 0x40, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x1) dup(r4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="68010002ee89d687abf39b74a988572152f326f3c966a5d6fb07a1cc904facceae9c1aaff6826a98522e230a38c58b88e4e13404f4b258dc58871c3bf45073d4dac39ad1d552f445ddb77de36e8d2dfefd88d1413dbc05398593397461dc8e011ac02e1e8036797837bc8a4bcf7907c8ff5e6a4d9d19eeeed2846191bb8bbaaed7d0f2b77856fc0fda9c29", @ANYRES16=0x0, @ANYBLOB="000029bd7000fddbdf2506000000680001801400020069705f767469300000000000000000000800030001000000140002006970366772657461703000000000000008000100", @ANYBLOB="080003000100000014000200626f6e64300000000000000000000000080003000300000008000300010000000c00018008", @ANYRES32=0x0, @ANYBLOB="3400018014000200697036746e6c300000000000000000001400020065727370616e3000000000000000000008000300020000000c0001800800030002000000180001801400020063616966300000000000000000000000680001800800030003000000140002006d616376746170300000000000000000080003008b012fa908000100", @ANYRES32=r5, @ANYBLOB="08000300010000000800030002000000140002007663616e300000000000000000000000140002006261746164765f736c6176655f31000020000180140002006261746164765f736c6176655f3000000800030000000000"], 0x168}}, 0x20000081) write$tun(r1, &(0x7f00000001c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}, 0x7e) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000100000000ffdbdf2504000000080006000000000000000500eb05000048000380060007004e24000014000200766c616e300000000000000000000000140002006d61637365633000000000000000000014000200697036677265300000000000000000000c00028008000400ff07000008000400ff0700003c000380080001000200000008000300000000000000070600220000060007004e21000008000100000000000800030002000000080005000a010102"], 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040084) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @generic={0x2b, "e598e2861bcefc0000000200"}, @ipx={0x4, 0x0, 0xa453, "9f68bbfde8ed", 0x3}, @phonet={0x23, 0x0, 0x2, 0x20}, 0x3ff, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='vlan1\x00', 0x37, 0x8a, 0x7}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0) [ 155.232199][ T3260] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.252398][ T3260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.288463][ T3260] usb 1-1: Product: syz [ 155.322427][ T3260] usb 1-1: Manufacturer: syz 12:16:38 executing program 1: r0 = syz_open_dev$vcsu(0x0, 0xffff, 0x0) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x0) [ 155.343371][ T3260] usb 1-1: SerialNumber: syz [ 155.529097][ T8171] EXT4-fs (sda1): re-mounted. Opts: (null) [ 155.594019][ T8197] EXT4-fs (sda1): re-mounted. Opts: (null) 12:16:39 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x26003e, 0x0) 12:16:39 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0) 12:16:39 executing program 1: r0 = syz_open_dev$vcsu(0x0, 0xffff, 0x0) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x0) [ 155.858541][ T8228] EXT4-fs (sda1): re-mounted. Opts: (null) [ 156.541772][ T3260] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 156.548380][ T3260] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 156.592279][ T3260] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 156.762074][ T3260] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 156.777757][ T3260] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 156.802772][ T3260] usb 1-1: USB disconnect, device number 3 [ 156.809381][ T3260] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 12:16:40 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 12:16:40 executing program 1: r0 = syz_open_dev$vcsu(0x0, 0xffff, 0x0) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x0) 12:16:40 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0) 12:16:40 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 12:16:40 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 12:16:40 executing program 2: ioperm(0x0, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) clone(0x68002100, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 12:16:40 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x0, 0x0) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x0) [ 157.348226][ T8277] ptrace attach of "/root/syz-executor.2"[8275] was attempted by "/root/syz-executor.2"[8277] [ 157.384449][ T8275] IPVS: ftp: loaded support on port[0] = 21 12:16:40 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0) [ 157.453302][ T8282] IPVS: ftp: loaded support on port[0] = 21 [ 157.459964][ T8277] ptrace attach of "/root/syz-executor.2"[8282] was attempted by "/root/syz-executor.2"[8277] 12:16:40 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x0, 0x0) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x0) 12:16:41 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0) [ 157.678924][ T7] tipc: TX() has been purged, node left! [ 157.685080][ T3260] usb 1-1: new high-speed USB device number 4 using dummy_hcd 12:16:41 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x0, 0x0) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x0) 12:16:41 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0) [ 158.082002][ T3260] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.251954][ T3260] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.265754][ T3260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.288474][ T3260] usb 1-1: Product: syz [ 158.295830][ T3260] usb 1-1: Manufacturer: syz [ 158.300697][ T3260] usb 1-1: SerialNumber: syz [ 159.466475][ T3260] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 159.476525][ T3260] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 159.528901][ T3260] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 159.681829][ T3260] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 159.703677][ T3260] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 159.747869][ T3260] usb 1-1: USB disconnect, device number 4 [ 159.768113][ T3260] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 12:16:43 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 12:16:43 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0) 12:16:43 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xffff, 0x0) poll(0x0, 0x0, 0x0) 12:16:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r4, r2) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:43 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) 12:16:43 executing program 2: 12:16:43 executing program 2: 12:16:43 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xffff, 0x0) poll(0x0, 0x0, 0x0) 12:16:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r4, r2) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:43 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0) 12:16:43 executing program 2: 12:16:43 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xffff, 0x0) poll(0x0, 0x0, 0x0) [ 160.631491][ T2514] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 161.011830][ T2514] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.202128][ T2514] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.221530][ T2514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.242010][ T2514] usb 1-1: Product: syz [ 161.250116][ T2514] usb 1-1: Manufacturer: syz [ 161.275946][ T2514] usb 1-1: SerialNumber: syz [ 162.441591][ T2514] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 162.448137][ T2514] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 162.468268][ T2514] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 162.660024][ T2514] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 162.669788][ T2514] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 162.688206][ T2514] usb 1-1: USB disconnect, device number 5 [ 162.694845][ T2514] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 12:16:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0) 12:16:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r4, r2) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:46 executing program 2: 12:16:46 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xffff, 0x0) poll(&(0x7f0000000340), 0x0, 0x0) 12:16:46 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 12:16:46 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:16:46 executing program 2: 12:16:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r4, r2) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:46 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xffff, 0x0) poll(&(0x7f0000000340), 0x0, 0x0) 12:16:46 executing program 5: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0) 12:16:46 executing program 2: 12:16:46 executing program 5: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0) 12:16:46 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xffff, 0x0) poll(&(0x7f0000000340), 0x0, 0x0) [ 163.561455][ T2485] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 163.941813][ T2485] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.131778][ T2485] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.140842][ T2485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.156594][ T2485] usb 1-1: Product: syz [ 164.160876][ T2485] usb 1-1: Manufacturer: syz [ 164.168127][ T2485] usb 1-1: SerialNumber: syz [ 165.351439][ T2485] cdc_ncm 1-1:1.0: bind() failure [ 165.451616][ T2485] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 165.471579][ T2485] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 165.493605][ T2485] usb 1-1: USB disconnect, device number 6 12:16:49 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c000}}, 0x0, 0x0, 0x0, 0x0}) 12:16:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:49 executing program 2: 12:16:49 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xffff, 0x0) poll(&(0x7f0000000340)=[{}], 0x1, 0x0) 12:16:49 executing program 5: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0) 12:16:49 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 12:16:49 executing program 2: 12:16:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:49 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xffff, 0x0) poll(&(0x7f0000000340)=[{}], 0x1, 0x0) 12:16:49 executing program 5: syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0) 12:16:49 executing program 2: 12:16:49 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xffff, 