arp_interval: invalid value (18446744073709551615) [ 580.092188][T21168] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:28 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x6c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 580.153181][T21167] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 580.197025][T21167] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:29 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x5000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 580.341373][T21182] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 580.409736][T21182] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:29 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000300)={r8}, 0x14) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={r8, 0x200, 0x30}, 0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 580.544312][T21189] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x6000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 580.628662][T21189] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 580.659272][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 580.659286][ T28] audit: type=1804 audit(1593037829.406:967): pid=21192 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/387/bus" dev="sda1" ino=16380 res=1 [ 580.766270][T21188] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 580.814698][T21188] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:29 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x8000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 580.981196][ T28] audit: type=1804 audit(1593037829.726:968): pid=21181 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/332/bus" dev="sda1" ino=16325 res=1 22:30:29 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:29 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) setuid(0x0) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x1000, &(0x7f0000000280)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@access_uid={'access'}}], [{@uid_gt={'uid>'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@dont_measure='dont_measure'}, {@uid_gt={'uid>'}}, {@subj_user={'subj_user', 0x3d, 'bond\x00'}}, {@appraise='appraise'}]}}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000040)) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 581.106005][T21204] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x9000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 581.169555][T21204] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 581.257950][T21208] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 581.311309][ T28] audit: type=1804 audit(1593037830.056:969): pid=21193 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/387/bus" dev="sda1" ino=16380 res=1 22:30:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xa000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 581.382820][T21208] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:30 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./bus\x00', 0x8, 0x5, &(0x7f0000000480)=[{&(0x7f0000000100)="b94f39f7e8c5ac20e3fe8388d1a7813796efaf88c259ca8fdb48e03ed371cc497f7d255788d958876d9f56bf561c3b7a8bf265ce47a79682f5075b778ab0ecfa6c2eef9492279bcd90fec003a9667b24008d7d74e1fcd12633824994239cbb31827c0f53f1114e85c998854cc1", 0x6d, 0xf0}, {&(0x7f0000000240)="0db75e966830273412974b619286b8e66aba40ce548ca281f116bfd04fd694c3d255092f81968769370b5ff8fbb9fb859e48525afa02bee12974a8971c2437c9c51dbc88217beae7a1802a6c940a911b42b0f4422b31d9787e8678022a6ed0306ee82085ac26a5cb54252211978e0fe74a7a3a83f3110a89c597fb51fc3b467243c51a4beb3eac541d7e45703d6b787fb65a6d6f1aec9c9f8f7659352bf42069ad844e2041abfb2b148e0b34808574a4629836daad82de43ad80ee0d20eaca41f0", 0xc1}, {&(0x7f0000000340)="03c80bd3a3bb043e676fa824bdcec09f05556277b7e296583bf3b04d75280fdd46c11fd296318bf5fb31f0006b2465299a2608c1346fd76d363e0928a397896f36f9516133976070255394153969c5516b32d71110222c5a00619fb7d484c4596176b68ec475a9bb56ea3f00194074596adc6568eedaf73f89daf75d07669513ef5a00c085cde893580b", 0x8a, 0x7fff}, {&(0x7f0000000180)="23683cec1e2c2992173082f4b96e2c4ddf4ad06b7047f4de6d", 0x19, 0x4}, {&(0x7f0000000400)="46d32dd8368d20d8ced132f4ff1e75f8ef11e75b3ae04f6679ea7b1a9e78b5ec6d9081482f903ff7b3e8e3a10a2e97c877fed46168a45661b5f90893bf868abd8f21b4dfba0d93d4b8", 0x49, 0x8}], 0x1022, &(0x7f0000000500)={[{@nodots='nodots'}, {@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@fat=@umask={'umask', 0x3d, 0x7fff}}], [{@appraise_type='appraise_type=imasig'}]}) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) r4 = dup(r1) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r4, r5, 0x0, 0x8000fffffffe) [ 581.455271][T21212] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 581.509090][T21212] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:30 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 581.571302][ T28] audit: type=1804 audit(1593037830.316:970): pid=21216 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/333/bus" dev="sda1" ino=16369 res=1 22:30:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xb000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 581.637896][T21220] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 581.707215][T21220] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 581.764586][T21212] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 581.798792][T21212] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 581.812176][ T28] audit: type=1804 audit(1593037830.546:971): pid=21229 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/388/bus" dev="sda1" ino=16371 res=1 22:30:30 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xe000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 581.890844][T21233] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 581.978153][ T28] audit: type=1804 audit(1593037830.726:972): pid=21229 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/388/bus" dev="sda1" ino=16371 res=1 [ 581.992415][T21233] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 582.066380][ T28] audit: type=1800 audit(1593037830.766:973): pid=21223 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16371 res=0 22:30:30 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x121843, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) init_module(&(0x7f0000000040)=',)]([^1\x00', 0x8, &(0x7f0000000080)='@){\x00') getsockopt(r0, 0x2, 0x2, &(0x7f0000000140)=""/135, &(0x7f0000000240)=0x87) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) write$P9_RMKNOD(r4, &(0x7f0000000100)={0x14, 0x13, 0x2, {0x8, 0x5}}, 0xe) 22:30:30 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xf000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 582.169159][T21242] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 582.248359][ T28] audit: type=1800 audit(1593037830.776:974): pid=21229 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16371 res=0 [ 582.273752][T21242] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 582.347385][T21216] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x10000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 582.380641][ T28] audit: type=1804 audit(1593037830.936:975): pid=21220 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/333/bus" dev="sda1" ino=16369 res=1 [ 582.439919][T21216] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 582.511201][T21244] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 582.558027][T21244] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 582.615156][T21249] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x11000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:31 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 582.667116][T21249] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 582.732852][T21258] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 582.787152][T21258] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x12000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 582.835798][T21261] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 582.864516][T21261] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:31 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x62) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$IMDELTIMER(r4, 0x80044941, &(0x7f0000000080)=0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x40001, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000180)={0x8, 0x1, 0xf7d, {0x1f, 0x9f39}, 0x2, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x29, 0x44, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendfile(r2, r5, 0x0, 0x8000fffffffe) 22:30:31 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 582.929876][T21263] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 582.982980][T21263] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x12060000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 583.081945][T21272] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:31 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0xa}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 583.152201][T21272] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:32 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000140)={0x60, 0x0, 0xfffffffffffffffc, {{0x7fff, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x200}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000300)={r8}, 0x14) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r8, 0x3}, 0x8) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffffe) 22:30:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x13000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:32 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 583.301085][T21280] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 583.365641][T21280] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 583.447689][T21280] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 583.502695][T21280] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 583.523867][ T28] audit: type=1804 audit(1593037832.266:976): pid=21290 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/334/bus" dev="sda1" ino=16384 res=1 22:30:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x60000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:32 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='cgroup.subtree_control\x00', &(0x7f0000000240)="891ce401169351d204514b5fc23aec020bc535cf7415b2ff09212a35122fc4b17e26a70bc3430ef729ec2a530131ebac642134159b26b10efab90b4c913bc404758a7babccc66f54269121ffd7a5db8c5fd277d2b4537e2dbff1794550770124fe7c30d91aade31975cc44831bc11d1ab5b3430c3b65fc037f45737698f9719eef2de390ab64f764bf014b56bbb617a36f33fb556397a121de76f786fa105fb58d63fa88bb13e5df0fa9e2478e43a9ea81ef4ef0ffeb43c908a00462d0394afb13ed330daddf7110fb9e115fc99b26c10ff1cef99d281a5f41a60cb52ad835bc17fd7788cbb8f60ac3936668241afac141af86642292bf69", 0xf8) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 583.555690][T21289] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 583.617266][T21289] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:32 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0xc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x9effffff}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 583.745289][T21298] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 583.806058][T21298] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 583.880440][T21297] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:32 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xca000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 583.941874][T21297] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 584.013704][T21301] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 584.070951][T21301] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 584.129620][T21308] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xf0ffffff}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 584.180124][T21308] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 584.243981][T21305] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 584.293825][T21305] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 584.344902][T21314] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 584.382882][T21314] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:33 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0xe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:33 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x20000, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRESDEC=r2, @ANYRESHEX=r0], 0xa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r5, 0x200004) write$FUSE_STATFS(r5, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r6 = socket(0x2, 0x803, 0xff) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000100)) r7 = dup(r6) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r7, r8, 0x0, 0x8000fffffffe) 22:30:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xfffff000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:33 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xffffff7f}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 584.592942][T21322] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 584.617743][T21322] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 584.648583][T21325] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 584.671871][T21325] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xffffff9e}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 584.702286][T21323] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551614) [ 584.731107][T21323] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:33 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 584.787106][T21326] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 584.826228][T21326] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xfffffff0}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 584.896171][T21331] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 584.933218][T21331] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:33 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0xf}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 585.018535][T21339] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x40030000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 585.085415][T21339] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:34 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 585.175713][T21346] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 585.258165][T21346] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xf0ffffffffffff}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:34 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x11, 0x6, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 585.348869][T21347] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 585.382968][T21347] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 585.432081][T21352] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 585.469997][T21352] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:34 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x100000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 585.569739][T21358] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 585.658679][T21358] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 585.690378][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 585.690393][ T28] audit: type=1804 audit(1593037834.436:986): pid=21362 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/336/bus" dev="sda1" ino=15969 res=1 [ 585.765368][T21361] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 585.796225][T21361] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:34 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x200000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 585.828269][ T28] audit: type=1804 audit(1593037834.497:987): pid=21345 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/392/bus" dev="sda1" ino=15890 res=1 22:30:34 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000040)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) setfsuid(r6) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 585.904477][T21361] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 585.953745][T21361] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x300000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:34 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x48}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 586.029394][T21373] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 586.095807][T21373] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 586.107717][ T28] audit: type=1804 audit(1593037834.837:988): pid=21375 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/393/bus" dev="sda1" ino=15734 res=1 [ 586.191129][T21381] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x400000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 586.241379][T21381] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 586.340801][T21382] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:35 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x500000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 586.395473][T21382] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 586.398405][ T28] audit: type=1804 audit(1593037835.147:989): pid=21387 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/336/bus" dev="sda1" ino=15969 res=1 22:30:35 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) ftruncate(0xffffffffffffffff, 0x200004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, {{0x2, 0x0, 0x6}}}, 0x60) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x1, 0x7f}, &(0x7f0000000380)=0x90) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(0xffffffffffffffff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000008000000050000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64001009000c0002801d7d9a1009507b08"], 0x3c}}, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000100)='(&\x00', 0x3) sendfile(r4, r5, 0x0, 0x8000fffffffe) [ 586.535464][T21383] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 586.567325][T21383] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x600000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:35 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x4c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 586.633632][T21393] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 586.685744][T21393] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 586.752133][T21401] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x800000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 586.784044][ T28] audit: type=1804 audit(1593037835.527:990): pid=21396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/337/bus" dev="sda1" ino=15762 res=1 [ 586.805067][T21401] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 586.884443][T21403] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:35 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 586.923792][ T28] audit: type=1804 audit(1593037835.657:991): pid=21405 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/393/bus" dev="sda1" ino=15734 res=1 [ 586.937601][T21403] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x900000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:35 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x840, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r7 = dup2(r6, r4) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg\x00', 0x80900, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380)='l2tp\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r11}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r2, r3, 0x0, 0x8000fffffffe) 22:30:35 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x60}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 587.108135][T21413] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xa00000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 587.171000][T21413] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 587.251546][T21418] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xb00000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 587.323418][ T28] audit: type=1804 audit(1593037836.067:992): pid=21421 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/394/bus" dev="sda1" ino=16161 res=1 [ 587.332874][T21418] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 587.416209][T21420] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:36 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:36 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000040)={0xa100000000000000, 0x10000, 0x401, 0x6, 0x12}) [ 587.457352][T21420] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 587.469658][ T28] audit: type=1804 audit(1593037836.207:993): pid=21396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/337/bus" dev="sda1" ino=15762 res=1 [ 587.521130][T21421] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 587.557475][T21421] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xe00000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 587.600576][T21423] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 587.640121][T21423] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 587.663227][ T28] audit: type=1804 audit(1593037836.407:994): pid=21425 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/394/bus" dev="sda1" ino=16161 res=1 [ 587.767088][T21435] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xf00000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:36 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x68}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 587.795214][ T28] audit: type=1804 audit(1593037836.537:995): pid=21443 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/338/bus" dev="sda1" ino=15795 res=1 [ 587.810374][T21435] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:36 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @multicast2}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x40, {0x2, 0x4e21, @empty}, 'wg0\x00'}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r2, r3, 0x0, 0x8000fffffffe) 22:30:36 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x1000000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 588.080988][T21448] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x1100000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 588.158361][T21448] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 588.208511][T21454] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 588.237034][T21454] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 588.288568][T21453] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 588.317723][T21453] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x1200000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 588.363413][T21462] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 588.394007][T21462] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:37 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x6c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:37 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xf}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:37 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:30:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x1206000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 588.594323][T21470] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 588.642425][T21470] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 588.710302][T21473] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 588.748913][T21473] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x1300000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 588.799324][T21470] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 588.844927][T21470] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 588.898061][T21481] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:37 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 588.943314][T21481] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x6000000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:37 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000240)="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", 0x1000) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r1) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x7, 0x62, 0x300d, 0x9, 0x8, 0x2, 0x2, 0x2}}) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendfile(r4, r6, 0x0, 0x8000fffffffe) 22:30:37 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 589.108824][T21488] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x9effffff00000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 589.169722][T21488] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 589.270406][T21490] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 589.317045][T21490] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 589.369762][T21497] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:38 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xca00000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 589.418900][T21497] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 589.504246][T21502] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 589.572883][T21502] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xf0ffffff00000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:38 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 589.672762][T21506] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:38 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0xfffffffffffffffe, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000003800)='/proc/capi/capi20ncci\x00', 0x400400, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000003840)={0xfff7, 0x200, 0xfff7, 0xfb, 0x81, 0x57, 0x95c}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 589.724722][T21506] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xffffff7f00000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 589.797442][T21510] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 589.830044][T21510] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:38 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 589.885655][T21515] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 589.921577][T21515] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0xfffffffffffff000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 589.992066][T21522] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 590.035697][T21522] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:38 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400203) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000040)={0x6, "c3529a7fbd3f25900a2fae9a89051e394c46b786fbdf76b47160151351cb44a6", 0x400, 0x1, 0x6, 0x2, 0x3}) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./bus\x00', 0x4, 0x6, &(0x7f0000000880)=[{&(0x7f0000000380)="28d802227b046262b8371bced1186aedb156440b03629b84d19060e2b01b9a06ee814923eb8eb1cdf74603990da6346282d22297ef13f61cc3bb9cd35ad98ef2d913514d87c9dfb2407ba9ca8dd2b77ecfd514263a2ddafeacafb43952f35d374f3a5279d17c09f66bf95b59bb88a5c7af658e78e4da1d8c079f295387930b370486e236035a88755996f5c6038fb36aa690fff99dd68170ddb934629060e3bdd8556551dfe597fc288f69bc98b993a36de57d3ce4602398398440016d753ac0cecfd6f5159a37ba48b0252f1a323f0b", 0xd0, 0x7}, {&(0x7f0000000480)="b594b7ded544f4e885b49dfd360d3d65b60dd451c52e527d87a4a4eea3ecbb8f10978f4558f56893470acfafd909b67c8edd8b3daca751ea4d0decaec183e0d21c5838a157766c0c6898e22542ca254456596e8ce22366a5c4", 0x59, 0x7fffffff}, {&(0x7f0000000500)="fbb724b07a340f94cc01455725c7c7fc7357fe84780c9ad06fe1a6347ad23b4e52c54c006a4575fcd520328c7d06a4f565d3ab2c6879895063d4cc6c1df720047b263617c0250e9a72b4fbd80c898722c387a2e1f70beaa6d26b12b758f8490139", 0x61, 0x8}, {&(0x7f0000000580)="1dcf4e0d080383fbf0daf2145a49ac4a628b65863af8f0a6d9a213fb673bd6b4205db3fe7f30e06facafd8bfe284f678f73b464659b8e034c63f87862f983790167cc96711499e846244bbb84a353c80f03220764878771eed90dc5c2d8d767ab5238fae0b78dc13c95e0c755d4f7c64d5f45538e0f0e33d9938ab8a7da539284be16a0ce5311e984bf8600dd0d274eb6cb28cf849017d9be0492e6ec0ad7a0e3d8bbed1b15a8b37d05ce1b8419d5d279060889d378df837c2ab35eee4483573d3925daa96dd8b736a2096656a57f7cb41e124942702d735554784c7c66f", 0xde, 0x4a}, {&(0x7f0000000680)="67081433dc4c23a8e0bd0aa40fce284c42be96e27b70eae5fef81ff2db960a38c5aa048d7eea671f89f3430a7ce806af33b0292ce6719198e69ddc5de2903163ea02335d9ba12feb3b4399428d1c0c38809800366bca1a887c5a2e3ea0cecf1276298c42173a9a3ec78f10199fe8822657b8c4d51c9c070d92e64111060d45a00688aa2896f0d0fa5bf7f208f0d2a3b16154cacc81b01d1e4c3bcb0af06f9b399462c853ddc9882233041d7b8b659bc6d676203c54f6568712e9a3c0ca5dff0e51eca57880ec47521ffce1787961c1f21a7d2852494c89a72cd669693e19c66b83746e5387d93156222195163d7d", 0xee, 0x200}, {&(0x7f0000000780)="f0d9f083ab4ad97e5b46c1386bea6d8bd472878a34ff8b984cea1e2cc5ad105cb774e20262cad79625bf99bc1b5a870aba54e09e536dadd2598a8af605f8c46063f4aa25cf88828dfb15065c569560fae1fcba69487ad9b036de10394a1ec1afca5eef3e714e16a32efb083ae12d77b5c15be86de5979818d14c76d6c02a66ee795b97dd1e21a26c7d1732aad82f6548526f1d4cc84cfefeec7aa99ba68fd1c6851bb9aaf08820b2125e102c8aaf06a6961587811163a84fcf00d3e94f8376001839afcd848dd5041f281a32d9878932d678", 0xd2, 0x5}], 0x30040, &(0x7f0000000a00)={[{@fat=@errors_remount='errors=remount-ro'}, {@fat=@umask={'umask', 0x3d, 0x9}}, {@dots='dots'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '(+'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0xca16870c70d8e487, 0x61, 0x65, 0x65, 0x0, 0x62, 0x30], 0x2d, [0x37, 0x35, 0x36, 0x50], 0x2d, [0x37, 0x62, 0x33, 0x36], 0x2d, [0x39, 0x31, 0x62, 0x61], 0x2d, [0x33, 0x61, 0x65, 0x37, 0x37, 0x30, 0x64, 0x31]}}}, {@pcr={'pcr', 0x3d, 0x3c}}, {@subj_user={'subj_user', 0x3d, '---[/#\xc0-'}}]}) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) prctl$PR_CAPBSET_DROP(0x18, 0x4) r4 = dup(r1) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000e78faeb50617c4db0000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0xcc28, 0x20, 0x6, 0x5}, {0x0, 0x2e, 0x8, 0x9}, {0x1000, 0x3, 0x3, 0x6}]}, 0x10) sendfile(r4, r5, 0x0, 0x8000fffffffe) 22:30:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x2}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:38 