0x0) poll(&(0x7f0000000340)=[{}], 0x1, 0x0) [ 166.210880][ T8059] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 166.611631][ T8059] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.801516][ T8059] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.810668][ T8059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.819697][ T8059] usb 1-1: Product: syz [ 166.825515][ T8059] usb 1-1: Manufacturer: syz [ 166.830129][ T8059] usb 1-1: SerialNumber: syz [ 167.731425][ T8059] cdc_ncm 1-1:1.0: bind() failure [ 167.833932][ T8059] cdc_ncm 1-1:1.1: bind() failure [ 167.903822][ T8059] usb 1-1: USB disconnect, device number 7 12:16:51 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:16:51 executing program 5: syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0) 12:16:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:51 executing program 2: 12:16:51 executing program 1: 12:16:51 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 12:16:51 executing program 1: 12:16:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100488, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:16:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socket(0x10, 0x2, 0x0) setreuid(0x0, r2) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:51 executing program 5: syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0) 12:16:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0xc26, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') sendfile(r4, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 12:16:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r0, 0x0, 0x0, 0x0) [ 168.621269][ T8059] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 169.001734][ T8059] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.211548][ T8059] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.237949][ T8059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.291664][ T8059] usb 1-1: Product: syz [ 169.319814][ T8059] usb 1-1: Manufacturer: syz [ 169.350916][ T8059] usb 1-1: SerialNumber: syz [ 170.081379][ T8059] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 170.087523][ T8059] cdc_ncm 1-1:1.0: bind() failure [ 170.172528][ T8059] cdc_ncm 1-1:1.1: bind() failure [ 170.264084][ T8059] usb 1-1: USB disconnect, device number 8 12:16:53 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:16:53 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @random="5673b21faf57", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "163dac", 0x18, 0x33, 0x0, @local, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@local]}]}}}}}}, 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:16:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100488, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:16:53 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 12:16:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r0, 0x0, 0x0, 0x0) 12:16:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r0, 0x0, 0x0, 0x0) 12:16:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') socket(0x10, 0x2, 0x0) setreuid(0x0, 0x0) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r0, &(0x7f0000000100), 0x0, 0x0) 12:16:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') socket(0x10, 0x2, 0x0) setreuid(0x0, 0x0) sendfile(r0, r0, 0x0, 0x20000000000000d9) [ 170.971181][ T2516] usb 1-1: new high-speed USB device number 9 using dummy_hcd 12:16:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r0, &(0x7f0000000100), 0x0, 0x0) 12:16:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') socket(0x10, 0x2, 0x0) setreuid(0x0, 0x0) sendfile(r0, r0, 0x0, 0x20000000000000d9) [ 171.344851][ T2516] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.511823][ T2516] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.551859][ T2516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.559964][ T2516] usb 1-1: Product: syz [ 171.631683][ T2516] usb 1-1: Manufacturer: syz [ 171.636408][ T2516] usb 1-1: SerialNumber: syz [ 172.141272][ T2516] cdc_ncm 1-1:1.0: bind() failure [ 172.271326][ T2516] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 172.292399][ T2516] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 172.312173][ T2516] usb 1-1: USB disconnect, device number 9 12:16:56 executing program 0: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 12:16:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100488, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:16:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r0, &(0x7f0000000100), 0x0, 0x0) 12:16:56 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 12:16:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:56 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @random="5673b21faf57", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "163dac", 0x18, 0x33, 0x0, @local, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@local]}]}}}}}}, 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:16:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) 12:16:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) 12:16:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) 12:16:56 