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x4, 0xffffffffffffffff}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x8, r8}, 0x8) r9 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendfile(r5, r6, 0x0, 0x8000fffffffe) 22:30:38 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 590.126211][T21528] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 590.192721][T21528] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 590.287446][T21530] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x3}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 590.329693][T21530] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:39 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 590.426230][T21535] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 590.482371][T21535] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x4}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 590.559000][T21540] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 590.596401][T21540] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 590.693607][T21541] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 590.741561][T21541] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x5}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 590.804967][T21543] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 590.842227][T21543] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 590.868120][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 590.868134][ T28] audit: type=1804 audit(1593037839.617:1010): pid=21560 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/340/bus" dev="sda1" ino=15796 res=1 [ 590.903665][T21553] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 590.926130][T21553] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 590.954140][T21559] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 590.994155][T21559] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:39 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) write$FUSE_STATFS(r1, &(0x7f0000000040)={0x60, 0x0, 0x4, {{0x3, 0xd9c, 0x40, 0x111, 0xb5c, 0x825c, 0x4, 0x80000001}}}, 0x60) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 591.023553][ T28] audit: type=1804 audit(1593037839.767:1011): pid=21563 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/397/bus" dev="sda1" ino=16306 res=1 [ 591.057175][T21557] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x6}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:39 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 591.105285][ T28] audit: type=1804 audit(1593037839.847:1012): pid=21550 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366851321/syzkaller.6bjSHG/420/bus" dev="sda1" ino=16275 res=1 [ 591.124735][T21557] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x8}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 591.206841][T21543] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 591.246001][T21543] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:40 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 591.337311][T21547] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 591.364665][T21547] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 591.378568][ T28] audit: type=1804 audit(1593037840.127:1013): pid=21579 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/341/bus" dev="sda1" ino=16384 res=1 22:30:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x9}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 591.438641][T21540] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 591.471542][T21540] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:40 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000040)=""/4, 0x4}, {&(0x7f0000000080)=""/25, 0x19}, {&(0x7f00000000c0)=""/88, 0x58}, {&(0x7f0000000140)=""/42, 0x2a}], 0x4, 0x7c62) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r2, r3, 0x0, 0x8000fffffffe) 22:30:40 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x400203, 0x41) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x1c, r10, 0x711, 0x0, 0x0, {0x7, 0x0, 0xd00}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r10, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000801) r11 = dup2(r4, r4) epoll_create1(0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 591.524401][T21577] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 591.548276][T21577] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xa}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 591.588573][T21584] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 591.625276][T21584] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 591.658787][T21589] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 591.672563][T21589] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:40 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x68}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 591.706817][T21584] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 591.733188][T21584] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xb}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:40 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 591.825410][ T28] audit: type=1804 audit(1593037840.567:1014): pid=21594 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366851321/syzkaller.6bjSHG/421/bus" dev="sda1" ino=15844 res=1 [ 591.857016][T21594] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 591.906878][T21594] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 591.962502][T21601] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 591.996130][T21601] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 592.051814][T21605] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 592.072910][ T28] audit: type=1804 audit(1593037840.817:1015): pid=21606 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/341/bus" dev="sda1" ino=16384 res=1 22:30:40 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:30:40 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r2, r3, 0x0, 0x8000fffffffe) 22:30:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xe}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 592.119069][T21605] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 592.167012][T21608] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 592.211206][T21608] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xf}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 592.268860][T21607] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 592.284202][ T28] audit: type=1804 audit(1593037841.027:1016): pid=21613 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/399/bus" dev="sda1" ino=16384 res=1 22:30:41 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x6c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 592.326253][T21607] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:41 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 592.455663][ T28] audit: type=1804 audit(1593037841.197:1017): pid=21599 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366851321/syzkaller.6bjSHG/421/bus" dev="sda1" ino=15844 res=1 [ 592.456645][T21621] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 592.593473][ T28] audit: type=1804 audit(1593037841.247:1018): pid=21622 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/342/bus" dev="sda1" ino=15777 res=1 [ 592.671278][T21621] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 592.723763][ T28] audit: type=1800 audit(1593037841.277:1019): pid=21594 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15844 res=0 [ 592.743444][T21626] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x10}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 592.766932][T21626] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 592.831653][T21629] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 592.875751][T21629] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:41 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r10 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r9, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r10}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r9, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv0\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3f5c}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004080}, 0x80) sendfile(r2, r3, 0x0, 0x8000fffffffe) 22:30:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x11}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 592.929097][T21635] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 592.975825][T21635] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:41 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 593.040263][T21631] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 593.075644][T21631] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x12}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:41 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x201) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x48004) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'ip_vti0\x00', {0x7ff}, 0xc3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000240)={0x7fffffff, {{0x2, 0x4e21, @broadcast}}}, 0x88) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:30:42 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x13}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 593.292215][T21647] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 593.339185][T21647] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 593.399891][T21653] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 593.454341][T21653] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 593.509227][T21655] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x60}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 593.555411][T21655] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:42 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 593.608361][T21656] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 593.643948][T21656] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:42 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x26, 0x5, 0x101) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10d759ab}]}, 0x20}, 0x1, 0x0, 0x0, 0x8c0}, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) sendfile(r2, r3, 0x0, 0x8000fffffffe) 22:30:42 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xca}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 593.834910][T21670] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 593.885884][T21670] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xf0}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 593.955068][T21676] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 594.012266][T21676] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x300}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 594.052556][T21679] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:42 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000240)={0x80000001, 0x0, [], {0x0, @reserved}}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000180)=@req={0x1, 0x3}, 0x10) r9 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000070601030000000c00000000030000030900020073797a300000000008000640000003020900020073797a3000000020050001000700000e0500010007000000"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 594.086835][T21679] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:42 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 594.151072][T21680] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 594.178033][T21680] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:43 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x420340, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000140)={0x60, 0x0, 0x7, {{0x2, 0x0, 0x3}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000040)=0x5) r6 = dup(r3) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r6, r7, 0x0, 0x8000fffffffe) 22:30:43 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x500}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 594.341854][T21695] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 594.390685][T21695] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x600}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 594.458216][T21699] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 594.500604][T21699] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 594.551356][T21701] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 594.585846][T21701] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x612}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 594.634951][T21702] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 594.672529][T21702] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:43 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x209}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x900}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:43 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0xa}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:43 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x155442, 0x15) ftruncate(r0, 0x200004) r1 = socket(0x29, 0x800, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 594.935458][T21718] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xa00}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 594.998594][T21718] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 595.061140][T21724] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xb00}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 595.123098][T21724] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 595.186518][T21726] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 595.232419][T21726] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xe00}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 595.300687][T21727] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 595.329285][T21727] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:44 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:30:44 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:44 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = perf_event_open$cgroup(&(0x7f00000017c0)={0x2, 0x70, 0x4, 0x3f, 0x80, 0x6, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x7}, 0x434, 0xffffffffffffffff, 0x9, 0x3, 0xf1, 0x7, 0x9}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="54130000140000012abd7000fddbdf250f8c0410010014e36cd2b1366fbc00788ef35e9764299a0b76add9a9a40e478b7142beae5ef414137909eb326ac65ea134e328e6571bedb557e86bc50725997e7eac1bc1502e03d8143af45ee77d937ef3c0bc57db3dd7f832d25470c4adde28c4ef67b4a15e5100d2212b29cf9bea4104882addff710bdf3f28ce901d6ed30403528cad32dd21d1aa6c4f370721e89236541e889f91ab6c757b757d44c2d0583e1346ce073256b2e80240b1ee801fb85724c9ccd1a16225cca5d9156b5e39e6271b19667bae8110b27b00f257b045e6e2648f86d9f11351179bfe379e8d71fefc50db17a7454e80791fd0d8d515ed0c05df29c96d3c2ba8c805999531eace3586d05d6bfa9a5f3545869ec58cd22b591b4371fccac45d6a023db22a27e72284c20b00e20c03257ebe37fc5025a90f811ce2f24a65d4b86d10755f3a41811359fd40ed96dd016fb23340bd20edaf549c0547038bbde19971a08de81bf006ef5f2e2df158f9c2ae907d6bc2a0c9b7ea78c30a6320881dd585e88005c210412aee687775a2c5bb62db54327ecca1547f2729eb93e2be948a612e9408efb3cb2badf437ba298b29ad2f3a985aabe18de52801d8d40f46db26fcad1f78b87d35a6c338ac2ac86f85bbda24e590b779199a89d1c83ad72fdc66823d913be0c21498314ba21419ff11a64804347e8a2d802ae73469938541014883526d5d25c371625b95ac0069410d7605c48b66747c21f951e42b66ca2bb1f97b3da8602b3dcf89a37353d6debd9bcaef450890d4d6b303e72711d27f39c761ea49f722cf5246e42daa965094a9c3ee5ea68b8f34976c5d8d9fbd60d8386cfb5a3046d5610f21149a403c1dbe29d2c5054452c457d7f07e7e528dc4558294ce253d561566af10435cba81b9c2149d304f8fd3b270886ee25fd2915dccbdb370b9c3c0f886f13bd3fed344ace410c16c9e9c22f2f06d464a1f6eb18e96676321df028e091e58bfb5a917698c756d98dbf81ed84847536877ab4b638a2a3a7b64fa02f275ae264c1e9ddc5d756db551ae11ee8dc94302aba7cf85692ab4abaa7e1cc37ab1c24dfdd969fa7b379bb897b33085931e4ba6e32aba805e78d20ba43243ab9ea1d1d3b607206dfd92e279acc1abf73d9ab8dc82b66c0802dab0d0d1ece28a44402e6247b2003703297ac58847da0a1acff8e53f52e90cd460bdd1d56cb7643f21c11e66a2e45efc285b7297a241e0ce0c62343b7b2fddb238e783863dc743f77deb3ef975418a5270d158a8128c5c39a63a10be915f3faccb1e96cc0a41c4ee0ef3f19bc8dfa0bf273bce2d65a4fa80e0e53646d7d846d6d06ac6a9330d2c853ee3f65da5784c5f09885815f39e4bc42fd2d5433878b47b891592431ec479249b58887e57df22c00550e59c56b92d47887040330240b3dda5f77d7c0e2d599b074092b6dd59dab9b51d2592503226db41ce8a7e76de946050fd4b9c814da66367ab27e857c67f56293c561aeb6d40d8e9a7d5c2bfdf2fff3d331e5dcc75b3010e1c1cd9c27619f11609ce6daf8c2ee769cb896a7b0d0b9a4867409369479be8950d3da2cb48db3143cbb49ee218b8860fc5c6530d6c13dfe941fa4932bddfee83b490f6834d7682d0d4cc539f42e09d525dd2a998b9925c847f09f981f4eb3cf68f4175e2852bb1cc5422a6604f29679c019760a8ca8896ead0e1f0074ae018156395f93c8baf775ff1dc16d475dcf70611b58c1c263a31f5612bdfe2199ff2fa6d3e9db2c392ae982b9424c76ade2970808dc303565619792508af52d6a4488b355451f46fdf50ff98e7eac2584cc84c96d6f919ff39dc48be3b7e5205dc3e44ce44f71652d7b23999459f05f8f9f2c6f1d56163bcc182489eea7d67090b1c365e148b136df01e8c067720097345386b39d0c8844092dc6bc7cb1b6a89f62962a16641022e3e912d67b3e67694011c460edf4847fd8b87d0e49d8854e9382584a2a73f00ce180a1d84f9d7cbe82ae7f15d6460c76f2f00c710022e9b524218a07cd79731e0949d765377ee38d3def810564d124a4e3c8ff0ee15410c03338864c55d0af74a0b6965f633162c837abeca4e4b18807a53f36fdcdc1b1049b6664a77e20e342fb3976b9c9b3c9d7478de9fc58bd569bd04569ca61f86c0904a7fe898bc5cf169fb509a5a0a3ef529afea1f5c9f1afa287c0bd53e7bde4768d19928561f2e0f0d9d85a1779111c18a7e90b9cde4d63a351650d6d5f2cd1e5cd71cb3cc41bbfeb975ee0307b5ed23dc50938c779216ccc74b96150983854e620f4c78feefad215ef947f9915a1c4e906437f8ec1fdd20978f8e8e790434341df769c76ef6370fc654b5c326ff88f595c221cc5a64671f2fce553e3be2c64c7eea39040e3726d7e0614609957eb2bbca39abe429e753a43d7add04b6e7e136d4bb73064df9185a2680805aa58cf759c58a434d2a196a760a2af5aa5f4065d30b71fd725b44ce65f7fc23c73b307c5df1e609c31d207bc8c78c371674951c3189b06e6ee13b6e5a946ed1abbf4c80d5e9f8e68180f864267900e6217c4a1188d642c44db456dca5aa9fdcfcb2544f542360d8aadde23c55493f93e6cc56742a607c78fdf86a9799cce3ae7c6bf9ba38fd85489c4090451254d2ee130cb608c4c724dcc8e0c88786ab174a2efcf445de9a2a5ce24ef809ac5b3b4106350fac222acfa8063ce4362ff74ac928d418092c2d0fbd5a9dd059f3d0489c54aea3679201b1f980e1e678d50f4e5b5cb55ceb3a91b75572d4d6bb676abccd0dd5b1e83bb1f39b4c4a6bea82e3cea844b79d5d7538f00282e5954016e6ad5064f72de1e092ea0ee5f56a19398f154779a3370b4efef3635bd7bc0c3e95f7c434ca69cbcea00987869bb5525b5c64038b8e63cdf00f81c0c5bbf485bd97245fbfc001598408725cacde8af0ae32e265dd5492779403940c1398ccd756f89d0eb8d9ce64990b8aaa4f8dec176b08e1aa2f8209f4e8a33e1c3e89cdd4549e2380549cf1b94a827c6ee0599d81af0da46c481e4aac3273b2433868fbc3af02b6ec89aadb3caeb03453b2017d07174ae0dcb99847d136a1ba8976ea131e6b4548219e1aa137650449c28a9b59ce1268bf4ca30a9cc643e3953d7012f8b23f20a56365df3baa4e49de30536282f81a61b2b65f67f10079a0e8ec876c278b8112715d2148ecd27a6ca1b770781ca4066a9b707664802376a2b3b7694a5d894907e554835b69838a3837f77193fd93ec9fdb005ab27c2496074bedb06dee5a90d63969ba726f99a2ac83880ebed44eac3d177e044bb75a1e0e4cc087c54801fbd9278cc51db9668306010767576732ce531c6449e9552b557f144ec87009b4def73ff81fc49e3a7d9911adfe79f72869c36fce3fa11dc6a34269fdefd9bdc3faaff4c6e89330d3827438fff88e44a06d4fdeb39fddf92f600e89de30953dd25156ddc7a9100c7231b31ab881e181aceb4ef3c48c98d4da34eb4de6031ae16b22e557d3585a12608e68bf5d1e389a7e5d566bd46059251a4579a5c17f4b6c2f5356a3b8eb6f14142a4849ef286ba25682cbdb9a313a5218008a2afb5541d210754f07f01f1acc1324279b34994fc2329997624109df47a415428eaacc484f65fda96de9d60b9bb8d58aa298381b58713d5f7e7e2157cfe4d292af056da3ffea35598d7c76312d98ec091d31b6f1df81901021a030fc280764766a5cde2463a5c8c517512eb3b523cc5f079be97dc3641143facb8682928f49ff5ad768f2ffb5bf8d232e8f40faa1cf169e15db79c96cf5dc14d11a7a0ac5d617814b98c4659b990b5e978c6d42923aeab9d86c1daca9db32010d49b304f51570d059414eb5d64b0fce48617d521e5cb15a2d3fa09c9079c7519ff1a20644d440acf7c619fb49811443f47e3b95d3ca79cc58c3fc52837934335d5132404ab5e5d1bfd93b8a0e9ccbec7ab4d371b81d494db597ae0fe579349babfabbe110f6b9650c47920201523ffbc821448a95edf472e10c4e4069c6b05fcc51c70b1558be762a0560a7d983afbc9fc70d2a4a51734a207e8a480655d1ca04e1f754a33ba0c1867b137b29887664a4fc9a80b3409b6ddcefdcb75045a3c67104abd74b2a174db709d8d7543b4bacb53df61c353ccc8768953d41acf2d70c287a479b19af1bd626db247bc4451d69d9eed3e08dccd71ee9a3fff733eeb66fa880e19998124f38814975d18ba11b2b20d2e8ed828f271dced239771e9abade0ee97e44f661c5ae4907fd6496406d8d3a33227689b90c40a4860aba69995fc7e2d2786af6e15358fdee01cfa4da57fbdd6d5da471fdcf9e53a15be8765d8f8f791388ada5a36a3050d0781932cad008f3050c1c6f78b5178344e1115f57be135b21465ed00e93b5f12d797d94bf6a694a3b65dc365ea1ad9e96a8b62aa55f49eed919262ad47c6f9f61509abe555cc1e91fad0a79cbd7d45ad63d4514c0ebb86e84443e95f5ce4639243e41b5f9b28d9c7d9f63acd5cdb085d3614914b3b9c9ce0c0ddaeec7ebd1f50c9428760580548259a8df8823cc4d8c17baa50cd567bd9ad617da44043634fc0d07a5bff905089e5b350565f719ea22ff0ddae2ce9ce6b1a264773782e9fe86c0d2ef36acbde96d4fe41f130c00db8ac3d0695a73543fa7b43ee74da03a58d869eca55375f7f7534f140aa4e09b2cc51a9aabaad7db6544907253bae2cd28e0a2563133852cd8f0f665a70956fe9870f16c0993fa1c70fa960c51f0b025addd9c402b92739ab29296b71a2949dbec79ee80fcf7c8f3c7ba7d7baf911b306186da20b652f592d9fdc24bd144742131074d713513f2f007bca400bd003230e31cecd83f9853bcb3d9b20fd92c8a68b0528865a80866597fde6488b5bc6b4bf7b5e67a3acdc3705990dc37572c62120c507f549a7d48d085357aae4b1a29e453c99f93e32d823a0bba3456ca1be0711324d8c557ea63bf770c493381307c44d1f4fbd661162d7b5123a7bf99b4030a5293c3017fe10eb8e663b5ebfecf2fe226b7ae3f94af77dd2e2d7b95ccb425be23fbd86120940ae59f7735e8ac1df4191c763beb264cc602fb372c7df4e2e1009b65bc171b04a73012e9d0bbe177d9fb191975cbed643ac26f3b5b08cf05479f6d560249018856a41c0d950afdf0ca34e856aac4f23a7d840a01adfc7da2d8da7abe24d64fc4d0341722edad61ba8302e1c29613e2840bed866ff075aea472018067a300e4fbe40dc8c16f36b549b428fdfe3896566717d52011dfe8bf405addcb06fa6872cfa4ba4340bf135e18ea8d5d9da4e02c0c5e33aa03612ca9d2b26da01a12f0d90abaa4e3842717f2fe3e2906e5a7a4193ba890ff72ecc0e926ab38631a7b519df05bf4acaddf56fd2dcaa55544eb14d0f64a5e3182ae61a0d5ff5e28eb788562623a3f0c9473219b7c6f3e72534b6a163577044556d9d0eb59bb30037d2019991283fbad3a4da337de3b1c8316cdf4e9acb39e9ca4b477cbdf865cce09502189d6d28aa68e4f6808ab900b6fd7b0769e40300ae2045a354556c933208eaa1fbce98ecc9814a58e97a967f3752669fbb2b50960a76bdcd07b899a255913f61c3fbb7502522d7946734714646d89fb9d1c54f57b191ab1205b632651682890ab3108f9ad8d3a3aab035c71fe3ebeff89b52dec0a0d913429c4acb9495ec8fdc35b39892136f3d1db43bf9fc4ae13f09972060a207e7c47d54edada00ded62e05e1e1c65ea5a1855a48d51a2b01457dfb60cd145ba0d99f76289979339d0c22e1ab1ccfbf7d61694ba2f5e2b1209012af842987269589af1174ac257fb3c369c055e8a000010005ee460fd15681cea422f0ab5b1071ba42fe7e94f65b6883d8101fcd2e2e6acae808d236f2e42cfb703bd05b5e3659b8811e734a5d4deb5ed96f3a8775a55d7e4b2e633e4a04872753cd6eaba0aeb87ff46851a1944122b5045c61c3b445329aa7b420a3de9c732ffeaeec35dd9b4dbdd01785b43fcfdfe4807a7de53dae36494cbbe682ba70d3fd2673f81188ae25af1025970fa713ed83e6ae8d03a1000100873407829f4d872c6ea14324a03395c7c280874527d21e7ef390906ff1f67ac0dc5a6882d61201c5ee8f1f15d73aa3fcfd172a39dcd46278a3356d7fc25eb682774539987494b04fd712003c75c7638c83404ec5703ebbe35d3229f7b558e3261ac699c6b343ca0f8d7c39166fa19a44174cf479fb9b094cb3ef1e47d05ae1ed36e1ae71ac05743405cc7a0e8468f7b3ae287bdef9fcf1ba9901de0c980000003a000100d6d24dc114af461be9c6f9fbba6dd592966e9e5ccad2b401797fa3d9af99541fb55abcc888570efe02e96979e3d0a3b9ac905cdcb14c0000a1000100577353bd8ff068bb530424748d163ef5dcc756596ae6723e567ddb16e2e46a05d959b89d5232a96c757b261855c9ce613390fd5b717e5103908c150c1ff41bbc2fed1c947d61678d948046be0ab6653d8e254ae46320f367f64008a9d135339eca4d6640bae50edd5b263070a7a8860b70cbd50e375bd0ce39700e06d217b987025031543e5fe345c604dcae71cd0333bd26f89cc8cc9424916e321dbe0000001d0001009272745b691ea853c8bdbdf8f45b21d4edd053582143f4822e00000068000100ceb88d8d7d2679e12f8a8d1d0ca5b3002f5f9f9628365ac99e9ecb86cce841c93e2b146412c14c752dc47334c2a257438fb0873933cde755853d68ccd2724b19c388e5a70198ac0daabf334a943710a1d1a1a8edcad8f6da79c9d20c616d581b125ae1928e000100ce61d8d3577beef9bf083706cd382f6b4aef718382d66f99cea17c00efc66ab15addc43342e32ceb7361e2e10b7abef4f45302212311dfbbb76146666008c8b7ce80455836d9f57a2e3dccbd6a5fd56ca760742392a5d357ad85e2fc3cdbb432a605ac804a83d8777b117e613857944ba06747c410188e7b73dacd5a13208e47f4f913b475cc9a536f4600000000"], 0x1354}, 0x1, 0x0, 0x0, 0xa020}, 0x85) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x148) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000001740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x145) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fcntl$lock(r4, 0x0, &(0x7f0000001780)={0x1, 0x4, 0x4, 0x4}) readahead(r1, 0x7, 0x6) 22:30:44 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0xc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xf00}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 595.529321][T21741] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 595.586534][T21741] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 595.644843][T21742] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 595.692337][T21742] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x1100}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 595.742635][T21752] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 595.792905][T21752] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 595.851356][T21750] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 595.886244][T21750] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x1200}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:44 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:44 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0xe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x1206}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:44 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0xa9, 0x40, 0x3, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x7fffffff}, 0x2800, 0x3, 0x5, 0x4, 0x9, 0x68, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) r4 = dup(r1) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r4, r5, 0x0, 0x8000fffffffe) [ 596.140223][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 596.140235][ T28] audit: type=1804 audit(1593037844.887:1044): pid=21764 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/345/bus" dev="sda1" ino=16384 res=1 22:30:45 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r2, r3, &(0x7f00000001c0)=0x8, 0x57) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r5, r6, 0x0, 0x8000fffffffe) [ 596.189548][T21763] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 596.248659][T21763] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x1300}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:45 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) mq_unlink(&(0x7f0000000040)='\x00') connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)) ioctl(r4, 0x1, &(0x7f00000000c0)="96c87553") ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000200)={r5, 0x3}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000000)={r5, 0x8}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000080)={r5, 0x2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 596.337514][T21774] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 596.416474][ T28] audit: type=1804 audit(1593037845.157:1045): pid=21775 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366851321/syzkaller.6bjSHG/427/bus" dev="sda1" ino=16381 res=1 [ 596.420153][T21774] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x6000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 596.545334][ T28] audit: type=1804 audit(1593037845.287:1046): pid=21783 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/400/bus" dev="sda1" ino=16373 res=1 [ 596.582891][T21783] EXT4-fs warning (device sda1): ext4_block_to_path:105: block 1400227990 > max in inode 16373 [ 596.611525][T21772] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 596.632034][ T28] audit: type=1804 audit(1593037845.317:1047): pid=21783 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/400/bus" dev="sda1" ino=16373 res=1 22:30:45 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 596.675892][T21772] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xca00}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:45 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) 22:30:45 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) r2 = socket(0x2, 0x803, 0xff) semop(0xffffffffffffffff, &(0x7f0000000080)=[{0x3, 0x5710, 0x1c00}, {0x3, 0x3, 0x1800}, {0x7, 0x0, 0x1800}, {0x1, 0x1ff, 0x800}], 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80400, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 596.834547][ T28] audit: type=1804 audit(1593037845.317:1048): pid=21782 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/346/bus" dev="sda1" ino=16374 res=1 [ 596.843401][T21777] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 596.973742][ T28] audit: type=1804 audit(1593037845.537:1049): pid=21775 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366851321/syzkaller.6bjSHG/427/bus" dev="sda1" ino=16381 res=1 [ 597.003202][T21777] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xf000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 597.079298][T21791] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:45 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0xf}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 597.127559][T21791] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 597.144956][ T28] audit: type=1804 audit(1593037845.547:1050): pid=21787 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/400/bus" dev="sda1" ino=16373 res=1 22:30:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x34000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 597.267950][T21807] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:46 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) ftruncate(r3, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x3, {{0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x60) getegid() sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r5, r6, 0x0, 0x8000fffffffe) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000040)=""/54, &(0x7f0000000080)=0x36) [ 597.343106][T21807] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 597.358757][ T28] audit: type=1804 audit(1593037845.557:1051): pid=21783 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/400/bus" dev="sda1" ino=16373 res=1 22:30:46 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x101040, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) r2 = socket(0x2, 0x805, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="080000010007000700ff52000204000000000000"], 0x14) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$IMCTRLREQ(r8, 0x80044945, &(0x7f0000000040)={0x1, 0x20, 0xfb6b, 0x5}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r10 = dup2(r6, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendfile(r4, r5, 0x0, 0x8000fffffffe) [ 597.433016][T21811] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x400300}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:46 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x700}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 597.479651][ T28] audit: type=1804 audit(1593037845.857:1052): pid=21797 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366851321/syzkaller.6bjSHG/428/bus" dev="sda1" ino=16381 res=1 [ 597.508352][T21811] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 597.614088][T21819] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 597.668839][T21819] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 597.704106][T21825] IPVS: length: 54 != 8 22:30:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xf0ffff}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 597.705188][ T28] audit: type=1804 audit(1593037845.877:1053): pid=21798 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/401/bus" dev="sda1" ino=15762 res=1 [ 597.739016][T21814] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 597.775574][T21814] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 597.819015][T21829] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 597.839500][T21829] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:46 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 597.877913][T21828] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x1000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 597.922149][T21828] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 597.987044][T21825] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 598.023262][T21825] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 598.074893][T21838] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 598.110244][T21838] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x2000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:46 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RRENAME(r3, &(0x7f0000000140)={0x7, 0x15, 0x1}, 0x7) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r6, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x4, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x48a8}, 0x4) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000040)={0x1, @sdr={0x32314742, 0x7fffffff}}) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400203) sendfile(r4, r7, 0x0, 0x8000fffffffe) 22:30:46 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 598.173175][T21840] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 598.222856][T21840] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:47 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 598.308595][T21846] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x3000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 598.372603][T21846] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:47 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) dup(r1) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 598.429087][T21843] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 598.460236][T21843] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 598.523415][T21858] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:47 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x48}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x4000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 598.565484][T21858] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 598.663967][T21865] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 598.720350][T21865] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 598.779053][T21869] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:47 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x902}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x5000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 598.828035][T21869] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:47 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000040)={0x4, 0x800, 0x7, 0x5, 0x0, "864ab7d784f949566c4c0046f0eb1d5e9d2697", 0x5, 0xb3}) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r1) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r4, r5, 0x0, 0x8000fffffffe) [ 598.909568][T21871] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 598.938688][T21871] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 599.001287][T21878] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:47 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x4c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x6000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 599.049355][T21878] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:47 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x7f, 0x9, 0xdf, 0x7, 0x4, "09c292a8d21af18018b6fbb1e447d4613275e0"}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) read$dsp(r6, &(0x7f0000000240)=""/238, 0xee) 22:30:48 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x48}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 599.144756][T21887] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 599.179211][T21887] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x8000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:48 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 599.247064][T21891] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 599.284751][T21891] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 599.351649][T21894] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 599.387647][T21894] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x9000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 599.452664][T21901] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 599.488437][T21901] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:48 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x60}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:48 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 599.547080][T21904] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 599.572527][T21904] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 599.641831][T21910] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 599.723926][T21910] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xa000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 599.774746][T21914] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:48 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 599.849288][T21914] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 599.924760][T21917] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 599.971587][T21917] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 600.036502][T21916] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:48 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xf}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:48 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x48}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xb000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 600.088471][T21916] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 600.154057][T21927] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 600.187787][T21927] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:49 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x68}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xe000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 600.293457][T21936] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 600.311605][T21936] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 600.327028][T21934] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 600.352674][T21934] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:49 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xe00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 600.407361][T21937] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xf000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:49 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={r3}, 0x14) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={r3, 0xa511, 0x5, [0x2, 0x0, 0x6, 0xd9d0, 0x7fff]}, &(0x7f0000000240)=0x12) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r5, r6, 0x0, 0x8000fffffffe) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 22:30:49 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x48}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 600.491207][T21937] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 600.552828][T21943] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:49 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0xc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 600.597085][T21943] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x10000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 600.674571][T21950] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 600.701206][T21950] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 600.751008][T21952] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 600.781810][T21952] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 600.829706][T21945] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 600.856823][T21945] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x11000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:49 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x430002, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000000080)={0x2, 0xdd9, 0x0, 0x4, 0x2db48, 0x4, 0x3}) 22:30:49 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x6c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 600.900983][T21961] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 600.940157][T21961] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 600.984898][T21962] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 601.014833][T21962] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:49 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xf00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x12000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:49 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x60000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 601.170213][T21971] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 601.216053][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 601.216072][ T28] audit: type=1804 audit(1593037849.957:1079): pid=21974 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir478325879/syzkaller.5mLXns/407/bus" dev="sda1" ino=16377 res=1 [ 601.306799][T21971] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 601.369446][T21976] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 601.395376][ T28] audit: type=1804 audit(1593037850.137:1080): pid=21954 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/350/bus" dev="sda1" ino=16379 res=1 22:30:50 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x1, 0xfff) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmmsg(r5, &(0x7f0000001bc0)=[{{&(0x7f0000000040)=@phonet={0x23, 0x2, 0x20, 0x53}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)="faf005bf54d17fd7af6d0c2d316a915410a802db93ea1feb84a15bf8ee28db5496162f15c5a92d175ba97e1bf5e6fda028ebf79ee04cae2e42295e74323bd9a94bcdb4daaa2b38d23c1c510701292c16e07888431fd67f4eabff70690e2ba4eb39bda45fa8c4c61247878b72368aa1c6874185114425341e7cb2e1787dbcd79a2011d9c9917722b37286a4c8e138a76a786e662fd3c07333afe6052b2cac003dba9228", 0xa3}, {&(0x7f0000000300)="5a4ac6830a18ee94fc5ca7d46fe7c43b976ed3b7f5e8ee74cade8d288ae0f141e31e005d68ed2a7f16ab406dd8925b3e9706594e5cf8c18345fc01347d8fcb085a30e90f296f2244e6ab903c37b15f6a7de7d057b6ad7204f44328b1b82930763f3b8e39df24b7cc200b89e6628fcd25c6922354e2a029af7e3ee3e832c0ac0626af5d3a3c0d5589b25b7c24e6c475dfbe3e8caceb6bf8103c6c3bb4ebccbaed8ad59062269944ab4482b82b9c937893dbe042d35b19bb3708e5ec4965ca", 0xbe}, {&(0x7f0000000100)="f7a6dbd9575f03c3", 0x8}, {&(0x7f00000003c0)="c3de7c59fd43984f534aea4d41d8493d33179be769654a16253300d0b18e50d7bc4968f42d6649660bd53aa3891b1702a1e0900d802e1cd9d66e8153cd0480896012e53a48328ee66afb7ec4fdc2e75d57b7f1a016adf6a9a2d11d81a7b3dddf1ee9672789729ab0346541a182671809d32471c51e19924cf797701d5bdcd98d6dd66334812e9fe531c8a38627f2ef4b2b7cb7f7f034bb65d55c314159d27b381d3a42bbf7dd9c37b8e1e13f4f428949f597de068df312aa894eee75ff7dbcfa7e4f3dcada52b8a3000e9ee9d81a771a9b03a7c2075deb554e00aff389eda58b719f58abf7f086fe51e59daf4e3f73be", 0xf0}, {&(0x7f00000004c0)="f76a8b4e4f008d834d8c198eef24f9b52fa18c9801d4c8803a575927e1068887aa7059ed166b4931e7ee6ac440dc14644915ab8ea98b586ed97afc5b04b16774a1c669839b6e0cff66ba6a949f46c0b70f5c2b2d8d42e49a263f06c125e808d6ac4d90ba1a", 0x65}, {&(0x7f0000000540)="1f8b84046c6f9cdd26be9260d722208df41cc7c5b6a8b06089dafcf93e78169de90cfad57f38a6e4e5f9ce0097772443715b156f02e96195be7e48b2a9fe205ca0e3cec75f32efb84f66c3ebb14dc3d0fc20e7fa05180f7b26d9f83b0525e260f8ea8fb062db50d6760de7416fa34bd2337101b23989495798fac361e113225385956856ae", 0x85}, {&(0x7f0000000600)="24a9d8b4a202c004a336b19f5eb4a21698e6852a662209b2bebbd825d54db8152c8a8edf30f02a3d028c6f01c0afd1ffdbdeffc7d40f2a523295d47e0ea67c6846e8fc06d882635a6d532a1eaf0c9602ee1fa50eb543cf03b35b3228f8982afa5082093ddfb42944074ca6b3fa6a", 0x6e}, {&(0x7f0000000680)="06020706e4a2e85d37f0f785036561d4efe5df0e6443efc7f8d4c237840b83468b09a9850b22f03e826c9e810011a48ef024620414b3b9270423fd7660c9b4651315a7d606f9781076dc9fcf14ce9cdef10d2f1ca47ce55963ca2c1f162490cefd5d6d8e826a4578affdc619ef7f36059873a8706a6784e25f039983864d16f58f9f33390613692d0f4b8e2010ed7ed8c79aa993aab7a97a7785b4812b84f35e59643d89fe34025e76b2e9bd98f65d0d7683bde2470349020045211a6d2cbf", 0xbf}, {&(0x7f0000000740)="38697fde9f3c7f486a7f0fed9bda2e97a3c8e3ae132a4c0def1a114d3e6fa3d45155d93156e35af9b5904f6541f9dea6a3609be07f52f3cff113e8fd2264dbd0583e6c3876d120db95d8f31f85194c9e04dbcf64dc40b75fd2fe0d8b0fd12dddfb4b57952add31bc149e4ce85498f21ab334dd79fb6a3bde7050e875b26bf873bfd1111319739198c3433717d8109040a2eabaa01fb717370188d8eb", 0x9c}, {&(0x7f0000000800)="ab2888be2a9c70de67379cbbf44a4e615d3490ae0f5f613f75b46ec95008100191b22186085090dd3582d22a6b330fc39037ab5d4a84c4427f4d7881a6abfd207943a8b306578c493fe4e771e3d3592244158a4dcf31224570b802cc131d3705b289e2c5a8fb3392b1a7fd6a44a2", 0x6e}], 0xa, &(0x7f0000000940)=[{0x78, 0x84, 0x10001, "85969d9079b6ea3633a893a3bbbb158071e84757765415ded58d95fa576a3266fe287f080dc56a4d9e3b2a18a53eccfe29acf3ba014968a93a0240219c45a9f3fa64181472130621977214356d787b75d1f8ce33b67dafb2037e08506c21344ed6743e01cff604"}, {0xd8, 0x3a, 0x6, "3474355274fa561a661944932d9aaed6de139847878ca3fe57a70ebd05ed3abf6ace4eb98cccadf19544a09fbba73f3ad5570ae240b29f4de1cddef6b47f6edef8356495c6d43f2f55b4dbabe29bdfd046256a663da5d55bfaa0e14f62471d849c0a4f96e8249960bb57755efb0b01b2d0b690d397f49247e11f0b89a7810319b5abae22f3494a8b5b362b342e4b8039326cbf9911ef1e7e215ccc5293e1483f4c304623236d93b0ab2d4724e63f08decb4d84e17589183c4b407fb7ef61907374ac3ceb55c9"}, {0x1010, 0x10e, 0x1, "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"}, {0x48, 0x118, 0x7ff, "980cbfc35144ee4455e72ac9dfaef066246f93cdc1660aca2d52582b4c98226a24e475a351cf4f79ff9a55bfd47144f06c1bbbaab4"}, {0xb8, 0x111, 0x8, "10f40f94c11aea6763cd01f1c75b13e9dcdd2ece7f9d51de4c117dffa87f5621e0207b4260a693df563b36617ccc6263347f6803e42e055a37c3090b86a3c2cb8ef416f8a421593a8c09a6823aa45276da0c99ca79f66d8e2e53f645dd413e52245ed030d1250dce60fc73409e1ae9e30b18d340a73f20d7b91dad272fe6f18f28882347bd76dcc5e05fb305ae122bb5b80f56f85156ffd1517c701b051918b2b779f3705b0c"}], 0x1260}}], 0x1, 0x40c4) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:30:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x12060000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 601.422656][T21976] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 601.486379][T21975] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 601.506414][T21975] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:50 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x13000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 601.545392][T21983] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 601.583506][T21983] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 601.676904][T21976] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:50 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r4, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ed6c9aa9", @ANYRES16=r4, @ANYBLOB="000125bd7000fedbdf250900000014006e80040002000400020004000200040002000900070041bfe262f50000000a000600bbbbbbbbbbbb0000"], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r7 = dup(r1) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendfile(r7, r8, 0x0, 0x8000fffffffe) [ 601.721873][T21976] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x60000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:50 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 601.843322][ T28] audit: type=1804 audit(1593037850.587:1081): pid=21995 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/351/bus" dev="sda1" ino=16382 res=1 [ 601.843949][T21995] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x9effffff}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xf}, @in=@empty}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 602.075977][T21995] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 602.128248][T21994] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 602.148128][ T28] audit: type=1804 audit(1593037850.897:1082): pid=22005 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366851321/syzkaller.6bjSHG/435/bus" dev="sda1" ino=16375 res=1 [ 602.185360][T21994] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xca000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 602.240756][T22004] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 602.279815][T22004] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:51 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0xf, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 602.335074][T21994] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 602.368508][T21994] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xf0ffffff}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 602.423027][T22014] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 602.461513][T22014] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 602.520237][ T28] audit: type=1804 audit(1593037851.267:1083): pid=21998 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/351/bus" dev="sda1" ino=16382 res=1 22:30:51 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:51 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:51 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000240)=""/174, 0xae}) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000000100), 0xd8) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r5, r6, 0x0, 0x8000fffffffe) 22:30:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xfffff000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 602.611556][T22020] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 602.692383][T22020] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 602.769250][T22025] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 602.833219][T22025] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xffffff7f}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:51 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:30:51 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x2000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x8000, @remote, 0x3}, 0x1c) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000040)=0xe6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bind$xdp(r2, &(0x7f0000000080)={0x2c, 0x8, r7, 0x34, r8}, 0x10) [ 602.902009][T22027] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 602.932786][T22027] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 602.974190][T22030] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 603.006147][ T28] audit: type=1804 audit(1593037851.747:1084): pid=22033 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/352/bus" dev="sda1" ino=16380 res=1 [ 603.022709][T22030] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xffffff9e}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 603.120264][T22039] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:51 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 603.163662][T22039] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:52 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000000)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000200)='./bus\x00', &(0x7f00000002c0)='./bus\x00') r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9200000000555f5f78bd8a928acbfefb12e917f38e3efa49d7bb140990ce4b80292ffd0539b322e30c2756debd175efaa58604dee5565f5a8787f13d4be157488a899bb33a4c6ad526f5e8284ec16863c2eb0b0018cc5dc18bb854d3cac7e7cf2bafd6f816a69dd0e00e6d7f17938c738fd34f", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0), &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000040)) 22:30:52 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xfffffff0}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 603.416222][ T17] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 603.425171][T22052] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 603.479132][T22052] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x40030000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 603.531105][T22059] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 603.600837][T22059] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 603.670063][ T28] audit: type=1804 audit(1593037852.407:1085): pid=22065 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/352/bus" dev="sda1" ino=16380 res=1 [ 603.706478][ T17] usb 4-1: Using ep0 maxpacket: 8 22:30:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xf0ffffffffffff}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:52 executing program 5: write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x1f) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) write$FUSE_STATFS(r0, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 22:30:52 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 603.716214][T22057] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 603.754811][T22057] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:52 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 603.859230][ T17] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 603.883753][ T17] usb 4-1: config 0 has no interface number 0 [ 603.915487][ T17] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 604.001169][T22074] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 604.015173][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 604.081635][ T28] audit: type=1804 audit(1593037852.827:1086): pid=22076 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/353/bus" dev="sda1" ino=16380 res=1 [ 604.084261][T22074] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 604.128470][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 604.178319][ T17] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 604.217244][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.273521][ T17] usb 4-1: config 0 descriptor?? [ 604.300883][T22078] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 604.318054][T22044] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 604.325474][T22044] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 604.343059][T22078] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 604.401438][T22082] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 604.453427][T22082] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 604.510418][T22078] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 604.542003][T22078] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 604.594010][T22040] FAULT_INJECTION: forcing a failure. [ 604.594010][T22040] name failslab, interval 1, probability 0, space 0, times 0 [ 604.608698][ T28] audit: type=1804 audit(1593037853.357:1087): pid=22098 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/353/bus" dev="sda1" ino=16380 res=1 [ 604.630498][T22040] CPU: 1 PID: 22040 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 604.640279][T22040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 604.650340][T22040] Call Trace: [ 604.653783][T22040] dump_stack+0x188/0x20d [ 604.658148][T22040] should_fail.cold+0x5/0xa [ 604.662818][T22040] ? lock_downgrade+0x840/0x840 [ 604.667694][T22040] ? fault_create_debugfs_attr+0x140/0x140 [ 604.673532][T22040] should_failslab+0x5/0xf [ 604.677997][T22040] kmem_cache_alloc+0x29b/0x740 [ 604.682998][T22040] ? ksys_write+0x212/0x250 [ 604.687539][T22040] getname_flags+0xd2/0x5b0 [ 604.692071][T22040] do_sys_openat2+0x3fc/0x7d0 [ 604.696848][T22040] ? file_open_root+0x400/0x400 [ 604.701782][T22040] ? __mutex_unlock_slowpath+0xe2/0x660 [ 604.707445][T22040] ? wait_for_completion+0x270/0x270 [ 604.712753][T22040] ? __this_cpu_preempt_check+0x28/0x190 [ 604.718404][T22040] ? __sb_end_write+0x101/0x1d0 [ 604.723272][T22040] do_sys_open+0xc3/0x140 [ 604.727617][T22040] ? filp_open+0x70/0x70 [ 604.731868][T22040] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 604.737859][T22040] ? do_syscall_64+0x21/0x7d0 [ 604.742550][T22040] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 604.748596][T22040] do_syscall_64+0xf6/0x7d0 [ 604.753232][T22040] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 604.759148][T22040] RIP: 0033:0x45ca59 [ 604.763066][T22040] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 604.782968][T22040] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 604.791399][T22040] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 604.799691][T22040] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 604.807808][T22040] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 604.815801][T22040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 604.823788][T22040] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 604.859303][ T17] usb 4-1: USB disconnect, device number 5 22:30:54 executing program 3 (fault-call:4 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:30:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x100000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:54 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:54 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0xc) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) clock_adjtime(0x0, &(0x7f00000002c0)={0x5, 0x100000000, 0x2, 0x0, 0x6, 0x1000, 0x4, 0xfff, 0x1ff, 0x3ff, 0x3, 0x7, 0x3, 0x40, 0x6, 0x2, 0x21, 0x7, 0x7, 0xff, 0x3, 0x7, 0x20, 0x0, 0x1, 0x3ff}) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40840) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:30:54 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x4c00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:54 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x200000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 605.510242][T22132] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 605.556014][ T28] audit: type=1804 audit(1593037854.297:1088): pid=22139 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/354/bus" dev="sda1" ino=16371 res=1 [ 605.598046][T22132] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 605.628238][T22134] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 605.670629][T22134] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:54 executing program 1: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, 0x2, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x12}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffff}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1768}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x979c}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10000011}, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:30:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x300000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 605.739329][T22136] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 605.784429][T22136] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 605.829914][T22141] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 605.846001][ T17] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 605.857722][T22141] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:54 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x400000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 605.913790][T22148] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 605.947085][T22148] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:54 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x5865}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 606.115831][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 606.236473][ T17] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 606.260434][ T17] usb 4-1: config 0 has no interface number 0 [ 606.312309][ T17] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 606.331192][ T28] audit: type=1804 audit(1593037855.078:1089): pid=22131 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/354/bus" dev="sda1" ino=16371 res=1 [ 606.371685][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 606.418250][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 606.451450][ T17] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 606.482268][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.506611][ T17] usb 4-1: config 0 descriptor?? [ 