executing program 2: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000000)={0x0, 0x0, [0x0, 0xfff], 0xd7}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="11000000050000003ac1a7656bbd6315f458db718f06000000ff7f0000b0ffff3f000008137fecfd55246a26f80c429d8e012a7dcca2191e41b7a4a4b325cf402a4af222303bc0b5b623ecebc4ea42dbd54531ebf638d8ab071df0630ff7ed6ee587edea032eec02a3a8208b36c5e84fb372c9e6b90274934f9ed631ab17717a3ac16ade14b9492b427ef854328c0d734809e70382a0f75a58922fca40c78de1faada16db9c2bc1f9bbb19fc96e44f4442574ff678af903fe55516d01e599c58"]}) 12:16:56 executing program 0: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 12:16:56 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000000000d9) 12:16:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x3f}, {{&(0x7f0000000b80)=@generic, 0x80, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, &(0x7f0000000140)=""/77, 0x4d}}, {{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000f00)=""/132, 0x84}], 0x1}, 0x967d}, {{&(0x7f0000001000)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x6, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000002a1dbabaece4611b6c52b8d010104000000000000000007000002080003400000200008000900000000000000074000000004f033"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x1c7) sendfile(r3, r4, 0x0, 0x8400f7fffff8) creat(&(0x7f0000000680)='./bus\x00', 0x0) [ 173.404159][ T29] audit: type=1800 audit(1590495416.776:2): pid=8678 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15887 res=0 12:16:56 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 12:16:56 executing program 2: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000000)={0x0, 0x0, [0x0, 0xfff], 0xd7}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="11000000050000003ac1a7656bbd6315f458db718f06000000ff7f0000b0ffff3f000008137fecfd55246a26f80c429d8e012a7dcca2191e41b7a4a4b325cf402a4af222303bc0b5b623ecebc4ea42dbd54531ebf638d8ab071df0630ff7ed6ee587edea032eec02a3a8208b36c5e84fb372c9e6b90274934f9ed631ab17717a3ac16ade14b9492b427ef854328c0d734809e70382a0f75a58922fca40c78de1faada16db9c2bc1f9bbb19fc96e44f4442574ff678af903fe55516d01e599c58"]}) 12:16:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}, 0x3f}, {{&(0x7f0000000b80)=@generic, 0x80, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, &(0x7f0000000140)=""/77, 0x4d}}, {{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000f00)=""/132, 0x84}], 0x1}, 0x967d}, {{&(0x7f0000001000)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x6, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x70, 0x7e, 0x0, 0x1, 0x0, 0x0, 0x2, 0x810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0x3000000, 0x9a36}, 0x200, 0x3, 0x0, 0x2}, 0x0, 0x1ffffe, 0xffffffffffffffff, 0xa) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x1c7) sendfile(r4, r5, 0x0, 0x8400f7fffff8) creat(&(0x7f0000000680)='./bus\x00', 0x0) 12:16:57 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000000000d9) 12:16:57 executing program 0: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 12:16:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x3f}, {{&(0x7f0000000b80)=@generic, 0x80, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, &(0x7f0000000140)=""/77, 0x4d}}, {{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000f00)=""/132, 0x84}], 0x1}, 0x967d}, {{&(0x7f0000001000)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x6, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000002a1dbabaece4611b6c52b8d010104000000000000000007000002080003400000200008000900000000000000074000000004f033"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x1c7) sendfile(r3, r4, 0x0, 0x8400f7fffff8) creat(&(0x7f0000000680)='./bus\x00', 0x0) 12:16:57 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000000000d9) [ 174.360808][ T29] audit: type=1800 audit(1590495417.726:3): pid=8701 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15906 res=0 12:16:57 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 12:16:57 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:57 executing program 2: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) [ 174.499767][ T29] audit: type=1800 audit(1590495417.866:4): pid=8708 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15894 res=0 12:16:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, 0x0) 12:16:58 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, 0x0) 12:16:58 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x65c000000}) r2 = dup(r1) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20402, 0xc1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="04002cbd7000fe9b6ae0a282c03ad8c77a9104bedbdf25160000"], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r6}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') preadv(r7, &(0x7f00000017c0), 0x3a8, 0x0) 12:16:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, 0x0) 12:16:58 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:16:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x15, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r1 = memfd_create(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) gettid() r2 = socket(0xa, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept4$alg(r3, 0x0, 0x0, 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 12:16:58 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 12:16:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, 0x0) 12:16:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:59 executing program 2: ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) 12:16:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:59 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:16:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x65c000000}) r2 = dup(r1) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20402, 0xc1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="04002cbd7000fe9b6ae0a282c03ad8c77a9104bedbdf25160000"], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r6}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') preadv(r7, &(0x7f00000017c0), 0x3a8, 0x0) 12:16:59 executing program 2: ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) 12:16:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:59 executing program 2: ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) 12:16:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:16:59 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x15, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r1 = memfd_create(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) gettid() r2 = socket(0xa, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept4$alg(r3, 0x0, 0x0, 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 12:16:59 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 12:16:59 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:16:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, 0x0) 12:16:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:17:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x65c000000}) r2 = dup(r1) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20402, 0xc1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="04002cbd7000fe9b6ae0a282c03ad8c77a9104bedbdf25160000"], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r6}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') preadv(r7, &(0x7f00000017c0), 0x3a8, 0x0) 12:17:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, 0x0) 12:17:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:17:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x65c000000}) r2 = dup(r1) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20402, 0xc1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="04002cbd7000fe9b6ae0a282c03ad8c77a9104bedbdf25160000"], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r6}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') preadv(r7, &(0x7f00000017c0), 0x3a8, 0x0) 12:17:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, 0x0) 12:17:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:17:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x65c000000}) r2 = dup(r1) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20402, 0xc1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="04002cbd7000fe9b6ae0a282c03ad8c77a9104bedbdf25160000"], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r6}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) 12:17:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x15, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r1 = memfd_create(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) gettid() r2 = socket(0xa, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept4$alg(r3, 0x0, 0x0, 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 12:17:00 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 12:17:00 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:17:00 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) 12:17:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:17:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x65c000000}) r2 = dup(r1) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20402, 0xc1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="04002cbd7000fe9b6ae0a282c03ad8c77a9104bedbdf25160000"], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r6}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) 12:17:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x65c000000}) r2 = dup(r1) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20402, 0xc1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="04002cbd7000fe9b6ae0a282c03ad8c77a9104bedbdf25160000"], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r6}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) 12:17:01 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) 12:17:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:17:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:17:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x65c000000}) r2 = dup(r1) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20402, 0xc1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="04002cbd7000fe9b6ae0a282c03ad8c77a9104bedbdf25160000"], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r6}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') preadv(r7, &(0x7f00000017c0), 0x3a8, 0x0) [ 177.878082][ T2485] usb 1-1: new high-speed USB device number 10 using dummy_hcd 12:17:01 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) [ 178.151110][ T2485] usb 1-1: device descriptor read/64, error 18 12:17:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2000000}) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x403, 0x2000000000032, 0xffffffffffffffff, 0x0) [ 178.285042][ T8875] mmap: syz-executor.5 (8875): VmData 35328000 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. 