606.542482][T22138] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 606.555934][T22138] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 606.668852][T22158] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 606.701274][T22158] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 606.721210][T22170] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 606.746399][T22170] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 606.815920][T22135] FAULT_INJECTION: forcing a failure. [ 606.815920][T22135] name failslab, interval 1, probability 0, space 0, times 0 [ 606.834193][T22135] CPU: 1 PID: 22135 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 606.842720][T22135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.852876][T22135] Call Trace: [ 606.856208][T22135] dump_stack+0x188/0x20d [ 606.860685][T22135] should_fail.cold+0x5/0xa [ 606.865220][T22135] ? lock_downgrade+0x840/0x840 [ 606.870102][T22135] ? fault_create_debugfs_attr+0x140/0x140 [ 606.876073][T22135] should_failslab+0x5/0xf [ 606.880525][T22135] kmem_cache_alloc+0x29b/0x740 [ 606.885557][T22135] ? mark_lock+0x11f/0xdd0 [ 606.890013][T22135] ? print_usage_bug+0x240/0x240 [ 606.895232][T22135] ? stack_trace_consume_entry+0x160/0x160 [ 606.901070][T22135] __alloc_file+0x21/0x350 [ 606.905512][T22135] alloc_empty_file+0x6d/0x170 [ 606.910471][T22135] path_openat+0xe3/0x27d0 [ 606.914922][T22135] ? path_lookupat.isra.0+0x530/0x530 [ 606.920336][T22135] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 606.926350][T22135] do_filp_open+0x192/0x260 [ 606.930966][T22135] ? may_open_dev+0xf0/0xf0 [ 606.935497][T22135] ? __alloc_fd+0x46d/0x600 [ 606.940204][T22135] ? lock_downgrade+0x840/0x840 [ 606.945414][T22135] ? do_raw_spin_lock+0x129/0x2e0 [ 606.950734][T22135] ? _raw_spin_unlock+0x24/0x40 [ 606.956045][T22135] ? __alloc_fd+0x46d/0x600 [ 606.960577][T22135] do_sys_openat2+0x585/0x7d0 [ 606.966414][T22135] ? file_open_root+0x400/0x400 [ 606.972651][T22135] ? __mutex_unlock_slowpath+0xe2/0x660 [ 606.978337][T22135] ? wait_for_completion+0x270/0x270 [ 606.984798][T22135] ? __this_cpu_preempt_check+0x28/0x190 [ 606.991808][T22135] ? __sb_end_write+0x101/0x1d0 [ 607.000332][T22135] do_sys_open+0xc3/0x140 [ 607.005670][T22135] ? filp_open+0x70/0x70 [ 607.010136][T22135] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 607.016880][T22135] ? do_syscall_64+0x21/0x7d0 [ 607.022365][T22135] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 607.028576][T22135] do_syscall_64+0xf6/0x7d0 [ 607.033403][T22135] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 607.040416][T22135] RIP: 0033:0x45ca59 [ 607.044581][T22135] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 607.067841][T22135] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 607.077317][T22135] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 607.085798][T22135] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 607.093799][T22135] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 607.101772][T22135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 607.109755][T22135] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 607.173966][ T3355] usb 4-1: USB disconnect, device number 6 [ 607.422049][T22164] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 607.434442][T22164] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 607.446388][T22196] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 607.457231][T22196] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:56 executing program 3 (fault-call:4 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:30:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x500000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:56 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x81fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:30:56 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:56 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x600000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:56 executing program 1: ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@report={0x304, 0x20, 0x4, 0x70bd2d, 0x3, {0x33, {@in6=@ipv4={[], [], @broadcast}, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x4e24, 0x4, 0x4e20, 0x7fff, 0x2, 0x20, 0x80, 0x2f, 0x0, r1}}, [@algo_auth_trunc={0xcd, 0x14, {{'nhpoly1305-avx2\x00'}, 0x408, 0xc0, "2659420d6176cbfbac74b6bd287b3fdf95c92b2640881f451df5dc8512f45d4100d2dd469dfe4ca76e7861c319f59d5ce6d7138046d8ab37c5263c01a0a440f0cb54b187d8c14ba2986f868601c8d0ee08c55fa406afdeff274bae1ca643eb8a0fd0b62fe253cf72e93f882182097392ca7b3d9673fa5a17142667c910a9baba78"}}, @migrate={0x1cc, 0x11, [{@in=@private=0xa010100, @in=@remote, @in=@broadcast, @in6=@empty, 0x2b, 0x3, 0x0, 0x3505, 0x0, 0x2}, {@in6=@empty, @in6=@private0, @in6=@empty, @in=@remote, 0x33, 0x0, 0x0, 0x3501, 0xa, 0xa}, {@in=@remote, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x33, 0x1, 0x0, 0x3504, 0x2, 0xa}, {@in=@broadcast, @in6=@private1={0xfc, 0x1, [], 0x1}, @in=@loopback, @in=@rand_addr=0x64010101, 0x3c, 0x1, 0x0, 0x3504, 0x0, 0xa}, {@in=@remote, @in=@local, @in=@broadcast, @in=@remote, 0xf1, 0x1, 0x0, 0x3505, 0xa, 0x2}, {@in6=@loopback, @in6=@private1, @in=@loopback, @in6=@remote, 0x3c, 0x2, 0x0, 0x0, 0x0, 0xa}]}, @policy_type={0xa, 0x10, {0x1}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7}, @extra_flags={0x8, 0x18, 0xffffffff}]}, 0x304}, 0x1, 0x0, 0x0, 0x8081}, 0x14) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) clock_gettime(0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x75, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r3 = socket(0x10, 0x0, 0x0) sendmsg$xdp(r3, &(0x7f0000000780)={&(0x7f0000000200)={0x2c, 0x1, 0x0, 0x2d}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000340)}, {&(0x7f0000000140)="d0405d81b8c62322fcfb0738c276c48e92719c48db0dc826d0563df5fc6216e3afee2bed667dbbb30322bb6cd6a34c872655a550700effc9a1b5a21181d958d8655a443779eb145772df9f8a4821d9017521d5b6552f64e1bae14574", 0x5c}, {&(0x7f0000000580)}, {0x0}, {0x0}], 0x5, 0x0, 0x0, 0x4000000}, 0x4001) getsockname$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe83, 0x11, 0x0, 0x27) [ 607.779224][T22225] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 607.821219][T22225] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 607.871132][T22223] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 607.900363][ T28] audit: type=1804 audit(1593037856.661:1090): pid=22232 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/355/bus" dev="sda1" ino=16374 res=1 [ 607.935085][T22223] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x800000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 607.987561][T22233] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 608.024498][T22233] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:56 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 608.120437][T22228] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 608.158455][T22228] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x900000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 608.189897][ T17] usb 4-1: new high-speed USB device number 7 using dummy_hcd 22:30:57 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 608.329719][T22245] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xa00000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 608.371508][T22245] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 608.420619][T22248] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 608.450303][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 608.456926][T22248] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 608.481474][T22253] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 608.514282][T22253] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 608.540767][T22254] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 608.570236][T22254] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 608.587391][ T17] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 608.591728][ T28] audit: type=1804 audit(1593037857.357:1091): pid=22232 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/355/bus" dev="sda1" ino=16374 res=1 [ 608.605606][ T17] usb 4-1: config 0 has no interface number 0 [ 608.629841][ T17] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 608.669821][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 608.715435][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 608.760762][ T17] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 608.787424][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.809721][ T17] usb 4-1: config 0 descriptor?? [ 608.839689][T22235] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 608.867763][T22235] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 609.124378][T22229] FAULT_INJECTION: forcing a failure. [ 609.124378][T22229] name failslab, interval 1, probability 0, space 0, times 0 [ 609.182253][T22229] CPU: 1 PID: 22229 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 609.190743][T22229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.201036][T22229] Call Trace: [ 609.204369][T22229] dump_stack+0x188/0x20d [ 609.208911][T22229] should_fail.cold+0x5/0xa [ 609.213437][T22229] ? lock_downgrade+0x840/0x840 [ 609.219830][T22229] ? fault_create_debugfs_attr+0x140/0x140 [ 609.225705][T22229] should_failslab+0x5/0xf [ 609.230154][T22229] kmem_cache_alloc+0x29b/0x740 [ 609.235037][T22229] ? kmem_cache_alloc+0x358/0x740 [ 609.240186][T22229] ? mark_lock+0x11f/0xdd0 [ 609.244732][T22229] security_file_alloc+0x34/0x160 [ 609.249792][T22229] __alloc_file+0xd8/0x350 [ 609.254242][T22229] alloc_empty_file+0x6d/0x170 [ 609.259037][T22229] path_openat+0xe3/0x27d0 [ 609.263514][T22229] ? path_lookupat.isra.0+0x530/0x530 [ 609.268954][T22229] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 609.275056][T22229] do_filp_open+0x192/0x260 [ 609.279610][T22229] ? may_open_dev+0xf0/0xf0 [ 609.284514][T22229] ? __alloc_fd+0x46d/0x600 [ 609.289175][T22229] ? lock_downgrade+0x840/0x840 [ 609.294227][T22229] ? do_raw_spin_lock+0x129/0x2e0 [ 609.299289][T22229] ? _raw_spin_unlock+0x24/0x40 [ 609.304246][T22229] ? __alloc_fd+0x46d/0x600 [ 609.308950][T22229] do_sys_openat2+0x585/0x7d0 [ 609.313662][T22229] ? file_open_root+0x400/0x400 [ 609.318541][T22229] ? __mutex_unlock_slowpath+0xe2/0x660 [ 609.324116][T22229] ? wait_for_completion+0x270/0x270 [ 609.329427][T22229] ? __this_cpu_preempt_check+0x28/0x190 [ 609.335093][T22229] ? __sb_end_write+0x101/0x1d0 [ 609.339981][T22229] do_sys_open+0xc3/0x140 [ 609.344339][T22229] ? filp_open+0x70/0x70 [ 609.348609][T22229] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 609.354614][T22229] ? do_syscall_64+0x21/0x7d0 [ 609.359368][T22229] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 609.365403][T22229] do_syscall_64+0xf6/0x7d0 [ 609.370029][T22229] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 609.375935][T22229] RIP: 0033:0x45ca59 [ 609.379983][T22229] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 609.399701][T22229] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 609.408125][T22229] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 609.416089][T22229] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 609.424061][T22229] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 609.432033][T22229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 609.440028][T22229] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 609.462298][T22180] usb 4-1: USB disconnect, device number 7 22:30:58 executing program 3 (fault-call:4 fault-nth:3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:30:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xb00000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:30:58 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x6800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:30:58 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:30:58 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'vlan0\x00', {'bridge_slave_0\x00'}, 0x400}) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000013c0)={0x0}, &(0x7f0000001400)=0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001380)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="ab621617aeba03a775cc7cb912d987188c6765b95d6ddcc87138bcb885efae4a19fd82cdcbe80403f85885efeacc90f881f371b62a25864287e03578f0c85a565c363c3d4dafe8cf5f9ae3def7f9345694b121f947b62c1cc842c6efd1211390debc3d9b0b90dd1899286e7dc3e5c28be5d8dbad2fac0224ea6a96d622c0f915ee8c8546a9248f28755b8e7c25cc851d284409416411ca95f00e3c9d3e", 0x9d}, {&(0x7f0000000100)="da47c0", 0x3}], 0x3, &(0x7f0000001a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000e05c000000000000000ea9150100f9ff02000000090d01ea6b2ee9820df561fbd949bf34f8e4558b431a44e03ace9b1daee6441e5f2422b232b2689f2c41570cf934b332155d0ec87a122e7fd504d075cad690b1cd8c9854f631fa1279", @ANYRES32=r5, @ANYRES32=r7, @ANYRES32, @ANYBLOB="df00000027a9ffbc16f6598e4184f630a4967318cdb97fb062483de9926e9bbc35d579868f24e515270d6fa89d6eaaeb007d00"], 0x38, 0x40}, {&(0x7f0000001480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001500)="e89a426a980a8b9d020bb22f2aa6f71791282bb841166b518955240b3006688ecaa9a62c2ecb5cd42a372438b1f5645021892600051899b640e95728ae6c7072b1f260b3b39c788e04ce028a8e875996dcec16a0cc18ad535ac65ba940b5792146abb22ec4d5a2b63ced357a2481a01e89176b08d7ab6c64dfe7e9bc91f24ea228069b3eb769080756289a7607a02f142aecfd1ce12c47871e53400104231c72d29e1adce18c5474523c2c80ca8cb766121cf9c9ea2f4808e1a071f6e045c4f44a9c9435dc93d1c2618fa717da5a4f125248", 0xd2}], 0x1, &(0x7f0000001640), 0x0, 0x40010}, {&(0x7f0000001680)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001700)="0cb639daa3ef596bf97d92c9e6a3125526ac1d1f8d14e7bf4e82de45c64f1331d420e60f7b4048a938821b7ed6b6a29e08343659d7098e3e3bbe842f25aa5db08f217ba0770fd6355ec035405f48dc3f5bf054a4409b7c99ab82ea9c", 0x5c}, {&(0x7f0000001780)="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", 0xfb}], 0x2, 0x0, 0x0, 0x4}], 0x3, 0x4084) 22:30:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4c1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) ftruncate(r1, 0x0) 22:30:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xe00000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 610.089686][T22314] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 610.144779][T22314] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 610.184703][T22313] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xf00000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 610.239945][ T28] audit: type=1804 audit(1593037859.020:1092): pid=22323 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/356/bus" dev="sda1" ino=16368 res=1 [ 610.248262][T22313] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 610.364339][T22326] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 610.397828][T22326] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:59 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x1c, r0, 0x711, 0x0, 0x0, {0x7, 0x0, 0xd00}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x14, r0, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x4000814) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x3, 0x81, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x19470, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x20}, 0x0, 0xffffff0000000002, 0xffffffffffffffff, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x980000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) bind$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, './file1\x00'}, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x1b, 0x9b, 0x8, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}}, 0x40) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x400002, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b9b083b00310000000000000000000000000000000000006d10000000000000400000000000000000000000000000000000000000003800"/70], 0x78) 22:30:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x1000000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 610.451352][T22180] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 610.472954][T22320] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:30:59 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x6c00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 610.509992][T22320] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:30:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x1100000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 610.721992][T22344] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 610.739173][T22180] usb 4-1: Using ep0 maxpacket: 8 [ 610.747301][T22344] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 610.812462][T22350] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 610.846513][T22350] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 610.878610][T22180] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 610.886648][T22180] usb 4-1: config 0 has no interface number 0 [ 610.912945][T22180] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 610.937173][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 610.973379][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 610.994947][T22180] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 611.014312][T22180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.041826][T22180] usb 4-1: config 0 descriptor?? [ 611.104492][T22322] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 611.136491][T22322] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 611.359822][T22316] FAULT_INJECTION: forcing a failure. [ 611.359822][T22316] name failslab, interval 1, probability 0, space 0, times 0 [ 611.402330][T22316] CPU: 1 PID: 22316 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 611.410933][T22316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.421118][T22316] Call Trace: [ 611.424438][T22316] dump_stack+0x188/0x20d [ 611.428905][T22316] should_fail.cold+0x5/0xa [ 611.433441][T22316] ? fault_create_debugfs_attr+0x140/0x140 [ 611.439319][T22316] should_failslab+0x5/0xf [ 611.443762][T22316] __kmalloc+0x2d9/0x7a0 [ 611.448032][T22316] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 611.454160][T22316] ? tomoyo_realpath_from_path+0xc2/0x620 [ 611.459907][T22316] ? lock_release+0x800/0x800 [ 611.464616][T22316] ? print_usage_bug+0x240/0x240 [ 611.469847][T22316] tomoyo_realpath_from_path+0xc2/0x620 [ 611.475489][T22316] tomoyo_check_open_permission+0x26d/0x370 [ 611.481421][T22316] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 611.487087][T22316] ? __lock_acquire+0xc6c/0x48a0 [ 611.492087][T22316] ? lock_downgrade+0x840/0x840 [ 611.496953][T22316] ? do_raw_spin_lock+0x129/0x2e0 [ 611.502316][T22316] tomoyo_file_open+0xa3/0xd0 [ 611.507026][T22316] security_file_open+0x6e/0x410 [ 611.512444][T22316] do_dentry_open+0x3e9/0x1340 [ 611.517756][T22316] ? devcgroup_check_permission+0x1a8/0x420 [ 611.523690][T22316] ? security_inode_permission+0xc4/0xf0 [ 611.529441][T22316] ? chown_common+0x550/0x550 [ 611.534417][T22316] ? inode_permission+0xab/0x500 [ 611.539685][T22316] path_openat+0x1e59/0x27d0 [ 611.545190][T22316] ? path_lookupat.isra.0+0x530/0x530 [ 611.551274][T22316] do_filp_open+0x192/0x260 [ 611.555896][T22316] ? may_open_dev+0xf0/0xf0 [ 611.560465][T22316] ? do_raw_spin_lock+0x129/0x2e0 [ 611.565837][T22316] ? _raw_spin_unlock+0x24/0x40 [ 611.570912][T22316] ? __alloc_fd+0x46d/0x600 [ 611.575574][T22316] do_sys_openat2+0x585/0x7d0 [ 611.582152][T22316] ? file_open_root+0x400/0x400 [ 611.587606][T22316] ? __mutex_unlock_slowpath+0xe2/0x660 [ 611.593277][T22316] ? wait_for_completion+0x270/0x270 [ 611.598910][T22316] ? __this_cpu_preempt_check+0x28/0x190 [ 611.604691][T22316] ? __sb_end_write+0x101/0x1d0 [ 611.609596][T22316] do_sys_open+0xc3/0x140 [ 611.614120][T22316] ? filp_open+0x70/0x70 [ 611.618758][T22316] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 611.625358][T22316] ? do_syscall_64+0x21/0x7d0 [ 611.630211][T22316] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 611.636586][T22316] do_syscall_64+0xf6/0x7d0 [ 611.641668][T22316] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 611.648140][T22316] RIP: 0033:0x45ca59 [ 611.652081][T22316] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 611.672233][T22316] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 611.680817][T22316] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 611.688923][T22316] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 611.696986][T22316] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 611.704948][T22316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 611.712910][T22316] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 611.727571][T22316] ERROR: Out of memory at tomoyo_realpath_from_path. [ 611.744355][ T17] usb 4-1: USB disconnect, device number 8 22:31:01 executing program 3 (fault-call:4 fault-nth:4): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000400)) sendmsg$kcm(r0, &(0x7f0000001140)={&(0x7f0000000580)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000640)}, {&(0x7f0000000a80)="2ab76f81aa95e103a1df47e3307563a1f903db1566bed53e685297784b40", 0x1e}], 0x4, &(0x7f0000000b40)=[{0xa0, 0x0, 0x0, "cccf23336b27a42c2050dbf07e69a98f07429f978bf06e87e43def8162fed9bf30e4b76cf7d2f008ea8b5b5de20e37b17ee3d2ad89c071a39cc40570d408faf8a7c8678b86bc8cc2e6521e530492addc1a711e15315484bc3039f0be5dfe2bf6bee6cd265dee1ee637e4d0452b48c3fca23e22b689b55218778d04147bf5885b1f66656bf16f75aec03863"}, {0xc0, 0x0, 0x3ff, "249bcde513f5c70378d74041a9bc7fb43cc628ce468ce8e984ef5dd9b9b74a5720c55cffd04f21790680fb0e044cac54c519a6c9a80c2230e5fd0a28ad2223536070904b17d5cae190d0861eee347b9f2a7e50dbd60414d106121175e50f9668d532d52cddc835c242e73695efdc582073c88223b4707434ec49277470b1aa9453fe6c624a582e236fd7d2d9cef7cd920dcffd5d526bd1843b16753d35269ae1f586083060a42df8bbf349"}, {0x20, 0x0, 0x0, "4c6b80c611e860c786e3bf7f2c2634da"}, {0x20, 0x0, 0x4, "7f961eda77f73581a3a3e595497f"}, {0xc8, 0x117, 0x7ea, "7e09381ecef5473faf0ace3a693920cbf5bb2ab89946bf46fad2daee32c2b4de4565da62b917f5b714292a91b078e0328f6a899b0d09b87c8c5a7934043002c7751c4933ad5ecee3ad2d688f2949184470bcc7c7de294cb42199f1b7d585a51d47e19888bbe49ad412aadebd41f99bad93948b9167e59c5153c2468a9e044d39d8a36cef64d76b16470d938ed66fca1dc7f2404163cc7e42e15931c803bddfb5b25a0fd538388e54d32b929625f4cd8f43dc"}, {0x58, 0x117, 0x6, "3aab1fc48156042a8a4310ad905663a1987660b6a6c2ccf8d558acf172d3aa6d20316bd538e0382fbc49564fcd0463a5d8779eeac31dd9334afa3f4b5057bf7385bff9a7768b"}, {0x40, 0x100, 0x7f, "ce6d11ffb41735c7064800681b8deb5a5bfd62480ec875f6eda11dc0cb0397534288e9aa165acde13387e0244d"}, {0x10, 0x1ae}], 0x310}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xe, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x10, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0xff000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631177fbac141440e0", 0x0, 0x9}, 0x28) gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(r4, &(0x7f0000000b00)='cgroup.controllers\x00', 0x2761, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x4b, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 22:31:01 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x1200000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:01 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x7400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:01 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000400)={0x60, 0x0, 0x0, {{0x80000001, 0x0, 0xfffffffffffffff8, 0x0, 0xfff}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={r5}, 0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r5, 0x8}, 0x8) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x64, r6, 0x2, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24028040}, 0x80) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2001}, 0xc010) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 612.379991][T22396] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 612.428842][T22396] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 612.459988][T22398] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x1206000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 612.481171][ T28] audit: type=1804 audit(1593037861.278:1093): pid=22403 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/357/bus" dev="sda1" ino=16373 res=1 [ 612.556227][T22398] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:01 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x7a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 612.680972][T22404] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x1300000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 612.728991][T22404] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:01 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 612.812970][ T2484] usb 4-1: new high-speed USB device number 9 using dummy_hcd 22:31:01 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000001240)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3633, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfa070a, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket$inet(0x2, 0x80000, 0x9) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000300)={r7}, 0x14) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000a, 0x50, r9, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000000)={r7, @in6={{0xa, 0x4e24, 0xb6b2, @mcast2, 0x5}}}, 0x84) socket$inet_dccp(0x2, 0x6, 0x0) dup3(r1, r2, 0x0) [ 612.891394][T22419] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x6000000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 612.975369][T22419] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 613.029324][T22426] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 613.077863][T22426] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 613.090803][ T2484] usb 4-1: Using ep0 maxpacket: 8 [ 613.126144][T22429] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 613.157266][ T28] audit: type=1804 audit(1593037861.953:1094): pid=22407 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/357/bus" dev="sda1" ino=16373 res=1 [ 613.158140][T22429] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 613.250542][ T2484] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 613.260052][ T2484] usb 4-1: config 0 has no interface number 0 [ 613.296671][ T2484] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 613.314709][T22428] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 613.323455][ T2484] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 613.341532][T22428] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 613.356449][ T2484] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 613.384271][ T2484] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 613.422832][ T2484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.455492][ T2484] usb 4-1: config 0 descriptor?? [ 613.489401][T22406] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 613.501337][T22406] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 613.740781][T22402] FAULT_INJECTION: forcing a failure. [ 613.740781][T22402] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 613.756044][T22402] CPU: 0 PID: 22402 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 613.765849][T22402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.776270][T22402] Call Trace: [ 613.779589][T22402] dump_stack+0x188/0x20d [ 613.783996][T22402] should_fail.cold+0x5/0xa [ 613.788536][T22402] ? print_usage_bug+0x240/0x240 [ 613.793526][T22402] ? fault_create_debugfs_attr+0x140/0x140 [ 613.799527][T22402] __alloc_pages_nodemask+0x17a/0x810 [ 613.805194][T22402] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 613.812607][T22402] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 613.818906][T22402] cache_grow_begin+0x8c/0xc10 [ 613.823954][T22402] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 613.829457][T22402] __kmalloc+0x6dc/0x7a0 [ 613.833871][T22402] ? tomoyo_realpath_from_path+0xc2/0x620 [ 613.839625][T22402] ? print_usage_bug+0x240/0x240 [ 613.844710][T22402] tomoyo_realpath_from_path+0xc2/0x620 [ 613.850298][T22402] tomoyo_check_open_permission+0x26d/0x370 [ 613.856228][T22402] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 613.861992][T22402] ? __lock_acquire+0xc6c/0x48a0 [ 613.867002][T22402] ? lock_downgrade+0x840/0x840 [ 613.871916][T22402] ? do_raw_spin_lock+0x129/0x2e0 [ 613.877165][T22402] tomoyo_file_open+0xa3/0xd0 [ 613.881869][T22402] security_file_open+0x6e/0x410 [ 613.886843][T22402] do_dentry_open+0x3e9/0x1340 [ 613.891646][T22402] ? devcgroup_check_permission+0x1a8/0x420 [ 613.897683][T22402] ? security_inode_permission+0xc4/0xf0 [ 613.903589][T22402] ? chown_common+0x550/0x550 [ 613.908289][T22402] ? inode_permission+0xab/0x500 [ 613.913252][T22402] path_openat+0x1e59/0x27d0 [ 613.917878][T22402] ? path_lookupat.isra.0+0x530/0x530 [ 613.923469][T22402] do_filp_open+0x192/0x260 [ 613.928008][T22402] ? may_open_dev+0xf0/0xf0 [ 613.933183][T22402] ? do_raw_spin_lock+0x129/0x2e0 [ 613.938256][T22402] ? _raw_spin_unlock+0x24/0x40 [ 613.943263][T22402] ? __alloc_fd+0x46d/0x600 [ 613.948262][T22402] do_sys_openat2+0x585/0x7d0 [ 613.953110][T22402] ? file_open_root+0x400/0x400 [ 613.958161][T22402] ? __mutex_unlock_slowpath+0xe2/0x660 [ 613.963742][T22402] ? wait_for_completion+0x270/0x270 [ 613.969052][T22402] ? __this_cpu_preempt_check+0x28/0x190 [ 613.974709][T22402] ? __sb_end_write+0x101/0x1d0 [ 613.979588][T22402] do_sys_open+0xc3/0x140 [ 613.983941][T22402] ? filp_open+0x70/0x70 [ 613.988220][T22402] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 613.994230][T22402] ? do_syscall_64+0x21/0x7d0 [ 613.998937][T22402] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 614.005207][T22402] do_syscall_64+0xf6/0x7d0 [ 614.009792][T22402] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 614.015862][T22402] RIP: 0033:0x45ca59 [ 614.019771][T22402] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 614.039725][T22402] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 614.048152][T22402] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 614.056149][T22402] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 614.064323][T22402] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 614.072321][T22402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 614.080313][T22402] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 614.176453][ T3355] usb 4-1: USB disconnect, device number 9 22:31:03 executing program 3 (fault-call:4 fault-nth:5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x9effffff00000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:03 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x26, 0x24000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000080)={0x6080000000000000, 0x3000, 0x621, 0x2, 0x1f}) read$midi(r4, &(0x7f0000000240)=""/233, 0xe9) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r7, 0x0, 0x8000fffffffe) 22:31:03 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x8100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:03 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:03 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x7a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xca00000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 614.843160][T22489] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 614.877508][T22489] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 614.914088][T22491] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 614.950635][T22491] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 614.983097][T22492] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:03 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x7a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 615.014142][ T28] audit: type=1804 audit(1593037863.827:1095): pid=22503 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/358/bus" dev="sda1" ino=15874 res=1 [ 615.032271][T22492] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xf0ffffff00000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 615.118063][T22496] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 615.178946][T22496] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 615.214632][ T17] usb 4-1: new high-speed USB device number 10 using dummy_hcd 22:31:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xffffff7f00000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 615.231266][T22508] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:04 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 615.281000][T22508] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 615.326267][T22512] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:04 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xf000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 615.374120][T22512] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 615.452959][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 615.491278][T22517] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 615.518719][T22517] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 615.582841][ T17] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 615.583951][T22520] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 615.614673][ T17] usb 4-1: config 0 has no interface number 0 [ 615.624603][ T17] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 615.636441][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 615.637638][T22520] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 615.654907][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 615.696009][ T17] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 615.706283][T22517] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 615.726354][T22517] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 615.741351][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.759390][ T17] usb 4-1: config 0 descriptor?? [ 615.778787][T22527] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 615.801653][T22500] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 615.809051][T22500] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 615.822267][T22527] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 616.062536][T22494] FAULT_INJECTION: forcing a failure. [ 616.062536][T22494] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 616.075891][T22494] CPU: 1 PID: 22494 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 616.084489][T22494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.094569][T22494] Call Trace: [ 616.097888][T22494] dump_stack+0x188/0x20d [ 616.102263][T22494] should_fail.cold+0x5/0xa [ 616.106792][T22494] ? print_usage_bug+0x240/0x240 [ 616.111760][T22494] ? fault_create_debugfs_attr+0x140/0x140 [ 616.118277][T22494] __alloc_pages_nodemask+0x17a/0x810 [ 616.123775][T22494] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 616.130754][T22494] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 616.137199][T22494] cache_grow_begin+0x8c/0xc10 [ 616.142742][T22494] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 616.150000][T22494] __kmalloc+0x6dc/0x7a0 [ 616.154288][T22494] ? tomoyo_realpath_from_path+0xc2/0x620 [ 616.160404][T22494] ? print_usage_bug+0x240/0x240 [ 616.166274][T22494] tomoyo_realpath_from_path+0xc2/0x620 [ 616.172055][T22494] tomoyo_check_open_permission+0x26d/0x370 [ 616.178163][T22494] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 616.184058][T22494] ? __lock_acquire+0xc6c/0x48a0 [ 616.189347][T22494] ? lock_downgrade+0x840/0x840 [ 616.194222][T22494] ? do_raw_spin_lock+0x129/0x2e0 [ 616.199470][T22494] tomoyo_file_open+0xa3/0xd0 [ 616.204212][T22494] security_file_open+0x6e/0x410 [ 616.209208][T22494] do_dentry_open+0x3e9/0x1340 [ 616.214088][T22494] ? devcgroup_check_permission+0x1a8/0x420 [ 616.220005][T22494] ? security_inode_permission+0xc4/0xf0 [ 616.225795][T22494] ? chown_common+0x550/0x550 [ 616.230924][T22494] ? inode_permission+0xab/0x500 [ 616.236675][T22494] path_openat+0x1e59/0x27d0 [ 616.241539][T22494] ? path_lookupat.isra.0+0x530/0x530 [ 616.247034][T22494] ? lock_acquire+0x1f2/0x8f0 [ 616.251923][T22494] do_filp_open+0x192/0x260 [ 616.256682][T22494] ? may_open_dev+0xf0/0xf0 [ 616.261621][T22494] ? do_raw_spin_lock+0x129/0x2e0 [ 616.267073][T22494] ? _raw_spin_unlock+0x24/0x40 [ 616.271958][T22494] ? __alloc_fd+0x46d/0x600 [ 616.276533][T22494] do_sys_openat2+0x585/0x7d0 [ 616.281419][T22494] ? file_open_root+0x400/0x400 [ 616.286479][T22494] ? __mutex_unlock_slowpath+0xe2/0x660 [ 616.292132][T22494] ? wait_for_completion+0x270/0x270 [ 616.300485][T22494] ? __this_cpu_preempt_check+0x28/0x190 [ 616.306161][T22494] ? __sb_end_write+0x101/0x1d0 [ 616.311161][T22494] do_sys_open+0xc3/0x140 [ 616.315511][T22494] ? filp_open+0x70/0x70 [ 616.319776][T22494] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 616.325778][T22494] ? do_syscall_64+0x21/0x7d0 [ 616.330478][T22494] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 616.336664][T22494] do_syscall_64+0xf6/0x7d0 [ 616.341200][T22494] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 616.347104][T22494] RIP: 0033:0x45ca59 [ 616.351008][T22494] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 616.370899][T22494] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 616.379476][T22494] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 616.387853][T22494] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 616.396225][T22494] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 616.404496][T22494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 616.413062][T22494] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 616.442720][ T3358] usb 4-1: USB disconnect, device number 10 22:31:05 executing program 3 (fault-call:4 fault-nth:6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101a80, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x100f, &(0x7f0000000200)=""/4111, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) 22:31:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0xfffffffffffff000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:05 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = dup(r2) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x8, 0x3, 0x9, 0x3}, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r5, 0x0, 0x8000fffffffe) 22:31:05 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xf}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:05 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x2}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 617.095547][T22572] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 617.139362][T22572] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 617.177446][T22574] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:06 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x18, 0x140e, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x5, 0xab8, 0x800}) 22:31:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x3}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 617.206569][ T28] audit: type=1804 audit(1593037866.033:1096): pid=22584 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/359/bus" dev="sda1" ino=16065 res=1 [ 617.221528][T22574] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 617.349894][T22580] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 617.387833][T22580] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 617.393299][T22593] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:31:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x4}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 617.450814][T22579] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 617.460631][T22593] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 617.484569][T22579] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:06 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000920500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00a0128009001100626f6e64000c00028008002a9c0700ffff000000"], 0x3c}}, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$CAPI_SET_FLAGS(r5, 0x80044324, &(0x7f0000000280)=0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x150, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x80000c5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 617.507744][ T17] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 617.554535][T22578] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 617.592800][T22578] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x5}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 617.776076][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 617.855900][ T28] audit: type=1804 audit(1593037866.688:1097): pid=22605 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/359/bus" dev="sda1" ino=16065 res=1 [ 617.915625][ T17] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 617.923674][ T17] usb 4-1: config 0 has no interface number 0 [ 617.964004][ T17] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 618.024079][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 618.044346][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 618.088381][ T17] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 618.097925][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.108988][ T17] usb 4-1: config 0 descriptor?? [ 618.134846][T22583] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 618.142509][T22583] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 618.404043][T22577] FAULT_INJECTION: forcing a failure. [ 618.404043][T22577] name failslab, interval 1, probability 0, space 0, times 0 [ 618.476105][T22577] CPU: 0 PID: 22577 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 618.484481][T22577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.494550][T22577] Call Trace: [ 618.497924][T22577] dump_stack+0x188/0x20d [ 618.502295][T22577] should_fail.cold+0x5/0xa [ 618.506840][T22577] ? fault_create_debugfs_attr+0x140/0x140 [ 618.512677][T22577] should_failslab+0x5/0xf [ 618.517119][T22577] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 618.522538][T22577] ? find_held_lock+0x2d/0x110 [ 618.527304][T22577] ? lock_downgrade+0x840/0x840 [ 618.532234][T22577] snd_seq_oss_open+0x50/0x980 [ 618.537002][T22577] odev_open+0x6c/0x90 [ 618.541077][T22577] ? odev_release+0x70/0x70 [ 618.545689][T22577] soundcore_open+0x446/0x600 [ 618.550376][T22577] ? sound_devnode+0xf0/0xf0 [ 618.554960][T22577] chrdev_open+0x219/0x5c0 [ 618.559375][T22577] ? cdev_put.part.0+0x50/0x50 [ 618.564144][T22577] ? security_file_open+0x84/0x410 [ 618.569260][T22577] do_dentry_open+0x546/0x1340 [ 618.574027][T22577] ? cdev_put.part.0+0x50/0x50 [ 618.578797][T22577] ? security_inode_permission+0xc4/0xf0 [ 618.584426][T22577] ? chown_common+0x550/0x550 [ 618.589121][T22577] ? inode_permission+0xab/0x500 [ 618.594062][T22577] path_openat+0x1e59/0x27d0 [ 618.598666][T22577] ? path_lookupat.isra.0+0x530/0x530 [ 618.604052][T22577] do_filp_open+0x192/0x260 [ 618.608562][T22577] ? may_open_dev+0xf0/0xf0 [ 618.613078][T22577] ? do_raw_spin_lock+0x129/0x2e0 [ 618.618117][T22577] ? _raw_spin_unlock+0x24/0x40 [ 618.622961][T22577] ? __alloc_fd+0x46d/0x600 [ 618.627486][T22577] do_sys_openat2+0x585/0x7d0 [ 618.632175][T22577] ? file_open_root+0x400/0x400 [ 618.637020][T22577] ? __mutex_unlock_slowpath+0xe2/0x660 [ 618.642689][T22577] ? wait_for_completion+0x270/0x270 [ 618.647992][T22577] ? __this_cpu_preempt_check+0x28/0x190 [ 618.653660][T22577] ? __sb_end_write+0x101/0x1d0 [ 618.658516][T22577] do_sys_open+0xc3/0x140 [ 618.662843][T22577] ? filp_open+0x70/0x70 [ 618.667090][T22577] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 618.673095][T22577] ? do_syscall_64+0x21/0x7d0 [ 618.677777][T22577] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 618.683765][T22577] do_syscall_64+0xf6/0x7d0 [ 618.688281][T22577] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 618.694204][T22577] RIP: 0033:0x45ca59 [ 618.698222][T22577] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 618.717830][T22577] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 618.726625][T22577] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 618.734706][T22577] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 618.742846][T22577] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 618.750834][T22577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 618.759003][T22577] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 618.878261][ T3358] usb 4-1: USB disconnect, device number 11 22:31:08 executing program 3 (fault-call:4 fault-nth:7): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:08 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:08 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:08 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x2, 0x6}}, 0x20) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r3, 0x200004) write$FUSE_STATFS(r3, &(0x7f0000000140)={0x60, 0xfffffffffffffffe, 0x8, {{0x2, 0x0, 0x0, 0x0, 0x9}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$caif_seqpacket(0x25, 0x5, 0x1) splice(r0, &(0x7f0000000040)=0x5, r7, &(0x7f0000000080)=0x7, 0x7fffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r5, r6, 0x0, 0x8000fffffffe) 22:31:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x6}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$pppl2tp(0x18, 0x1, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f32f00fb30f0f309a0900000065002ed8ddc74424008f6dc4bd8787442402c43a727fc7442406000000000f35f30f090f013a360f06c4c172d603b9070200000f32ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) eventfd(0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000280)={0xf}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x8, 0x1, 0x20000000000000, 0x9, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4400203) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000140)=0x80, 0x4) pipe2(&(0x7f0000000000), 0x0) r5 = socket$inet6(0xa, 0xa88313663dd85c87, 0x1) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f00000000c0)=0x9b, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080), 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000002c0)="c744240002000000c74424029e050000c7442406000000000f011c240f229f646466660f3881677ae2eb66b8fb008ee00f01f3b9be090000b8ff6a0000ba000000000f30b930030000b8f2ffffffbaff7f00000f3066bad004b80a000000efc4e2ada71e", 0x64}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:31:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x8}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 619.492438][T22656] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 619.545682][T22656] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 619.573113][T22659] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 619.603304][T22659] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 619.626107][T22656] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x9}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 619.641040][ T28] audit: type=1804 audit(1593037868.491:1098): pid=22661 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/360/bus" dev="sda1" ino=16273 res=1 [ 619.674026][T22656] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:08 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 619.736726][T22659] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 619.782337][T22659] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:08 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xa}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 619.891195][ T3358] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 619.972572][T22680] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 620.018183][T22680] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xb}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 620.087125][T22682] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 620.116761][T22682] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 620.153448][ T3358] usb 4-1: Using ep0 maxpacket: 8 [ 620.174797][T22685] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 620.218266][T22685] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 620.253450][T22693] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 620.269173][ T3358] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 620.271954][T22693] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 620.289691][ T3358] usb 4-1: config 0 has no interface number 0 [ 620.316367][ T28] audit: type=1804 audit(1593037869.165:1099): pid=22695 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/360/bus" dev="sda1" ino=16273 res=1 [ 620.361358][ T3358] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 620.397889][ T3358] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 620.426061][ T3358] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 620.447287][ T3358] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 620.456674][ T3358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.470720][ T3358] usb 4-1: config 0 descriptor?? [ 620.488295][T22669] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 620.495795][T22669] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 620.743969][T22664] FAULT_INJECTION: forcing a failure. [ 620.743969][T22664] name failslab, interval 1, probability 0, space 0, times 0 [ 620.785395][T22664] CPU: 0 PID: 22664 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 620.793774][T22664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.803879][T22664] Call Trace: [ 620.807222][T22664] dump_stack+0x188/0x20d [ 620.811605][T22664] should_fail.cold+0x5/0xa [ 620.816105][T22664] ? fault_create_debugfs_attr+0x140/0x140 [ 620.822066][T22664] should_failslab+0x5/0xf [ 620.826511][T22664] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 620.831957][T22664] ? pointer+0x7c0/0x7c0 [ 620.836323][T22664] snd_seq_create_port+0xb5/0x590 [ 620.841380][T22664] ? sprintf+0xc0/0x100 [ 620.845541][T22664] ? scnprintf+0x140/0x140 [ 620.849953][T22664] ? do_filp_open+0x192/0x260 [ 620.855845][T22664] snd_seq_ioctl_create_port+0x101/0x6d0 [ 620.861522][T22664] snd_seq_kernel_client_ctl+0xeb/0x130 [ 620.867077][T22664] create_port+0x18b/0x250 [ 620.871732][T22664] ? async_call_lookup_ports+0x10/0x10 [ 620.877191][T22664] ? snd_seq_oss_process_event+0x2590/0x2590 [ 620.883174][T22664] ? create_port+0x250/0x250 [ 620.887779][T22664] ? debug_smp_processor_id+0x2f/0x185 [ 620.893263][T22664] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 620.899215][T22664] ? find_held_lock+0x2d/0x110 [ 620.904187][T22664] snd_seq_oss_open+0x2dc/0x980 [ 620.909130][T22664] odev_open+0x6c/0x90 [ 620.913227][T22664] ? odev_release+0x70/0x70 [ 620.917735][T22664] soundcore_open+0x446/0x600 [ 620.922437][T22664] ? sound_devnode+0xf0/0xf0 [ 620.927054][T22664] chrdev_open+0x219/0x5c0 [ 620.931488][T22664] ? cdev_put.part.0+0x50/0x50 [ 620.936253][T22664] ? security_file_open+0x84/0x410 [ 620.941406][T22664] do_dentry_open+0x546/0x1340 [ 620.946165][T22664] ? cdev_put.part.0+0x50/0x50 [ 620.950920][T22664] ? security_inode_permission+0xc4/0xf0 [ 620.956542][T22664] ? chown_common+0x550/0x550 [ 620.961276][T22664] ? inode_permission+0xab/0x500 [ 620.966336][T22664] path_openat+0x1e59/0x27d0 [ 620.970940][T22664] ? path_lookupat.isra.0+0x530/0x530 [ 620.976385][T22664] do_filp_open+0x192/0x260 [ 620.980886][T22664] ? may_open_dev+0xf0/0xf0 [ 620.985391][T22664] ? do_raw_spin_lock+0x129/0x2e0 [ 620.990424][T22664] ? _raw_spin_unlock+0x24/0x40 [ 620.995270][T22664] ? __alloc_fd+0x46d/0x600 [ 621.000072][T22664] do_sys_openat2+0x585/0x7d0 [ 621.005204][T22664] ? file_open_root+0x400/0x400 [ 621.010200][T22664] ? __mutex_unlock_slowpath+0xe2/0x660 [ 621.016295][T22664] ? wait_for_completion+0x270/0x270 [ 621.021770][T22664] ? __this_cpu_preempt_check+0x28/0x190 [ 621.027467][T22664] ? __sb_end_write+0x101/0x1d0 [ 621.032325][T22664] do_sys_open+0xc3/0x140 [ 621.036645][T22664] ? filp_open+0x70/0x70 [ 621.040876][T22664] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 621.047145][T22664] ? do_syscall_64+0x21/0x7d0 [ 621.051866][T22664] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 621.057865][T22664] do_syscall_64+0xf6/0x7d0 [ 621.062537][T22664] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 621.068512][T22664] RIP: 0033:0x45ca59 [ 621.072481][T22664] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 621.092404][T22664] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 621.101262][T22664] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 621.109250][T22664] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 621.117523][T22664] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 621.125884][T22664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 621.134117][T22664] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 621.185430][T22664] ALSA: seq_oss: can't create port [ 621.207416][ T3358] usb 4-1: USB disconnect, device number 12 22:31:10 executing program 3 (fault-call:4 fault-nth:8): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:10 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) prctl$PR_GET_NO_NEW_PRIVS(0x27) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x4}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)="085326768a9822e0734d34e00413ec9a7d5ecc727b3c9361394a8307b628b861583ad1a035050060e959a1d74272f28e7ee7135ca44bc012781c215605936e0525450e252ce95613fbd39aef29f50ba8f46f894b400f6388c7ef025f1558ff583b1989f15ca4fcaa56", 0x69}], 0x1, &(0x7f00000002c0)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @mark={{0x14, 0x1, 0x24, 0x10001}}], 0x60}, 0x20008005) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r5, 0x0, 0x8000fffffffe) 22:31:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xe}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:10 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:10 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) close(r2) fcntl$lock(r1, 0x0, &(0x7f0000002000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x1, 0x8, &(0x7f0000000900)=[{&(0x7f0000000380)="b397152cd96b2a4b7ec3d1075ea19710e028ca391a84c4b69ab643fa77dfc4f198463e5f4a58af966782f2f252c2120c6b27ec323a83ac330a07c1ad8ccd994e772509c3e3", 0x45, 0x8001}, {&(0x7f0000000500)="6ce80c66647260778274151cf4bcead2ed6d8933334ccfff3f27b674fcd6e8aa699209d0c97d3c33f7993b043e7e3e3dd60746f04d8c02013e97e2f903d9fd22be57ea9e9a38dd6e48b7ee77b8b59537ee34dd73e1428dc7f61e026c1d9096d9c67ea8aedeb143e360cda204", 0x6c}, {&(0x7f0000000580)="7102a7b701868eda970b537fde31ec560060c7ec8194820a33c72f702fbe1bf5be34ed9c626d3bdd8e531c20fea2a4b4566c4b1db81dd0f5b99850403e815acbc0a87ecdfc3022e2136b05a67e0568490f986a63a69bd240c426221bb4cd3aa5ea012a71f5114a25f478887f72930d8e550aa9f127286ab6acef6f432ca6174a4d8902069f494dd0687a3f53119f71603dde8008611180bc4ef82bbc94d1b73479fd2915c4cf8b20", 0xa8, 0x1}, {&(0x7f0000000640)}, {&(0x7f0000000280)="fa1c97ec49d9b137235fe7096e7105ffd7baedc1fdbf95be272c7d282eb14f3818", 0x21, 0x8000}, {&(0x7f0000000740)="2bb6a9804ff2797f37987cf77c5461db1593e624aa20bd029c5e5c130119cc2f9d54dd6615cd8e8f16751b0561b175229a0154c7c2310e6d2eaff544d17d4e2e4d908cd70960e74c82588c7782c418a339088ca5fb006eb1db91c7a687cdbbf5dee061000fa682a17766e68f4245ccac69661af50c9a39d00bf409e6d955df5dc3125bd5d2219a9707c6ca0b5c5d0ec682303aa85252da431c87f36a100c87b238ffe8048f182dafff44d409cc4931f1ae471d284b09a881e71613f84126bfb99ec89a72565379ffa76148cc150dae085fa1", 0xd2, 0x7775f8b7}, {&(0x7f0000000840)="c2baa0b8484716d0", 0x8, 0xea}, {&(0x7f0000000880)="94657e87562d81ce8b149f671853a593e55e3ea75c656cfbc9e93255a9213ec98c3ba6f6fc92ef64d9bd161885598dd51d2a0dbea3b97bd8f17b9a8772d7d0a5eccac3c49e93b5c00d5e16f448d848", 0x4f, 0x7}], 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01, @ANYBLOB="7998418710", @ANYRESDEC=0x0, @ANYBLOB=',subj_user=+$.-,obj_role=!,hash,\x00']) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000240)=0x5) 22:31:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xf}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 621.810290][T22738] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 621.834752][T22738] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 621.886426][T22739] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 621.921603][T22739] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x10}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 621.954089][T22740] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 621.977866][T22740] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 621.980534][T22747] hfs: unable to parse mount options 22:31:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x11}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 622.004878][T22738] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 622.054733][ T28] audit: type=1804 audit(1593037870.917:1100): pid=22756 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/361/bus" dev="sda1" ino=16337 res=1 [ 622.092317][T22738] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 622.167499][T22751] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:11 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x12}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 622.218089][T22751] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:11 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 622.275333][ T3358] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 622.314791][T22750] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 622.344280][T22750] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 622.396270][T22747] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 622.439168][T22747] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 622.482990][T22771] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 622.527051][T22771] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 622.562963][ T3358] usb 4-1: Using ep0 maxpacket: 8 [ 622.582037][T22772] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 622.622138][T22772] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 622.663648][ T28] audit: type=1804 audit(1593037871.541:1101): pid=22779 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/361/bus" dev="sda1" ino=16337 res=1 [ 622.698177][T22776] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 622.719330][T22776] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 622.742480][ T3358] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 622.751677][T22756] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 622.773885][ T3358] usb 4-1: config 0 has no interface number 0 [ 622.800476][T22756] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 622.821251][ T3358] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 622.853324][ T3358] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 622.865015][ T3358] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 622.875439][ T3358] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 622.885139][ T3358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.899929][T22781] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 622.911420][ T3358] usb 4-1: config 0 descriptor?? [ 622.947342][T22781] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 622.951577][T22753] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 622.970564][T22753] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 623.239924][T22746] FAULT_INJECTION: forcing a failure. [ 623.239924][T22746] name failslab, interval 1, probability 0, space 0, times 0 [ 623.275763][T22746] CPU: 0 PID: 22746 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 623.284561][T22746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.294713][T22746] Call Trace: [ 623.298119][T22746] dump_stack+0x188/0x20d [ 623.302833][T22746] should_fail.cold+0x5/0xa [ 623.307644][T22746] ? fault_create_debugfs_attr+0x140/0x140 [ 623.314304][T22746] should_failslab+0x5/0xf [ 623.320024][T22746] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 623.326235][T22746] ? snd_seq_ioctl_create_port+0x4e4/0x6d0 [ 623.333543][T22746] snd_seq_queue_alloc+0x51/0x4d0 [ 623.338770][T22746] snd_seq_ioctl_create_queue+0xab/0x320 [ 623.345832][T22746] ? async_call_lookup_ports+0x10/0x10 [ 623.351425][T22746] snd_seq_kernel_client_ctl+0xeb/0x130 [ 623.357173][T22746] alloc_seq_queue.isra.0+0xf9/0x1a0 [ 623.362481][T22746] ? delete_port+0xc0/0xc0 [ 623.367717][T22746] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 623.373548][T22746] ? find_held_lock+0x2d/0x110 [ 623.379363][T22746] snd_seq_oss_open+0x2fe/0x980 [ 623.384910][T22746] odev_open+0x6c/0x90 [ 623.389316][T22746] ? odev_release+0x70/0x70 [ 623.394526][T22746] soundcore_open+0x446/0x600 [ 623.399838][T22746] ? sound_devnode+0xf0/0xf0 [ 623.405181][T22746] chrdev_open+0x219/0x5c0 [ 623.410415][T22746] ? cdev_put.part.0+0x50/0x50 [ 623.416560][T22746] ? security_file_open+0x84/0x410 [ 623.422333][T22746] do_dentry_open+0x546/0x1340 [ 623.427711][T22746] ? cdev_put.part.0+0x50/0x50 [ 623.432757][T22746] ? security_inode_permission+0xc4/0xf0 [ 623.438759][T22746] ? chown_common+0x550/0x550 [ 623.443934][T22746] ? inode_permission+0xab/0x500 [ 623.449331][T22746] path_openat+0x1e59/0x27d0 [ 623.454260][T22746] ? path_lookupat.isra.0+0x530/0x530 [ 623.459832][T22746] ? lock_acquire+0x1f2/0x8f0 [ 623.467407][T22746] do_filp_open+0x192/0x260 [ 623.472864][T22746] ? may_open_dev+0xf0/0xf0 [ 623.477838][T22746] ? do_raw_spin_lock+0x129/0x2e0 [ 623.483111][T22746] ? _raw_spin_unlock+0x24/0x40 [ 623.487974][T22746] ? __alloc_fd+0x46d/0x600 [ 623.492517][T22746] do_sys_openat2+0x585/0x7d0 [ 623.497203][T22746] ? file_open_root+0x400/0x400 [ 623.502192][T22746] ? __mutex_unlock_slowpath+0xe2/0x660 [ 623.507887][T22746] ? wait_for_completion+0x270/0x270 [ 623.513177][T22746] ? __this_cpu_preempt_check+0x28/0x190 [ 623.518842][T22746] ? __sb_end_write+0x101/0x1d0 [ 623.523717][T22746] do_sys_open+0xc3/0x140 [ 623.528052][T22746] ? filp_open+0x70/0x70 [ 623.532298][T22746] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 623.538399][T22746] ? do_syscall_64+0x21/0x7d0 [ 623.544219][T22746] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 623.550897][T22746] do_syscall_64+0xf6/0x7d0 [ 623.555528][T22746] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 623.561514][T22746] RIP: 0033:0x45ca59 [ 623.565421][T22746] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 623.586247][T22746] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 623.594754][T22746] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 623.603315][T22746] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 623.611820][T22746] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 623.619785][T22746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 623.628494][T22746] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 623.663800][ T3355] usb 4-1: USB disconnect, device number 13 22:31:13 executing program 3 (fault-call:4 fault-nth:9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x13}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:13 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x68}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:13 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:13 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0xa2, "ddf04a364d307a2c9a9d79c8667a5efa72a722bc3d1821c2789ef30065094a61139a07c566f9f080538c26729edf74034e2fd79a2f11a761cb597eb728cdb493739fe581a53eed59111d26aba9996f1a8ec514b71af024aadcdbaf6cb5130344567cd5a45ed10768fd574fdf4e37574351eaef1b3d14e072c47e0720fd90ec397af222eb4fcb5b290e191a6dcf335c0c0c66b581e60a89536d16eb3d118c5af1c791"}, &(0x7f0000000080)=0xaa) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100)=r3, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 22:31:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffff01010000000000000800450000280000000000019078ac141400ac14143a0d009078000000000000000000000000000000004d3d3728df457770e4f696be0d0da2c12d274ef87b2721120f77cd50c3f761c67bdef21e761e52ff7b7e186718cc041688b87daad446166fae1094bf9f61423e07c1911713be5f34f3df3db89ca6cc1cd5e27655210b8c7c7a516a"], 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x8, 0x20800) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x1, @pix_mp={0x7, 0xfffffff8, 0x32314142, 0x5, 0x5, [{0x401, 0x400}, {0x8000, 0x8}, {0x80000001, 0x6}, {0x0, 0x2}, {0x1, 0x200}, {0x7fffffff, 0x8}, {0xfffffffc, 0x6}, {0x40, 0xe000}], 0x5, 0x12, 0x6, 0x0, 0x4}}) 22:31:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0xffffffffffffffff, 0x0) [ 624.285292][T22824] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x60}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 624.338864][ T28] audit: type=1804 audit(1593037873.222:1102): pid=22832 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/362/bus" dev="sda1" ino=16383 res=1 [ 624.361920][T22824] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 624.393349][T22829] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 624.421038][T22829] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 624.458022][T22831] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 624.499297][T22831] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xca}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:13 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 624.570293][T22843] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 624.587094][T22843] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:13 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x6c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 624.679038][ T3355] usb 4-1: new high-speed USB device number 14 using dummy_hcd 22:31:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xf0}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 624.788136][ T2484] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 624.812544][T22854] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 624.851612][T22854] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 624.883337][T22856] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 624.921364][T22856] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 624.937144][ T3355] usb 4-1: Using ep0 maxpacket: 8 [ 624.950158][T22860] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 624.975370][T22860] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 625.001528][T22859] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 625.028321][T22859] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 625.050222][ T28] audit: type=1804 audit(1593037873.937:1103): pid=22836 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/362/bus" dev="sda1" ino=16383 res=1 [ 625.074447][ T3355] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 625.104548][ T3355] usb 4-1: config 0 has no interface number 0 [ 625.141165][ T3355] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 625.181069][ T2484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.194373][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 625.195747][ T2484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.231054][ T2484] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 625.232589][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 625.242068][ T2484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.261055][ T2484] usb 2-1: config 0 descriptor?? [ 625.269841][ T3355] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 625.297229][ T3355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.331848][ T3355] usb 4-1: config 0 descriptor?? [ 625.356072][T22835] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 625.363515][T22835] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 625.626633][T22830] FAULT_INJECTION: forcing a failure. [ 625.626633][T22830] name failslab, interval 1, probability 0, space 0, times 0 [ 625.657920][T22830] CPU: 0 PID: 22830 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 625.666460][T22830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.676646][T22830] Call Trace: [ 625.679959][T22830] dump_stack+0x188/0x20d [ 625.684329][T22830] should_fail.cold+0x5/0xa [ 625.688858][T22830] ? fault_create_debugfs_attr+0x140/0x140 [ 625.694844][T22830] should_failslab+0x5/0xf [ 625.699386][T22830] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 625.704791][T22830] ? snd_seq_ioctl_create_port+0x4e4/0x6d0 [ 625.710629][T22830] snd_seq_queue_alloc+0x51/0x4d0 [ 625.715722][T22830] snd_seq_ioctl_create_queue+0xab/0x320 [ 625.721374][T22830] ? async_call_lookup_ports+0x10/0x10 [ 625.726863][T22830] snd_seq_kernel_client_ctl+0xeb/0x130 [ 625.732432][T22830] alloc_seq_queue.isra.0+0xf9/0x1a0 [ 625.737737][T22830] ? delete_port+0xc0/0xc0 [ 625.742192][T22830] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 625.747761][T22830] ? find_held_lock+0x2d/0x110 [ 625.752568][T22830] snd_seq_oss_open+0x2fe/0x980 [ 625.757548][T22830] odev_open+0x6c/0x90 [ 625.761617][T22830] ? odev_release+0x70/0x70 [ 625.766122][T22830] soundcore_open+0x446/0x600 [ 625.770828][T22830] ? sound_devnode+0xf0/0xf0 [ 625.775510][T22830] chrdev_open+0x219/0x5c0 [ 625.779935][T22830] ? cdev_put.part.0+0x50/0x50 [ 625.784714][T22830] ? security_file_open+0x84/0x410 [ 625.789826][T22830] do_dentry_open+0x546/0x1340 [ 625.794608][T22830] ? cdev_put.part.0+0x50/0x50 [ 625.799642][T22830] ? security_inode_permission+0xc4/0xf0 [ 625.805290][T22830] ? chown_common+0x550/0x550 [ 625.809991][T22830] ? inode_permission+0xab/0x500 [ 625.815032][T22830] path_openat+0x1e59/0x27d0 [ 625.819619][T22830] ? path_lookupat.isra.0+0x530/0x530 [ 625.824996][T22830] ? lock_acquire+0x1f2/0x8f0 [ 625.829691][T22830] do_filp_open+0x192/0x260 [ 625.834324][T22830] ? may_open_dev+0xf0/0xf0 [ 625.838976][T22830] ? do_raw_spin_lock+0x129/0x2e0 [ 625.844201][T22830] ? _raw_spin_unlock+0x24/0x40 [ 625.849073][T22830] ? __alloc_fd+0x46d/0x600 [ 625.853764][T22830] do_sys_openat2+0x585/0x7d0 [ 625.858585][T22830] ? file_open_root+0x400/0x400 [ 625.863644][T22830] ? __mutex_unlock_slowpath+0xe2/0x660 [ 625.869247][T22830] ? wait_for_completion+0x270/0x270 [ 625.874645][T22830] ? __this_cpu_preempt_check+0x28/0x190 [ 625.880322][T22830] ? __sb_end_write+0x101/0x1d0 [ 625.885189][T22830] do_sys_open+0xc3/0x140 [ 625.889541][T22830] ? filp_open+0x70/0x70 [ 625.893899][T22830] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 625.899902][T22830] ? do_syscall_64+0x21/0x7d0 [ 625.904602][T22830] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 625.910611][T22830] do_syscall_64+0xf6/0x7d0 [ 625.915166][T22830] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 625.921230][T22830] RIP: 0033:0x45ca59 [ 625.925150][T22830] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 625.944803][T22830] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 625.953241][T22830] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 625.961248][T22830] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 625.969233][T22830] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 625.977912][T22830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 625.985901][T22830] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 626.023707][ T3355] usb 4-1: USB disconnect, device number 14 [ 626.089849][ T2484] usbhid 2-1:0.0: can't add hid device: -71 [ 626.095877][ T2484] usbhid: probe of 2-1:0.0 failed with error -71 [ 626.121473][ T2484] usb 2-1: USB disconnect, device number 3 22:31:15 executing program 3 (fault-call:4 fault-nth:10): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x300}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:15 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:15 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000040)={0x4, "713b06abb7cfbbea518032b384f01570a4efa0f978ab31b050f7bd8c0af45d4d216cb62ec5fc7be180e168a8f6c95b6cbc30f4549b405b269d5ec66f4506a711"}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={r6, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0], 0x1}, 0x20) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:31:15 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:15 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xbe, &(0x7f0000000300)=""/190, 0x41100, 0x3, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) sched_getscheduler(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000002c0)={0x2, [0x1999, 0x3]}, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x9) [ 626.577234][T22919] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 626.592297][T22919] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b044ad5526c6e898cbb38c310d32b6a3217fa0cb9e9cafe0569942f46cde7188b00", 0x10000000004}, 0x60) 22:31:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x500}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 626.635259][T22923] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 626.679016][T22923] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 626.727858][T22924] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 626.752172][ T28] audit: type=1804 audit(1593037875.648:1104): pid=22929 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/363/bus" dev="sda1" ino=16376 res=1 22:31:15 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 626.777969][T22924] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x600}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 626.844330][T22924] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 626.882100][T22924] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="b85f6200000f23c00f21f835010000000f23f867f4c4c1b573d3070f015b00f30f09670f21eff30fc7ffc4e37d44928ed5723400360f01c53ed8eb", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf37]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x3, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="000000002000000000001b00000008009a000000"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r3 = dup(0xffffffffffffffff) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x38000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000100)={0x55, 0x8, 0x2, {0x1, 0xc9f9}, {0x0, 0xea}, @period={0x59, 0x4, 0x5060, 0xcb, 0x0, {0x1, 0x3, 0x7, 0x58}, 0x2, &(0x7f00000000c0)=[0x1fe0, 0x6]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:31:15 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 627.008571][T22938] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 627.071907][T22938] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 627.085430][T22180] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 627.171708][T22950] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 627.254973][T22950] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 627.313138][T22954] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 627.352024][T22180] usb 4-1: Using ep0 maxpacket: 8 [ 627.352368][T22954] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 627.428818][T22954] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 627.467491][T22954] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 627.482085][T22180] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 627.490138][T22180] usb 4-1: config 0 has no interface number 0 [ 627.503325][ T28] audit: type=1804 audit(1593037876.412:1105): pid=22964 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/363/bus" dev="sda1" ino=16376 res=1 [ 627.555092][T22180] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 627.585577][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 627.599647][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 627.610917][T22180] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 627.624027][T22180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.635273][T22180] usb 4-1: config 0 descriptor?? [ 627.683952][T22931] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 627.710226][T22931] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 627.927660][T22926] FAULT_INJECTION: forcing a failure. [ 627.927660][T22926] name failslab, interval 1, probability 0, space 0, times 0 [ 627.958269][T22926] CPU: 0 PID: 22926 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 627.966781][T22926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 627.976861][T22926] Call Trace: [ 627.980164][T22926] dump_stack+0x188/0x20d [ 627.984527][T22926] should_fail.cold+0x5/0xa [ 627.989054][T22926] ? fault_create_debugfs_attr+0x140/0x140 [ 627.994909][T22926] should_failslab+0x5/0xf [ 627.999340][T22926] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 628.004744][T22926] ? lockdep_init_map_waits+0x26a/0x890 [ 628.010317][T22926] ? lockdep_init_map_waits+0x26a/0x890 [ 628.015888][T22926] snd_seq_prioq_new+0x3c/0x120 [ 628.020792][T22926] snd_seq_queue_alloc+0x12f/0x4d0 [ 628.026012][T22926] snd_seq_ioctl_create_queue+0xab/0x320 [ 628.031668][T22926] ? async_call_lookup_ports+0x10/0x10 [ 628.037149][T22926] snd_seq_kernel_client_ctl+0xeb/0x130 [ 628.042718][T22926] alloc_seq_queue.isra.0+0xf9/0x1a0 [ 628.048041][T22926] ? delete_port+0xc0/0xc0 [ 628.052493][T22926] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 628.058064][T22926] ? find_held_lock+0x2d/0x110 [ 628.062847][T22926] snd_seq_oss_open+0x2fe/0x980 [ 628.067816][T22926] odev_open+0x6c/0x90 [ 628.071912][T22926] ? odev_release+0x70/0x70 [ 628.076441][T22926] soundcore_open+0x446/0x600 [ 628.081148][T22926] ? sound_devnode+0xf0/0xf0 [ 628.085764][T22926] chrdev_open+0x219/0x5c0 [ 628.090217][T22926] ? cdev_put.part.0+0x50/0x50 [ 628.095013][T22926] ? security_file_open+0x84/0x410 [ 628.100151][T22926] do_dentry_open+0x546/0x1340 [ 628.104974][T22926] ? cdev_put.part.0+0x50/0x50 [ 628.109785][T22926] ? security_inode_permission+0xc4/0xf0 [ 628.115437][T22926] ? chown_common+0x550/0x550 [ 628.120130][T22926] ? inode_permission+0xab/0x500 [ 628.125098][T22926] path_openat+0x1e59/0x27d0 [ 628.129810][T22926] ? path_lookupat.isra.0+0x530/0x530 [ 628.135208][T22926] ? lock_acquire+0x1f2/0x8f0 [ 628.140091][T22926] do_filp_open+0x192/0x260 [ 628.144651][T22926] ? may_open_dev+0xf0/0xf0 [ 628.149186][T22926] ? do_raw_spin_lock+0x129/0x2e0 [ 628.155371][T22926] ? _raw_spin_unlock+0x24/0x40 [ 628.160351][T22926] ? __alloc_fd+0x46d/0x600 [ 628.164891][T22926] do_sys_openat2+0x585/0x7d0 [ 628.169588][T22926] ? file_open_root+0x400/0x400 [ 628.174462][T22926] ? __mutex_unlock_slowpath+0xe2/0x660 [ 628.180050][T22926] ? wait_for_completion+0x270/0x270 [ 628.185365][T22926] ? __this_cpu_preempt_check+0x28/0x190 [ 628.191040][T22926] ? __sb_end_write+0x101/0x1d0 [ 628.196271][T22926] do_sys_open+0xc3/0x140 [ 628.200632][T22926] ? filp_open+0x70/0x70 [ 628.205321][T22926] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 628.211420][T22926] ? do_syscall_64+0x21/0x7d0 [ 628.216115][T22926] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 628.222123][T22926] do_syscall_64+0xf6/0x7d0 [ 628.226757][T22926] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 628.233238][T22926] RIP: 0033:0x45ca59 [ 628.237378][T22926] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 628.257560][T22926] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 628.265993][T22926] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 628.274207][T22926] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 628.282324][T22926] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 628.290495][T22926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 628.298498][T22926] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 628.411850][ T3358] usb 4-1: USB disconnect, device number 15 22:31:17 executing program 3 (fault-call:4 fault-nth:11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x612}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:17 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:17 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4110) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) 22:31:17 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:17 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2, 0x0, 0x0, 0x1000}}}, 0x60) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x1) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010008105000000000000d285b49d596eb7a9000000000000", @ANYRES32=0x0, @ANYBLOB="000885ac1f4f6ea48029591437f5c7450000000000950f047b91c6971d48082609d8cd9af42e52fabf7704e3f3479b0000000c00028008000700ffffffff"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@mpls_getroute={0x94, 0x1a, 0x800, 0x70bd27, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0xa4, 0xff, 0x0, 0xfe, 0xb, 0x300}, [@RTA_DST={0x8, 0x1, {0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0xc8, 0x50}}, @RTA_VIA={0x14, 0x12, {0x27, "ccfe5c5ac0366c48b0124b66d8f6"}}, @RTA_DST={0x8, 0x1, {0x6, 0x0, 0x1}}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x1d, "a783dc43f10d9e49358cc3e059d9"}}, @RTA_DST={0x8, 0x1, {0x3, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0x20, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x21, "37824fe254aadb263d00094bfa73"}}, @RTA_OIF={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r6, r7, 0x0, 0x8000fffffffe) 22:31:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x900}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 629.025721][T23013] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:31:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xa00}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 629.117323][ T28] audit: type=1804 audit(1593037878.032:1106): pid=23011 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/364/bus" dev="sda1" ino=16384 res=1 [ 629.148083][T23014] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 629.179259][T23014] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 629.233790][T23016] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 629.260632][T23015] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xb00}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 629.288827][T23015] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 629.335483][T23033] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 629.379933][T23033] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 629.390930][ T3358] usb 4-1: new high-speed USB device number 16 using dummy_hcd 22:31:18 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xe00}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 629.432253][T23013] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:31:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xf00}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 629.544004][T23025] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 629.571152][ T28] audit: type=1804 audit(1593037878.485:1107): pid=23024 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/364/bus" dev="sda1" ino=16384 res=1 [ 629.606639][T23025] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 629.628060][ T3358] usb 4-1: Using ep0 maxpacket: 8 [ 629.669355][T23016] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 629.709172][T23051] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 629.744056][T23051] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 629.757884][ T3358] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 629.766107][ T3358] usb 4-1: config 0 has no interface number 0 [ 629.803786][ T3358] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 629.825167][ T3358] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 629.836991][ T3358] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 629.849591][ T3358] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 629.872217][ T3358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.890575][ T3358] usb 4-1: config 0 descriptor?? [ 629.908932][T23026] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 629.936362][T23026] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 630.152520][T23017] FAULT_INJECTION: forcing a failure. [ 630.152520][T23017] name failslab, interval 1, probability 0, space 0, times 0 [ 630.201763][T23017] CPU: 1 PID: 23017 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 630.211199][T23017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.221851][T23017] Call Trace: [ 630.225419][T23017] dump_stack+0x188/0x20d [ 630.229914][T23017] should_fail.cold+0x5/0xa [ 630.234520][T23017] ? fault_create_debugfs_attr+0x140/0x140 [ 630.240909][T23017] should_failslab+0x5/0xf [ 630.245736][T23017] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 630.251350][T23017] ? lockdep_init_map_waits+0x26a/0x890 [ 630.257383][T23017] snd_seq_timer_new+0x38/0x90 [ 630.262181][T23017] snd_seq_queue_alloc+0x17e/0x4d0 [ 630.267686][T23017] snd_seq_ioctl_create_queue+0xab/0x320 [ 630.273444][T23017] ? async_call_lookup_ports+0x10/0x10 [ 630.278917][T23017] snd_seq_kernel_client_ctl+0xeb/0x130 [ 630.284468][T23017] alloc_seq_queue.isra.0+0xf9/0x1a0 [ 630.290029][T23017] ? delete_port+0xc0/0xc0 [ 630.294793][T23017] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 630.300643][T23017] ? find_held_lock+0x2d/0x110 [ 630.305419][T23017] snd_seq_oss_open+0x2fe/0x980 [ 630.310543][T23017] odev_open+0x6c/0x90 [ 630.314617][T23017] ? odev_release+0x70/0x70 [ 630.319134][T23017] soundcore_open+0x446/0x600 [ 630.323870][T23017] ? sound_devnode+0xf0/0xf0 [ 630.329166][T23017] chrdev_open+0x219/0x5c0 [ 630.333706][T23017] ? cdev_put.part.0+0x50/0x50 [ 630.338938][T23017] ? security_file_open+0x84/0x410 [ 630.344182][T23017] do_dentry_open+0x546/0x1340 [ 630.348940][T23017] ? cdev_put.part.0+0x50/0x50 [ 630.353716][T23017] ? security_inode_permission+0xc4/0xf0 [ 630.359346][T23017] ? chown_common+0x550/0x550 [ 630.364019][T23017] ? inode_permission+0xab/0x500 [ 630.368969][T23017] path_openat+0x1e59/0x27d0 [ 630.373833][T23017] ? path_lookupat.isra.0+0x530/0x530 [ 630.379613][T23017] do_filp_open+0x192/0x260 [ 630.384795][T23017] ? may_open_dev+0xf0/0xf0 [ 630.389994][T23017] ? do_raw_spin_lock+0x129/0x2e0 [ 630.395358][T23017] ? _raw_spin_unlock+0x24/0x40 [ 630.400332][T23017] ? __alloc_fd+0x46d/0x600 [ 630.405151][T23017] do_sys_openat2+0x585/0x7d0 [ 630.410133][T23017] ? file_open_root+0x400/0x400 [ 630.415182][T23017] ? __mutex_unlock_slowpath+0xe2/0x660 [ 630.420748][T23017] ? wait_for_completion+0x270/0x270 [ 630.426189][T23017] ? __this_cpu_preempt_check+0x28/0x190 [ 630.432063][T23017] ? __sb_end_write+0x101/0x1d0 [ 630.437410][T23017] do_sys_open+0xc3/0x140 [ 630.443033][T23017] ? filp_open+0x70/0x70 [ 630.447490][T23017] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 630.453490][T23017] ? do_syscall_64+0x21/0x7d0 [ 630.458324][T23017] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 630.465321][T23017] do_syscall_64+0xf6/0x7d0 [ 630.470091][T23017] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 630.476134][T23017] RIP: 0033:0x45ca59 [ 630.480144][T23017] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 630.499994][T23017] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 630.508519][T23017] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 630.516606][T23017] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 630.524819][T23017] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 630.533200][T23017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 630.541303][T23017] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 630.624817][ T3358] usb 4-1: USB disconnect, device number 16 22:31:20 executing program 3 (fault-call:4 fault-nth:12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000100000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000680), 0x24, 0x0) ptrace$setopts(0x4206, 0x0, 0xfff, 0x58) 22:31:20 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x291}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x1100}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:20 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000002e000100a5662c27bd7000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="0f00070004000b00030008000008000b003f00000008ec5e000500"/36], 0x3c}}, 0x44) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:31:20 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x1200}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 631.241634][T23098] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 631.284443][T23098] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 631.308526][T23101] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 631.336981][ T28] audit: type=1804 audit(1593037880.255:1108): pid=23108 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/365/bus" dev="sda1" ino=16380 res=1 [ 631.375865][T23101] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x1206}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 631.413118][T23103] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:20 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:20 executing program 1: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$usbmon(r2, &(0x7f0000000540)=""/4096, 0x1000) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) [ 631.458335][T23103] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:20 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x1300}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 631.622513][T23122] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 631.636041][T22180] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 631.713098][T23125] binder: 23123:23125 ioctl c0306201 0 returned -14 [ 631.719210][T23122] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 631.789265][T23130] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 631.848908][T23130] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 631.901904][T22180] usb 4-1: Using ep0 maxpacket: 8 [ 631.911425][T23129] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 631.945957][T23129] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 631.993439][ T28] audit: type=1804 audit(1593037880.919:1109): pid=23113 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/365/bus" dev="sda1" ino=16380 res=1 [ 632.051799][T23133] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 632.062970][T22180] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 632.081844][T22180] usb 4-1: config 0 has no interface number 0 [ 632.093455][T23133] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 632.123285][T22180] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 632.143784][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 632.163843][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 632.184478][T22180] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 632.206962][T22180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.252827][T22180] usb 4-1: config 0 descriptor?? [ 632.273515][T23109] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 632.281038][T23109] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 632.548170][T23104] FAULT_INJECTION: forcing a failure. [ 632.548170][T23104] name failslab, interval 1, probability 0, space 0, times 0 [ 632.580612][T23104] CPU: 1 PID: 23104 