12:17:01 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) [ 178.551009][ T2485] usb 1-1: device descriptor read/64, error 18 [ 178.830915][ T2485] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 179.110918][ T2485] usb 1-1: device descriptor read/64, error 18 [ 179.521260][ T2485] usb 1-1: device descriptor read/64, error 18 [ 179.641616][ T2485] usb usb1-port1: attempt power cycle [ 180.350847][ T2485] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 180.441218][ T2485] usb 1-1: Invalid ep0 maxpacket: 0 12:17:03 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:17:03 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:17:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x65c000000}) r2 = dup(r1) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20402, 0xc1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="04002cbd7000fe9b6ae0a282c03ad8c77a9104bedbdf25160000"], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r6}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') preadv(r7, &(0x7f00000017c0), 0x3a8, 0x0) 12:17:03 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x4}) 12:17:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:17:03 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[], 0xfffffecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 12:17:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setreuid(0x0, r2) sendfile(r0, r0, 0x0, 0x20000000000000d9) 12:17:04 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x4}) [ 180.761691][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 180.773423][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 180.781837][ C1] CPU: 1 PID: 8897 Comm: syz-executor.1 Not tainted 5.7.0-rc7-next-20200526-syzkaller #0 [ 180.791718][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.801796][ C1] RIP: 0010:skb_clone+0x9a/0x3c0 [ 180.806955][ C1] Code: c1 ea 03 80 3c 02 00 0f 85 06 03 00 00 4c 03 a5 c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 03 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 64 02 00 00 [ 180.827266][ C1] RSP: 0018:ffffc90000da8860 EFLAGS: 00010246 [ 180.833333][ C1] RAX: dffffc0000000000 RBX: ffff8880930c9440 RCX: 0000000000000000 [ 180.841996][ C1] RDX: 0000000000000000 RSI: ffffffff86252493 RDI: 0000000000000003 [ 180.850005][ C1] RBP: ffffffff8a6524e0 R08: 0000000000000000 R09: ffff8880930c9440 [ 180.857980][ C1] R10: ffff8880ae738c5b R11: ffffed1015ce718b R12: 0000000000000000 [ 180.865955][ C1] R13: 0000000000000a20 R14: 0000000000000071 R15: ffffffff8a6524e0 [ 180.873927][ C1] FS: 00007f1ca4ebc700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 180.882940][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.889534][ C1] CR2: 000000000078c000 CR3: 00000000878e9000 CR4: 00000000001406e0 [ 180.897521][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.906189][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 180.914250][ C1] Call Trace: [ 180.917638][ C1] [ 180.920498][ C1] ip_icmp_error+0x31/0x5a0 [ 180.925015][ C1] tcp_v4_err+0x99e/0x1ce0 [ 180.929431][ C1] ? tcp_v4_do_rcv+0x8b0/0x8b0 [ 180.934191][ C1] icmp_socket_deliver+0x1e1/0x360 [ 180.939303][ C1] icmp_unreach+0x33b/0xab0 [ 180.943891][ C1] icmp_rcv+0xee6/0x15f0 [ 180.948397][ C1] ip_protocol_deliver_rcu+0x57/0x880 [ 180.953770][ C1] ? check_preemption_disabled+0x38/0x220 [ 180.959495][ C1] ip_local_deliver_finish+0x220/0x360 [ 180.966382][ C1] ip_local_deliver+0x1c8/0x4e0 [ 180.971236][ C1] ? ip_local_deliver_finish+0x360/0x360 [ 180.977431][ C1] ? ip_rcv+0x244/0x3c0 [ 180.982016][ C1] ? ip_protocol_deliver_rcu+0x880/0x880 [ 180.988449][ C1] ? lock_downgrade+0x840/0x840 [ 180.993284][ C1] ? ip_rcv_finish_core.isra.0+0x606/0x1ea0 [ 180.999263][ C1] ip_rcv_finish+0x1da/0x2f0 [ 181.003960][ C1] ip_rcv+0xd0/0x3c0 [ 181.007864][ C1] ? ip_local_deliver+0x4e0/0x4e0 [ 181.012883][ C1] ? find_held_lock+0x2d/0x110 [ 181.017643][ C1] ? ip_rcv_finish_core.isra.0+0x1ea0/0x1ea0 [ 181.024124][ C1] ? ip_local_deliver+0x4e0/0x4e0 [ 181.029139][ C1] __netif_receive_skb_one_core+0x114/0x180 [ 181.035014][ C1] ? __netif_receive_skb_core+0x33f0/0x33f0 [ 181.040912][ C1] ? lock_downgrade+0x840/0x840 [ 181.045766][ C1] ? do_raw_spin_lock+0x120/0x2d0 [ 181.050776][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 181.055935][ C1] __netif_receive_skb+0x27/0x1c0 [ 181.061400][ C1] process_backlog+0x21e/0x7a0 [ 181.066345][ C1] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 181.072408][ C1] net_rx_action+0x4e1/0x10d0 [ 181.077069][ C1] ? napi_busy_loop+0x9e0/0x9e0 [ 