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 632.588976][T23104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.599125][T23104] Call Trace: [ 632.602413][T23104] dump_stack+0x188/0x20d [ 632.606943][T23104] should_fail.cold+0x5/0xa [ 632.611450][T23104] ? fault_create_debugfs_attr+0x140/0x140 [ 632.617257][T23104] should_failslab+0x5/0xf [ 632.621780][T23104] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 632.627469][T23104] ? lockdep_init_map_waits+0x26a/0x890 [ 632.633927][T23104] snd_seq_timer_new+0x38/0x90 [ 632.638994][T23104] snd_seq_queue_alloc+0x17e/0x4d0 [ 632.644416][T23104] snd_seq_ioctl_create_queue+0xab/0x320 [ 632.650862][T23104] ? async_call_lookup_ports+0x10/0x10 [ 632.657935][T23104] snd_seq_kernel_client_ctl+0xeb/0x130 [ 632.664432][T23104] alloc_seq_queue.isra.0+0xf9/0x1a0 [ 632.669737][T23104] ? delete_port+0xc0/0xc0 [ 632.674187][T23104] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 632.680044][T23104] ? find_held_lock+0x2d/0x110 [ 632.685104][T23104] snd_seq_oss_open+0x2fe/0x980 [ 632.689986][T23104] odev_open+0x6c/0x90 [ 632.694162][T23104] ? odev_release+0x70/0x70 [ 632.698818][T23104] soundcore_open+0x446/0x600 [ 632.705197][T23104] ? sound_devnode+0xf0/0xf0 [ 632.709907][T23104] chrdev_open+0x219/0x5c0 [ 632.714346][T23104] ? cdev_put.part.0+0x50/0x50 [ 632.720095][T23104] ? security_file_open+0x84/0x410 [ 632.725230][T23104] do_dentry_open+0x546/0x1340 [ 632.730021][T23104] ? cdev_put.part.0+0x50/0x50 [ 632.735150][T23104] ? security_inode_permission+0xc4/0xf0 [ 632.740799][T23104] ? chown_common+0x550/0x550 [ 632.745621][T23104] ? inode_permission+0xab/0x500 [ 632.750599][T23104] path_openat+0x1e59/0x27d0 [ 632.755307][T23104] ? path_lookupat.isra.0+0x530/0x530 [ 632.760701][T23104] ? lock_acquire+0x1f2/0x8f0 [ 632.765405][T23104] do_filp_open+0x192/0x260 [ 632.770272][T23104] ? may_open_dev+0xf0/0xf0 [ 632.774865][T23104] ? do_raw_spin_lock+0x129/0x2e0 [ 632.781301][T23104] ? _raw_spin_unlock+0x24/0x40 [ 632.786573][T23104] ? __alloc_fd+0x46d/0x600 [ 632.791283][T23104] do_sys_openat2+0x585/0x7d0 [ 632.796090][T23104] ? file_open_root+0x400/0x400 [ 632.801469][T23104] ? __mutex_unlock_slowpath+0xe2/0x660 [ 632.807042][T23104] ? wait_for_completion+0x270/0x270 [ 632.812346][T23104] ? __this_cpu_preempt_check+0x28/0x190 [ 632.818025][T23104] ? __sb_end_write+0x101/0x1d0 [ 632.822897][T23104] do_sys_open+0xc3/0x140 [ 632.827456][T23104] ? filp_open+0x70/0x70 [ 632.831727][T23104] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 632.837724][T23104] ? do_syscall_64+0x21/0x7d0 [ 632.842433][T23104] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 632.848433][T23104] do_syscall_64+0xf6/0x7d0 [ 632.853006][T23104] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 632.859259][T23104] RIP: 0033:0x45ca59 [ 632.863163][T23104] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 632.884682][T23104] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 632.893105][T23104] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 632.901189][T23104] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 632.909355][T23104] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 632.917350][T23104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 632.925394][T23104] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 633.004542][T22180] usb 4-1: USB disconnect, device number 17 22:31:22 executing program 3 (fault-call:4 fault-nth:13): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x6000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:22 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:22 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:22 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x277f, 0x24) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:31:22 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000002e000100a5662c27bd7000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="0f00070004000b00030008000008000b003f00000008ec5e000500"/36], 0x3c}}, 0x44) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 633.578615][T23183] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xca00}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 633.629260][ T28] audit: type=1804 audit(1593037882.569:1110): pid=23184 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/366/bus" dev="sda1" ino=16373 res=1 [ 633.663335][T23183] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 633.726775][T23186] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 633.754870][T23186] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xf000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 633.771041][ T28] audit: type=1804 audit(1593037882.710:1111): pid=23194 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366851321/syzkaller.6bjSHG/460/bus" dev="sda1" ino=16372 res=1 [ 633.812734][T23186] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 633.852975][T23186] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 633.912732][T23196] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x34000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:22 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 633.956114][T23196] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:23 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 634.052472][T22180] usb 4-1: new high-speed USB device number 18 using dummy_hcd 22:31:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x400300}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 634.218835][ T28] audit: type=1804 audit(1593037883.162:1112): pid=23188 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/366/bus" dev="sda1" ino=16373 res=1 [ 634.253679][T23211] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 634.291754][T22180] usb 4-1: Using ep0 maxpacket: 8 [ 634.302923][T23211] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 634.339950][ T28] audit: type=1800 audit(1593037883.192:1113): pid=23184 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16373 res=0 [ 634.371826][T23214] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 634.424614][T23214] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 634.433924][ T28] audit: type=1800 audit(1593037883.192:1114): pid=23210 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16373 res=0 [ 634.455202][T22180] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 634.467437][T22180] usb 4-1: config 0 has no interface number 0 [ 634.484569][T22180] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 634.512367][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 634.535288][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 634.558300][T22180] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 634.578986][T22180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.604080][T23211] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 634.617832][T22180] usb 4-1: config 0 descriptor?? [ 634.629027][T23211] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 634.660114][T23195] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 634.667474][T23195] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 634.688380][T23224] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 634.715357][T23224] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 634.906486][T23192] FAULT_INJECTION: forcing a failure. [ 634.906486][T23192] name failslab, interval 1, probability 0, space 0, times 0 [ 634.920830][T23192] CPU: 0 PID: 23192 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 634.929192][T23192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.939270][T23192] Call Trace: [ 634.942692][T23192] dump_stack+0x188/0x20d [ 634.947078][T23192] should_fail.cold+0x5/0xa [ 634.951621][T23192] ? fault_create_debugfs_attr+0x140/0x140 [ 634.957668][T23192] should_failslab+0x5/0xf [ 634.962560][T23192] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 634.967968][T23192] ? mark_lock+0x11f/0xdd0 [ 634.972575][T23192] snd_timer_instance_new+0x44/0x2f0 [ 634.977891][T23192] snd_seq_timer_open+0x1a5/0x530 [ 634.982928][T23192] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 634.988315][T23192] ? mark_held_locks+0x9f/0xe0 [ 634.993094][T23192] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 634.998914][T23192] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 635.004917][T23192] queue_use+0xe6/0x250 [ 635.009087][T23192] snd_seq_queue_alloc+0x2c6/0x4d0 [ 635.014221][T23192] snd_seq_ioctl_create_queue+0xab/0x320 [ 635.019873][T23192] ? async_call_lookup_ports+0x10/0x10 [ 635.025357][T23192] snd_seq_kernel_client_ctl+0xeb/0x130 [ 635.030929][T23192] alloc_seq_queue.isra.0+0xf9/0x1a0 [ 635.036238][T23192] ? delete_port+0xc0/0xc0 [ 635.040709][T23192] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 635.046284][T23192] ? find_held_lock+0x2d/0x110 [ 635.051096][T23192] snd_seq_oss_open+0x2fe/0x980 [ 635.056167][T23192] odev_open+0x6c/0x90 [ 635.060277][T23192] ? odev_release+0x70/0x70 [ 635.064803][T23192] soundcore_open+0x446/0x600 [ 635.069681][T23192] ? sound_devnode+0xf0/0xf0 [ 635.074290][T23192] chrdev_open+0x219/0x5c0 [ 635.078727][T23192] ? cdev_put.part.0+0x50/0x50 [ 635.083557][T23192] ? security_file_open+0x84/0x410 [ 635.088813][T23192] do_dentry_open+0x546/0x1340 [ 635.093664][T23192] ? cdev_put.part.0+0x50/0x50 [ 635.098457][T23192] ? security_inode_permission+0xc4/0xf0 [ 635.104130][T23192] ? chown_common+0x550/0x550 [ 635.108914][T23192] ? inode_permission+0xab/0x500 [ 635.113915][T23192] path_openat+0x1e59/0x27d0 [ 635.118540][T23192] ? path_lookupat.isra.0+0x530/0x530 [ 635.123941][T23192] ? lock_acquire+0x1f2/0x8f0 [ 635.128655][T23192] do_filp_open+0x192/0x260 [ 635.133189][T23192] ? may_open_dev+0xf0/0xf0 [ 635.137854][T23192] ? do_raw_spin_lock+0x129/0x2e0 [ 635.142923][T23192] ? _raw_spin_unlock+0x24/0x40 [ 635.147793][T23192] ? __alloc_fd+0x46d/0x600 [ 635.152323][T23192] do_sys_openat2+0x585/0x7d0 [ 635.157101][T23192] ? file_open_root+0x400/0x400 [ 635.162008][T23192] ? __mutex_unlock_slowpath+0xe2/0x660 [ 635.167668][T23192] ? wait_for_completion+0x270/0x270 [ 635.173211][T23192] ? __this_cpu_preempt_check+0x28/0x190 [ 635.178863][T23192] ? __sb_end_write+0x101/0x1d0 [ 635.183998][T23192] do_sys_open+0xc3/0x140 [ 635.188347][T23192] ? filp_open+0x70/0x70 [ 635.192628][T23192] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 635.198626][T23192] ? do_syscall_64+0x21/0x7d0 [ 635.203328][T23192] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 635.209429][T23192] do_syscall_64+0xf6/0x7d0 [ 635.213960][T23192] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 635.219873][T23192] RIP: 0033:0x45ca59 [ 635.223781][T23192] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 635.243820][T23192] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 635.252420][T23192] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 635.260410][T23192] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 635.268426][T23192] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 635.276412][T23192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 635.284652][T23192] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 635.390450][T22180] usb 4-1: USB disconnect, device number 18 22:31:24 executing program 3 (fault-call:4 fault-nth:14): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:24 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x18, 0x0, 0x6, {0x39}}, 0x18) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000040)=0x401) 22:31:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xf0ffff}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:24 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x700}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:24 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:24 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 636.043273][T23272] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x1000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 636.102734][T23272] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 636.115752][ T28] audit: type=1804 audit(1593037885.073:1115): pid=23279 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/367/bus" dev="sda1" ino=16372 res=1 [ 636.183684][T23274] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 636.226217][T23274] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 636.282059][T23276] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x2000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 636.325301][T23276] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:25 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = epoll_create1(0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000200)={0x1, 0x0, @pic={0x0, 0x93, 0x38, 0x1a, 0x20, 0x8, 0x9, 0x8, 0x5, 0x4, 0x0, 0x3, 0x77, 0x1, 0x81, 0x40}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x1010, r6, 0x16000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f0000000140)={0x1ff, 0x3, 0x4, 0x0, 0x5, {0x0, 0x2710}, {0x5, 0x2, 0x6, 0x3, 0x0, 0xe8, "45a27ec9"}, 0x1, 0x4, @planes=&(0x7f0000000100)={0xbaf, 0x400, @mem_offset=0x6, 0x8}, 0xff}) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="580000000206050000000000000000000000000011000300686173683a6e65742c6e65740000000005000400000000000900020073797a3000000000050005ffff000000060000000c000780080000400000000029641e71e1432bf1511f4ff5020000000000000062dacb36d0406cc0c4c158c83f5bc07fd7fabec68f3276b5428b88bac7bab34e551b06ace18b04645d49981254f685ace8747ec22b8884e6da3d096ddb783f56f202fedd64746b91be40458c68df788b03ebb614b80774e70e4d4adc193f552fea5b25c445cfd6220bc0376055b0ca5d46a0ba25b8a406cd1e6648faee81abb9298939668672931d2e4c882121000000006e475984cd7f930cb740fc9da1b134f11e85ce469a4b069a46860dd03c31777814e59e3dd7e1e45bc3198d692c2f0784c27f2d7ae10c5226c6c5ee0b521bbd76d9067d7ea8414888f2435758356fa3a72bb5cf890000000000000079736b2c57a083e81e1d17c536a4387e736fa194382252489a2c229a92465538084960708c8d0cc5b11db9aaead74a03efb1a0a3a49855c5662146cda92f48c41abb6a6f8ae0d9ffb6fd7d6a11a0ee3199ad9a32749d74d93d4d22feaafbdfa634bc52b7e3e5cc3d120f8786130dbbe311cf049dc647cd6991aa5b27bb9e5595d2df23165be75b80b3d30d05782a8bbe9fb5131d7df633f3f506c9f8463eee6b25443ce025d394666f419c29002b3387c4abb058d47cfb782a"], 0x58}}, 0x0) r10 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40001, 0x0) ioctl$SIOCRSSCAUSE(r10, 0x89e1, &(0x7f0000000080)=0x180) [ 636.379745][T23286] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 636.413826][T23286] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 636.425920][ T3355] usb 4-1: new high-speed USB device number 19 using dummy_hcd 22:31:25 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x3000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 636.476979][T23282] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 636.513379][T23282] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:25 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 636.585352][T23295] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 636.656826][T23298] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 636.692046][T23301] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 636.707418][ T3355] usb 4-1: Using ep0 maxpacket: 8 [ 636.727075][T23301] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 636.796633][T23306] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 636.823569][ T28] audit: type=1804 audit(1593037885.776:1116): pid=23279 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/367/bus" dev="sda1" ino=16372 res=1 [ 636.862097][T23306] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 636.877239][ T3355] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 636.885574][ T3355] usb 4-1: config 0 has no interface number 0 [ 636.910646][T23307] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 636.912593][ T28] audit: type=1804 audit(1593037885.807:1117): pid=23283 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/367/bus" dev="sda1" ino=16372 res=1 [ 636.938933][T23307] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 636.967140][ T3355] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 636.980679][T23306] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 637.005841][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 637.011568][T23306] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 637.035688][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 637.055819][ T3355] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 637.075528][ T3355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.103732][ T3355] usb 4-1: config 0 descriptor?? [ 637.146396][T23280] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 637.153887][T23280] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 637.389964][T23277] FAULT_INJECTION: forcing a failure. [ 637.389964][T23277] name failslab, interval 1, probability 0, space 0, times 0 [ 637.408945][T23277] CPU: 1 PID: 23277 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 637.417412][T23277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.427717][T23277] Call Trace: [ 637.431292][T23277] dump_stack+0x188/0x20d [ 637.435661][T23277] should_fail.cold+0x5/0xa [ 637.440209][T23277] ? fault_create_debugfs_attr+0x140/0x140 [ 637.446203][T23277] should_failslab+0x5/0xf [ 637.450660][T23277] __kmalloc_track_caller+0x2d1/0x7a0 [ 637.456059][T23277] ? snd_timer_instance_new+0x62/0x2f0 [ 637.461550][T23277] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 637.467203][T23277] kstrdup+0x36/0x70 [ 637.471277][T23277] snd_timer_instance_new+0x62/0x2f0 [ 637.476592][T23277] snd_seq_timer_open+0x1a5/0x530 [ 637.481999][T23277] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 637.487401][T23277] ? mark_held_locks+0x9f/0xe0 [ 637.492187][T23277] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 637.498021][T23277] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 637.504137][T23277] queue_use+0xe6/0x250 [ 637.508460][T23277] snd_seq_queue_alloc+0x2c6/0x4d0 [ 637.513609][T23277] snd_seq_ioctl_create_queue+0xab/0x320 [ 637.519268][T23277] ? async_call_lookup_ports+0x10/0x10 [ 637.524864][T23277] snd_seq_kernel_client_ctl+0xeb/0x130 [ 637.530440][T23277] alloc_seq_queue.isra.0+0xf9/0x1a0 [ 637.535766][T23277] ? delete_port+0xc0/0xc0 [ 637.540229][T23277] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 637.545825][T23277] ? find_held_lock+0x2d/0x110 [ 637.550620][T23277] snd_seq_oss_open+0x2fe/0x980 [ 637.555493][T23277] odev_open+0x6c/0x90 [ 637.559576][T23277] ? odev_release+0x70/0x70 [ 637.564096][T23277] soundcore_open+0x446/0x600 [ 637.568809][T23277] ? sound_devnode+0xf0/0xf0 [ 637.573423][T23277] chrdev_open+0x219/0x5c0 [ 637.577856][T23277] ? cdev_put.part.0+0x50/0x50 [ 637.582625][T23277] ? security_file_open+0x84/0x410 [ 637.587775][T23277] do_dentry_open+0x546/0x1340 [ 637.592576][T23277] ? cdev_put.part.0+0x50/0x50 [ 637.597364][T23277] ? security_inode_permission+0xc4/0xf0 [ 637.603015][T23277] ? chown_common+0x550/0x550 [ 637.607829][T23277] ? inode_permission+0xab/0x500 [ 637.612797][T23277] path_openat+0x1e59/0x27d0 [ 637.617410][T23277] ? path_lookupat.isra.0+0x530/0x530 [ 637.622799][T23277] ? lock_acquire+0x1f2/0x8f0 [ 637.627501][T23277] do_filp_open+0x192/0x260 [ 637.632031][T23277] ? may_open_dev+0xf0/0xf0 [ 637.636565][T23277] ? do_raw_spin_lock+0x129/0x2e0 [ 637.641707][T23277] ? _raw_spin_unlock+0x24/0x40 [ 637.646611][T23277] ? __alloc_fd+0x46d/0x600 [ 637.651337][T23277] do_sys_openat2+0x585/0x7d0 [ 637.656679][T23277] ? file_open_root+0x400/0x400 [ 637.661675][T23277] ? __mutex_unlock_slowpath+0xe2/0x660 [ 637.668111][T23277] ? wait_for_completion+0x270/0x270 [ 637.673670][T23277] ? __this_cpu_preempt_check+0x28/0x190 [ 637.679601][T23277] ? __sb_end_write+0x101/0x1d0 [ 637.684480][T23277] do_sys_open+0xc3/0x140 [ 637.689268][T23277] ? filp_open+0x70/0x70 [ 637.693768][T23277] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 637.699775][T23277] ? do_syscall_64+0x21/0x7d0 [ 637.704484][T23277] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 637.710489][T23277] do_syscall_64+0xf6/0x7d0 [ 637.715205][T23277] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 637.721133][T23277] RIP: 0033:0x45ca59 [ 637.725046][T23277] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 637.744665][T23277] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 637.753657][T23277] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 637.761739][T23277] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 637.769721][T23277] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 637.777709][T23277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 637.785695][T23277] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 637.841026][ T3355] usb 4-1: USB disconnect, device number 19 22:31:27 executing program 3 (fault-call:4 fault-nth:15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:27 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x40, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x56dc0100, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d61637365630000040002800a0005003c0000000000e400"], 0x40}}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0x0, @pix={0x0, 0x1f}}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x2, 0x3, 0x5, &(0x7f0000000140)="e9ca3eb995"}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xfffffff0}, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwrite64(r3, &(0x7f0000000340)="001f095661a657e12f8b2bc15c0da93c4ce3b53d97ad8fea74d9a59520c59cd1064edbecf9bdc27a9320bee68882c8d245ac280fe659f90f483b5fd13e0c0cec520e38b7074083a8580d87fcdad0e086224b339eaa6b6347fe665bdf910ba073b0e0a4d263ada267e2c7ed47bc65b2b8bd2761be50dd109b57c2ce27c63361b981", 0x3, 0x5) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x109000) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000000)={0x2, 0x200, 0x81}) 22:31:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x4000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:27 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, 0x0, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x5}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x70, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xdd, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xb6, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xb, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffff, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x48884) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r6 = dup(r2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r6, r7, 0x0, 0x8000fffffffe) 22:31:27 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 638.461791][T23356] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x5000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 638.515048][T23356] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 638.564290][T23358] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 638.580497][T23365] Unknown ioctl 4713 [ 638.598867][T23358] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x6000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 638.638180][T23359] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 638.653851][ T28] audit: type=1804 audit(1593037887.616:1118): pid=23373 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/368/bus" dev="sda1" ino=15972 res=1 22:31:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x8000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 638.856161][T22180] usb 4-1: new high-speed USB device number 20 using dummy_hcd 22:31:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x9000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 639.104761][T22180] usb 4-1: Using ep0 maxpacket: 8 22:31:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xa000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 639.144618][T23368] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 639.188870][T23368] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 639.227201][T23358] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 639.254958][T22180] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 639.263801][T22180] usb 4-1: config 0 has no interface number 0 [ 639.274274][T23358] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:28 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 639.301855][ T28] audit: type=1804 audit(1593037888.270:1119): pid=23373 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/368/bus" dev="sda1" ino=15972 res=1 [ 639.330054][T23392] Unknown ioctl 4713 [ 639.353765][T22180] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 639.396511][T23390] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 639.409039][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 639.469952][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 639.501868][T23400] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 639.518624][T22180] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 639.522123][T23400] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 639.546981][T22180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.584414][T22180] usb 4-1: config 0 descriptor?? [ 639.633567][T23367] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 639.641028][T23367] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 639.909712][T23363] FAULT_INJECTION: forcing a failure. [ 639.909712][T23363] name failslab, interval 1, probability 0, space 0, times 0 [ 639.934934][T23363] CPU: 0 PID: 23363 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 639.943546][T23363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.953747][T23363] Call Trace: [ 639.957064][T23363] dump_stack+0x188/0x20d [ 639.961431][T23363] should_fail.cold+0x5/0xa [ 639.965978][T23363] ? fault_create_debugfs_attr+0x140/0x140 [ 639.971846][T23363] should_failslab+0x5/0xf [ 639.976281][T23363] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 639.981682][T23363] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 639.987268][T23363] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 639.993310][T23363] ? snd_hrtimer_callback+0x3d0/0x3d0 [ 639.998875][T23363] snd_hrtimer_open+0x41/0x110 [ 640.003672][T23363] ? snd_hrtimer_callback+0x3d0/0x3d0 [ 640.009077][T23363] snd_timer_open+0xb20/0x1030 [ 640.013874][T23363] ? snd_timer_close_locked+0xba0/0xba0 [ 640.022857][T23363] ? memcpy+0x39/0x60 [ 640.026879][T23363] ? kstrdup+0x56/0x70 [ 640.030984][T23363] snd_seq_timer_open+0x259/0x530 [ 640.036477][T23363] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 640.041878][T23363] ? mark_held_locks+0x9f/0xe0 [ 640.046668][T23363] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 640.052500][T23363] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 640.058942][T23363] queue_use+0xe6/0x250 [ 640.063136][T23363] snd_seq_queue_alloc+0x2c6/0x4d0 [ 640.068283][T23363] snd_seq_ioctl_create_queue+0xab/0x320 [ 640.074051][T23363] ? async_call_lookup_ports+0x10/0x10 [ 640.079644][T23363] snd_seq_kernel_client_ctl+0xeb/0x130 [ 640.085225][T23363] alloc_seq_queue.isra.0+0xf9/0x1a0 [ 640.090540][T23363] ? delete_port+0xc0/0xc0 [ 640.094994][T23363] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 640.100565][T23363] ? find_held_lock+0x2d/0x110 [ 640.105356][T23363] snd_seq_oss_open+0x2fe/0x980 [ 640.110247][T23363] odev_open+0x6c/0x90 [ 640.114344][T23363] ? odev_release+0x70/0x70 [ 640.118871][T23363] soundcore_open+0x446/0x600 [ 640.123574][T23363] ? sound_devnode+0xf0/0xf0 [ 640.128308][T23363] chrdev_open+0x219/0x5c0 [ 640.132779][T23363] ? cdev_put.part.0+0x50/0x50 [ 640.137646][T23363] ? security_file_open+0x84/0x410 [ 640.142929][T23363] do_dentry_open+0x546/0x1340 [ 640.147912][T23363] ? cdev_put.part.0+0x50/0x50 [ 640.152715][T23363] ? security_inode_permission+0xc4/0xf0 [ 640.158376][T23363] ? chown_common+0x550/0x550 [ 640.163327][T23363] ? inode_permission+0xab/0x500 [ 640.168432][T23363] path_openat+0x1e59/0x27d0 [ 640.173487][T23363] ? path_lookupat.isra.0+0x530/0x530 [ 640.179407][T23363] ? lock_acquire+0x1f2/0x8f0 [ 640.184080][T23363] do_filp_open+0x192/0x260 [ 640.188567][T23363] ? may_open_dev+0xf0/0xf0 [ 640.193280][T23363] ? do_raw_spin_lock+0x129/0x2e0 [ 640.198383][T23363] ? _raw_spin_unlock+0x24/0x40 [ 640.203249][T23363] ? __alloc_fd+0x46d/0x600 [ 640.207878][T23363] do_sys_openat2+0x585/0x7d0 [ 640.212569][T23363] ? file_open_root+0x400/0x400 [ 640.217549][T23363] ? __mutex_unlock_slowpath+0xe2/0x660 [ 640.223116][T23363] ? wait_for_completion+0x270/0x270 [ 640.228652][T23363] ? __this_cpu_preempt_check+0x28/0x190 [ 640.234501][T23363] ? __sb_end_write+0x101/0x1d0 [ 640.239593][T23363] do_sys_open+0xc3/0x140 [ 640.244068][T23363] ? filp_open+0x70/0x70 [ 640.248698][T23363] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 640.254684][T23363] ? do_syscall_64+0x21/0x7d0 [ 640.259509][T23363] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 640.265642][T23363] do_syscall_64+0xf6/0x7d0 [ 640.270177][T23363] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 640.276166][T23363] RIP: 0033:0x45ca59 [ 640.280046][T23363] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 640.301417][T23363] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 640.310053][T23363] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 640.318624][T23363] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 640.326915][T23363] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 640.335136][T23363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 640.343258][T23363] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 640.389746][ T3355] usb 4-1: USB disconnect, device number 20 22:31:29 executing program 3 (fault-call:4 fault-nth:16): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xb000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:29 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x9}) r4 = dup(r2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffffe) 22:31:29 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:29 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x18, 0x0, 0x6, {0x39}}, 0x18) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000040)=0x401) 22:31:29 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 641.010937][T23448] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xe000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 