181.081915][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 181.087888][ C1] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 181.093856][ C1] __do_softirq+0x268/0x9ee [ 181.099322][ C1] irq_exit+0x192/0x1d0 [ 181.103471][ C1] smp_apic_timer_interrupt+0x19e/0x600 [ 181.108996][ C1] apic_timer_interrupt+0xf/0x20 [ 181.110787][ T2485] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 181.114017][ C1] [ 181.114033][ C1] RIP: 0010:_raw_spin_unlock_irq+0x4b/0x80 [ 181.114049][ C1] Code: c0 10 c9 94 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 31 48 83 3d 3e c5 b6 01 00 74 25 fb 66 0f 1f 44 00 00 01 00 00 00 e8 cb cf 70 f9 65 8b 05 dc 1a 24 78 85 c0 74 02 5d [ 181.114056][ C1] RSP: 0018:ffffc900184ff8a8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 181.114066][ C1] RAX: 1ffffffff1329922 RBX: ffff888059426300 RCX: 1ffffffff1519a2e [ 181.114079][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff888059426b88 [ 181.175632][ C1] RBP: ffff8880ae737d40 R08: 0000000000000000 R09: 0000000000000001 [ 181.183608][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880ae737d40 [ 181.191827][ C1] R13: ffff8880931222c0 R14: 0000000000000000 R15: 0000000000000000 [ 181.199795][ C1] ? _raw_spin_unlock_irq+0x1f/0x80 [ 181.204995][ C1] finish_task_switch+0x147/0x750 [ 181.210012][ C1] ? finish_task_switch+0x119/0x750 [ 181.210861][ T2485] usb 1-1: Invalid ep0 maxpacket: 0 [ 181.215198][ C1] ? __switch_to+0x4fe/0xe80 [ 181.215214][ C1] __schedule+0x8f2/0x1fa0 [ 181.215226][ C1] ? futex_wait_queue_me+0x1e7/0x570 [ 181.215242][ C1] ? firmware_map_remove+0x19e/0x19e [ 181.221932][ T2485] usb usb1-port1: unable to enumerate USB device [ 181.224995][ C1] ? plist_check_prev_next+0x126/0x1a0 [ 181.225010][ C1] schedule+0xd0/0x2a0 [ 181.225024][ C1] futex_wait_queue_me+0x2a7/0x570 [ 181.225041][ C1] ? fault_in_user_writeable+0x90/0x90 [ 181.267116][ C1] futex_wait+0x1e2/0x560 [ 181.271445][ C1] ? futex_wait_setup+0x2c0/0x2c0 [ 181.276554][ C1] ? print_usage_bug+0x240/0x240 [ 181.281479][ C1] ? __lock_acquire+0x2224/0x48b0 [ 181.286930][ C1] ? hash_futex+0x10/0x200 [ 181.291427][ C1] ? futex_wake+0x15a/0x490 [ 181.296063][ C1] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 181.302082][ C1] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 181.308074][ C1] do_futex+0x15f/0x1ad0 [ 181.312660][ C1] ? find_held_lock+0x2d/0x110 [ 181.317406][ C1] ? futex_exit_release+0x60/0x60 [ 181.322421][ C1] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 181.328394][ C1] ? lock_downgrade+0x840/0x840 [ 181.333228][ C1] ? ktime_get_ts64+0x110/0x3e0 [ 181.338059][ C1] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 181.344021][ C1] ? __might_fault+0x190/0x1d0 [ 181.348786][ C1] ? _copy_to_user+0x126/0x160 [ 181.353567][ C1] __x64_sys_futex+0x376/0x4f0 [ 181.358332][ C1] ? do_futex+0x1ad0/0x1ad0 [ 181.362827][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 181.368391][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 181.374466][ C1] ? do_syscall_64+0x1c/0xe0 [ 181.379040][ C1] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 181.385004][ C1] do_syscall_64+0x60/0xe0 [ 181.389400][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 181.395353][ C1] RIP: 0033:0x45ca29 [ 181.399223][ C1] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 181.418802][ C1] RSP: 002b:00007f1ca4ebbcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 181.427189][ C1] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca29 [ 181.435139][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 181.443105][ C1] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 181.451847][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 181.459795][ C1] R13: 00007fffabd9569f R14: 00007f1ca4ebc9c0 R15: 000000000078bf0c [ 181.468611][ C1] Modules linked in: [ 181.472563][ C1] ---[ end trace a5dd1f26aa729fe1 ]--- [ 181.478029][ C1] RIP: 0010:skb_clone+0x9a/0x3c0 [ 181.482956][ C1] Code: c1 ea 03 80 3c 02 00 0f 85 06 03 00 00 4c 03 a5 c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 03 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 64 02 00 00 [ 181.502825][ C1] RSP: 0018:ffffc90000da8860 EFLAGS: 00010246 [ 181.508900][ C1] RAX: dffffc0000000000 RBX: ffff8880930c9440 RCX: 0000000000000000 [ 181.516873][ C1] RDX: 0000000000000000 RSI: ffffffff86252493 RDI: 0000000000000003 [ 181.524942][ C1] RBP: ffffffff8a6524e0 R08: 0000000000000000 R09: ffff8880930c9440 [ 181.532921][ C1] R10: ffff8880ae738c5b R11: ffffed1015ce718b R12: 0000000000000000 [ 181.540909][ C1] R13: 0000000000000a20 R14: 0000000000000071 R15: ffffffff8a6524e0 [ 181.548864][ C1] FS: 00007f1ca4ebc700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 181.557789][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.565075][ C1] CR2: 000000000078c000 CR3: 00000000878e9000 CR4: 00000000001406e0 [ 181.573131][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 181.582063][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 181.590384][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 181.598173][ C1] Kernel Offset: disabled [ 181.602490][ C1] Rebooting in 86400 seconds..