641.071877][T23448] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 641.129658][T23450] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 641.168361][T23450] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 641.179320][ T28] audit: type=1804 audit(1593037890.149:1121): pid=23460 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/369/bus" dev="sda1" ino=16375 res=1 [ 641.272074][T23456] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xf000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 641.315156][T23456] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 641.331715][ T28] audit: type=1804 audit(1593037890.149:1120): pid=23461 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366851321/syzkaller.6bjSHG/464/bus" dev="sda1" ino=15994 res=1 [ 641.410404][T23458] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 641.442581][ T12] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 641.454456][T23458] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x10000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 641.519740][T23457] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 641.575101][T23457] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:30 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:30 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xe00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x11000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 641.731133][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 641.812088][T23460] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 641.833911][ T28] audit: type=1804 audit(1593037890.823:1122): pid=23479 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/369/bus" dev="sda1" ino=16375 res=1 [ 641.881392][ T12] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 641.889621][ T12] usb 4-1: config 0 has no interface number 0 [ 641.890414][T23460] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 641.913483][ T12] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 641.928145][ T12] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 641.940795][ T12] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 641.957655][ T12] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 641.985130][T23478] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 642.014198][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.036242][ T12] usb 4-1: config 0 descriptor?? [ 642.040224][T23478] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 642.082246][T23481] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 642.096289][T23459] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 642.121430][T23459] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 642.132521][T23481] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 642.165160][T23487] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 642.189651][T23487] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 642.204476][T23485] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 642.222543][T23485] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 642.383742][T23455] FAULT_INJECTION: forcing a failure. [ 642.383742][T23455] name failslab, interval 1, probability 0, space 0, times 0 [ 642.406794][T23455] CPU: 0 PID: 23455 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 642.415174][T23455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.425501][T23455] Call Trace: [ 642.428824][T23455] dump_stack+0x188/0x20d [ 642.433275][T23455] should_fail.cold+0x5/0xa [ 642.437807][T23455] ? fault_create_debugfs_attr+0x140/0x140 [ 642.443680][T23455] should_failslab+0x5/0xf [ 642.448125][T23455] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 642.453520][T23455] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 642.459108][T23455] snd_seq_oss_readq_new+0x46/0x2d0 [ 642.464346][T23455] snd_seq_oss_open+0x4ce/0x980 [ 642.469232][T23455] odev_open+0x6c/0x90 [ 642.473313][T23455] ? odev_release+0x70/0x70 [ 642.477909][T23455] soundcore_open+0x446/0x600 [ 642.482620][T23455] ? sound_devnode+0xf0/0xf0 [ 642.487220][T23455] chrdev_open+0x219/0x5c0 [ 642.491650][T23455] ? cdev_put.part.0+0x50/0x50 [ 642.496453][T23455] ? security_file_open+0x84/0x410 [ 642.501589][T23455] do_dentry_open+0x546/0x1340 [ 642.506375][T23455] ? cdev_put.part.0+0x50/0x50 [ 642.511205][T23455] ? security_inode_permission+0xc4/0xf0 [ 642.516848][T23455] ? chown_common+0x550/0x550 [ 642.521540][T23455] ? inode_permission+0xab/0x500 [ 642.526509][T23455] path_openat+0x1e59/0x27d0 [ 642.531130][T23455] ? path_lookupat.isra.0+0x530/0x530 [ 642.536534][T23455] ? lock_acquire+0x1f2/0x8f0 [ 642.541285][T23455] do_filp_open+0x192/0x260 [ 642.545820][T23455] ? may_open_dev+0xf0/0xf0 [ 642.550354][T23455] ? do_raw_spin_lock+0x129/0x2e0 [ 642.555452][T23455] ? _raw_spin_unlock+0x24/0x40 [ 642.560739][T23455] ? __alloc_fd+0x46d/0x600 [ 642.565284][T23455] do_sys_openat2+0x585/0x7d0 [ 642.569991][T23455] ? file_open_root+0x400/0x400 [ 642.574864][T23455] ? __mutex_unlock_slowpath+0xe2/0x660 [ 642.580447][T23455] ? wait_for_completion+0x270/0x270 [ 642.585745][T23455] ? __this_cpu_preempt_check+0x28/0x190 [ 642.591395][T23455] ? __sb_end_write+0x101/0x1d0 [ 642.596547][T23455] do_sys_open+0xc3/0x140 [ 642.600915][T23455] ? filp_open+0x70/0x70 [ 642.605176][T23455] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 642.611172][T23455] ? do_syscall_64+0x21/0x7d0 [ 642.615862][T23455] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 642.623434][T23455] do_syscall_64+0xf6/0x7d0 [ 642.627971][T23455] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 642.633884][T23455] RIP: 0033:0x45ca59 [ 642.637805][T23455] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 642.657432][T23455] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 642.665906][T23455] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 642.673898][T23455] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 642.681888][T23455] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 642.689973][T23455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 642.698058][T23455] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 642.860267][ T12] usb 4-1: USB disconnect, device number 21 22:31:32 executing program 3 (fault-call:4 fault-nth:17): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:32 executing program 1: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000000)) 22:31:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x12000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:32 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x68, r5, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x6, @link='broadcast-link\x00'}}}, [""]}, 0x68}}, 0x40000) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:31:32 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:32 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xf00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x12060000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 643.459810][T23535] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 643.478928][T23533] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. [ 643.577043][T23535] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 643.611091][ T28] audit: type=1804 audit(1593037892.602:1123): pid=23541 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/370/bus" dev="sda1" ino=16372 res=1 [ 643.656754][T23539] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 643.680789][T23533] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. [ 643.710518][T23539] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x90}}, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000040)=0x7fffffff, &(0x7f0000000080)=0x4) 22:31:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x13000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 643.800439][T23556] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 643.836321][T23556] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:32 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x209}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 643.910522][T23542] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 643.935753][T23542] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 643.947352][ T12] usb 4-1: new high-speed USB device number 22 using dummy_hcd 22:31:33 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x60000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 644.134381][T23567] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 644.210103][T23567] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 644.222463][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 644.236866][ T28] audit: type=1804 audit(1593037893.225:1124): pid=23541 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/370/bus" dev="sda1" ino=16372 res=1 [ 644.270590][T23571] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 644.294651][T23571] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 644.369059][ T12] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 644.377117][ T12] usb 4-1: config 0 has no interface number 0 [ 644.394937][T23574] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 644.419299][T23574] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 644.431516][ T12] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 644.458818][ T12] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 644.481664][ T12] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 644.503780][ T12] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 644.526652][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.541226][ T12] usb 4-1: config 0 descriptor?? [ 644.568343][T23552] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 644.576356][T23552] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 644.844503][T23546] FAULT_INJECTION: forcing a failure. [ 644.844503][T23546] name failslab, interval 1, probability 0, space 0, times 0 [ 644.901058][T23546] CPU: 0 PID: 23546 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 644.909604][T23546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 644.920382][T23546] Call Trace: [ 644.923789][T23546] dump_stack+0x188/0x20d [ 644.928151][T23546] should_fail.cold+0x5/0xa [ 644.933637][T23546] ? fault_create_debugfs_attr+0x140/0x140 [ 644.939478][T23546] should_failslab+0x5/0xf [ 644.944084][T23546] __kmalloc+0x2d9/0x7a0 [ 644.948369][T23546] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 644.953936][T23546] ? snd_seq_oss_readq_new+0x94/0x2d0 [ 644.959856][T23546] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 644.965522][T23546] snd_seq_oss_readq_new+0x94/0x2d0 [ 644.970745][T23546] snd_seq_oss_open+0x4ce/0x980 [ 644.975856][T23546] odev_open+0x6c/0x90 [ 644.979959][T23546] ? odev_release+0x70/0x70 [ 644.984509][T23546] soundcore_open+0x446/0x600 [ 644.989249][T23546] ? sound_devnode+0xf0/0xf0 [ 644.993856][T23546] chrdev_open+0x219/0x5c0 [ 644.998293][T23546] ? cdev_put.part.0+0x50/0x50 [ 645.003163][T23546] ? security_file_open+0x84/0x410 [ 645.008296][T23546] do_dentry_open+0x546/0x1340 [ 645.013086][T23546] ? cdev_put.part.0+0x50/0x50 [ 645.017872][T23546] ? security_inode_permission+0xc4/0xf0 [ 645.023788][T23546] ? chown_common+0x550/0x550 [ 645.028481][T23546] ? inode_permission+0xab/0x500 [ 645.033444][T23546] path_openat+0x1e59/0x27d0 [ 645.038068][T23546] ? path_lookupat.isra.0+0x530/0x530 [ 645.043469][T23546] ? lock_acquire+0x1f2/0x8f0 [ 645.048296][T23546] do_filp_open+0x192/0x260 [ 645.052845][T23546] ? may_open_dev+0xf0/0xf0 [ 645.057413][T23546] ? do_raw_spin_lock+0x129/0x2e0 [ 645.062476][T23546] ? _raw_spin_unlock+0x24/0x40 [ 645.067457][T23546] ? __alloc_fd+0x46d/0x600 [ 645.072010][T23546] do_sys_openat2+0x585/0x7d0 [ 645.076896][T23546] ? file_open_root+0x400/0x400 [ 645.081767][T23546] ? __mutex_unlock_slowpath+0xe2/0x660 [ 645.087306][T23546] ? wait_for_completion+0x270/0x270 [ 645.092584][T23546] ? __this_cpu_preempt_check+0x28/0x190 [ 645.098305][T23546] ? __sb_end_write+0x101/0x1d0 [ 645.103233][T23546] do_sys_open+0xc3/0x140 [ 645.107636][T23546] ? filp_open+0x70/0x70 [ 645.111874][T23546] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 645.117843][T23546] ? do_syscall_64+0x21/0x7d0 [ 645.123657][T23546] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 645.131033][T23546] do_syscall_64+0xf6/0x7d0 [ 645.136202][T23546] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 645.142458][T23546] RIP: 0033:0x45ca59 [ 645.146546][T23546] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 645.171485][T23546] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 645.181656][T23546] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 645.189619][T23546] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 645.198541][T23546] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 645.206857][T23546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 645.214995][T23546] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 645.240490][ T12] usb 4-1: USB disconnect, device number 22 22:31:34 executing program 3 (fault-call:4 fault-nth:18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:34 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) write$binfmt_elf32(r2, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x0, 0xa6, 0x2, 0x75b173d7, 0x3, 0x3e, 0x4, 0xa3, 0x38, 0xf8, 0x821, 0x4, 0x20, 0x1, 0x200, 0x1}, [{0x2, 0x5, 0x6, 0x8, 0x6, 0x9, 0x8000}, {0x5, 0x1, 0x3ff, 0x7, 0x3, 0x5, 0xcc4b, 0xf50}], "9434e9dd64aa48e88d21e42331ff7a16f24c95dcd89de3318dad33a009092f12e8f7b70f4b10add3d276eb61be10de7994404cba1b8c9bd988899a347c1f3af45f59d88392dd364f0a3955f7543f6d8c0130c49f5a1790", [[], [], [], [], [], []]}, 0x6cf) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:31:34 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x9effffff}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:34 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1440c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474969dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a11975ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48886ca000031cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r0) socket(0x11, 0x800000003, 0x8) bind(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000ffdbdf2501000000080005001f04000008000500070000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4841) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x50, r3, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xbdb}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1c}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xb1c}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000000) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000240)="033f601fca", 0x5, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f0000000340)=0x967f, 0x8) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r1, r5}, 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={'sm3\x00'}}) 22:31:34 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xca000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 645.829237][T23621] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 645.919369][T23621] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 645.954302][ T28] audit: type=1804 audit(1593037894.953:1125): pid=23630 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/371/bus" dev="sda1" ino=16009 res=1 22:31:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xf0ffffff}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 646.037956][T23624] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 646.075803][T23624] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 646.134717][T23637] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:35 executing program 1: unshare(0x8000100) r0 = fanotify_init(0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fanotify_mark(r0, 0x1, 0x20, r1, 0x0) r2 = socket(0x10, 0x803, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x8, 0x0, 0x0, @tick=0x6, {}, {0x0, 0x2}, @quote={{0x87, 0x7f}, 0xbc8f}}], 0x1c) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000140)) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) dup(r2) [ 646.178653][T23637] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xfffff000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 646.258861][ T2484] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 646.276583][T23629] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:35 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 646.333871][T23629] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xffffff7f}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 646.506154][T23654] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 646.528763][ T2484] usb 4-1: Using ep0 maxpacket: 8 [ 646.552832][T23654] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 646.592147][T23660] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 646.619651][T23660] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 646.654595][ T28] audit: type=1804 audit(1593037895.656:1126): pid=23662 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/371/bus" dev="sda1" ino=16009 res=1 [ 646.687909][ T2484] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 646.724977][ T2484] usb 4-1: config 0 has no interface number 0 [ 646.741849][ T2484] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 646.759958][ T2484] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 646.786516][ T2484] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 646.833444][ T2484] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 646.866577][ T2484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.890465][ T2484] usb 4-1: config 0 descriptor?? [ 646.917365][T23632] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 646.925035][T23632] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 647.160762][T23628] FAULT_INJECTION: forcing a failure. [ 647.160762][T23628] name failslab, interval 1, probability 0, space 0, times 0 [ 647.244731][T23628] CPU: 1 PID: 23628 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 647.255025][T23628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 647.265130][T23628] Call Trace: [ 647.268482][T23628] dump_stack+0x188/0x20d [ 647.272837][T23628] should_fail.cold+0x5/0xa [ 647.277474][T23628] ? fault_create_debugfs_attr+0x140/0x140 [ 647.283334][T23628] should_failslab+0x5/0xf [ 647.287775][T23628] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 647.293265][T23628] ? mark_held_locks+0x9f/0xe0 [ 647.298067][T23628] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 647.304128][T23628] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 647.310141][T23628] snd_seq_port_connect+0x5d/0x510 [ 647.315275][T23628] ? _raw_read_unlock+0x24/0x40 [ 647.320147][T23628] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 647.325651][T23628] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 647.331667][T23628] snd_seq_kernel_client_ctl+0xeb/0x130 [ 647.338381][T23628] snd_seq_oss_midi_open+0x50a/0x670 [ 647.343685][T23628] ? snd_seq_oss_midi_setup+0x50/0x50 [ 647.349165][T23628] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 647.355006][T23628] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 647.360931][T23628] ? __raw_spin_lock_init+0x34/0x100 [ 647.366244][T23628] snd_seq_oss_open+0x7fa/0x980 [ 647.371117][T23628] odev_open+0x6c/0x90 [ 647.375206][T23628] ? odev_release+0x70/0x70 [ 647.379732][T23628] soundcore_open+0x446/0x600 [ 647.384431][T23628] ? sound_devnode+0xf0/0xf0 [ 647.389041][T23628] chrdev_open+0x219/0x5c0 [ 647.393478][T23628] ? cdev_put.part.0+0x50/0x50 [ 647.398888][T23628] ? security_file_open+0x84/0x410 [ 647.404034][T23628] do_dentry_open+0x546/0x1340 [ 647.408844][T23628] ? cdev_put.part.0+0x50/0x50 [ 647.413671][T23628] ? security_inode_permission+0xc4/0xf0 [ 647.419332][T23628] ? chown_common+0x550/0x550 [ 647.424035][T23628] ? inode_permission+0xab/0x500 [ 647.429577][T23628] path_openat+0x1e59/0x27d0 [ 647.434480][T23628] ? path_lookupat.isra.0+0x530/0x530 [ 647.439869][T23628] do_filp_open+0x192/0x260 [ 647.444699][T23628] ? may_open_dev+0xf0/0xf0 [ 647.449207][T23628] ? do_raw_spin_lock+0x129/0x2e0 [ 647.454245][T23628] ? _raw_spin_unlock+0x24/0x40 [ 647.459096][T23628] ? __alloc_fd+0x46d/0x600 [ 647.463648][T23628] do_sys_openat2+0x585/0x7d0 [ 647.468331][T23628] ? file_open_root+0x400/0x400 [ 647.473320][T23628] ? __mutex_unlock_slowpath+0xe2/0x660 [ 647.479317][T23628] ? wait_for_completion+0x270/0x270 [ 647.484792][T23628] ? __this_cpu_preempt_check+0x28/0x190 [ 647.490432][T23628] ? __sb_end_write+0x101/0x1d0 [ 647.495303][T23628] do_sys_open+0xc3/0x140 [ 647.499654][T23628] ? filp_open+0x70/0x70 [ 647.503891][T23628] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 647.510348][T23628] ? do_syscall_64+0x21/0x7d0 [ 647.515385][T23628] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 647.521380][T23628] do_syscall_64+0xf6/0x7d0 [ 647.526252][T23628] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 647.532289][T23628] RIP: 0033:0x45ca59 [ 647.536198][T23628] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 647.557120][T23628] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 647.565633][T23628] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 647.574453][T23628] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 647.583112][T23628] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 647.592839][T23628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 647.601260][T23628] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 647.634546][ T2484] usb 4-1: USB disconnect, device number 23 22:31:37 executing program 3 (fault-call:4 fault-nth:19): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:37 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xffffff9e}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:37 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:37 executing program 5: syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x3b) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="c07a34d70ab9438b14ec516e6b0c2ba7cd", @ANYRES64, @ANYRES32, @ANYRES64, @ANYRESOCT, @ANYRES16, @ANYRES16], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(0xffffffffffffffff, r0, &(0x7f0000001280), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = dup(r2) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000001240)=0x1, 0x8) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000240)=""/4096) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendfile(r3, r5, 0x0, 0x8000fffffffe) 22:31:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xfffffff0}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 648.242351][T23710] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 648.267349][T23710] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 648.314772][T23714] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 648.321102][ T28] audit: type=1804 audit(1593037897.324:1127): pid=23713 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/372/bus" dev="sda1" ino=16032 res=1 [ 648.338058][T23714] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 648.374553][T23716] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 648.398254][ T28] audit: type=1804 audit(1593037897.394:1128): pid=23719 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/372/bus" dev="sda1" ino=16032 res=1 22:31:37 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40043, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r4, 0xb135d000) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) dup2(0xffffffffffffffff, r5) sendfile(r3, r5, 0x0, 0x8000fffffffe) 22:31:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x40030000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 648.407301][T23716] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 648.445499][ T28] audit: type=1800 audit(1593037897.455:1129): pid=23713 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16032 res=0 [ 648.525738][ T28] audit: type=1800 audit(1593037897.455:1130): pid=23719 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16032 res=0 [ 648.544330][T23714] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 648.555039][ T3355] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 648.579924][T23714] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 648.638640][ T28] audit: type=1804 audit(1593037897.615:1131): pid=23727 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/373/bus" dev="sda1" ino=16015 res=1 [ 648.661698][T23730] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 648.721965][T23730] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 648.734384][ T28] audit: type=1804 audit(1593037897.746:1132): pid=23731 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/373/bus" dev="sda1" ino=16015 res=1 [ 648.807095][ T3355] usb 4-1: Using ep0 maxpacket: 8 [ 648.927355][ T3355] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 648.935403][ T3355] usb 4-1: config 0 has no interface number 0 [ 648.953981][ T3355] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 648.974476][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 648.993947][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 649.026773][ T3355] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 649.035855][ T3355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.059840][ T3355] usb 4-1: config 0 descriptor?? [ 649.077401][T23706] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 649.084895][T23706] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 649.330361][T23706] FAULT_INJECTION: forcing a failure. [ 649.330361][T23706] name failslab, interval 1, probability 0, space 0, times 0 [ 649.381654][ T28] audit: type=1804 audit(1593037898.399:1133): pid=23730 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/373/bus" dev="sda1" ino=16015 res=1 [ 649.411266][T23706] CPU: 1 PID: 23706 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 649.419641][T23706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.429706][T23706] Call Trace: [ 649.433019][T23706] dump_stack+0x188/0x20d [ 649.437587][T23706] should_fail.cold+0x5/0xa [ 649.442132][T23706] ? fault_create_debugfs_attr+0x140/0x140 [ 649.447962][T23706] ? snd_seq_client_ioctl_unlock+0x4b/0x70 [ 649.453911][T23706] should_failslab+0x5/0xf [ 649.458348][T23706] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 649.463743][T23706] ? __raw_spin_lock_init+0x34/0x100 [ 649.469067][T23706] snd_seq_oss_timer_new+0x40/0x240 [ 649.474294][T23706] snd_seq_oss_open+0x553/0x980 [ 649.479174][T23706] odev_open+0x6c/0x90 [ 649.483267][T23706] ? odev_release+0x70/0x70 [ 649.487783][T23706] soundcore_open+0x446/0x600 [ 649.492482][T23706] ? sound_devnode+0xf0/0xf0 [ 649.497094][T23706] chrdev_open+0x219/0x5c0 [ 649.501539][T23706] ? cdev_put.part.0+0x50/0x50 [ 649.506329][T23706] ? security_file_open+0x84/0x410 [ 649.511458][T23706] do_dentry_open+0x546/0x1340 [ 649.516245][T23706] ? cdev_put.part.0+0x50/0x50 [ 649.521069][T23706] ? security_inode_permission+0xc4/0xf0 [ 649.526726][T23706] ? chown_common+0x550/0x550 [ 649.531427][T23706] ? inode_permission+0xab/0x500 [ 649.536388][T23706] path_openat+0x1e59/0x27d0 [ 649.541122][T23706] ? path_lookupat.isra.0+0x530/0x530 [ 649.546529][T23706] ? lock_acquire+0x1f2/0x8f0 [ 649.551245][T23706] do_filp_open+0x192/0x260 [ 649.555768][T23706] ? may_open_dev+0xf0/0xf0 [ 649.560297][T23706] ? do_raw_spin_lock+0x129/0x2e0 [ 649.565366][T23706] ? _raw_spin_unlock+0x24/0x40 [ 649.570242][T23706] ? __alloc_fd+0x46d/0x600 [ 649.574784][T23706] do_sys_openat2+0x585/0x7d0 [ 649.579662][T23706] ? file_open_root+0x400/0x400 [ 649.584535][T23706] ? __mutex_unlock_slowpath+0xe2/0x660 [ 649.590102][T23706] ? wait_for_completion+0x270/0x270 [ 649.595404][T23706] ? __this_cpu_preempt_check+0x28/0x190 [ 649.601059][T23706] ? __sb_end_write+0x101/0x1d0 [ 649.605942][T23706] do_sys_open+0xc3/0x140 [ 649.610302][T23706] ? filp_open+0x70/0x70 [ 649.614569][T23706] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 649.620736][T23706] ? do_syscall_64+0x21/0x7d0 [ 649.625530][T23706] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 22:31:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {}, {0x2, 0x0, @multicast1}, {}, 0x2a1}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, {}, {0x2, 0x0, @multicast2}, {}, 0xab852ebbeefbd631}) 22:31:38 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x700}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xf0ffffffffffff}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:38 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 649.631538][T23706] do_syscall_64+0xf6/0x7d0 [ 649.636067][T23706] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 649.641974][T23706] RIP: 0033:0x45ca59 [ 649.646812][T23706] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 649.666535][T23706] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 649.674972][T23706] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 649.683064][T23706] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 649.691048][T23706] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 649.699123][T23706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 649.707137][T23706] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 649.766676][T23758] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 649.798815][ T28] audit: type=1804 audit(1593037898.429:1134): pid=23752 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/373/bus" dev="sda1" ino=16015 res=1 [ 649.833445][T23758] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 649.861372][T23759] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 649.879619][T23759] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 649.907829][T23758] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 649.929397][T23758] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 649.946580][T23769] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 649.972477][T23769] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 650.017997][T23706] ALSA: seq_oss: can't alloc timer [ 650.027520][ T3355] usb 4-1: USB disconnect, device number 24 22:31:39 executing program 3 (fault-call:4 fault-nth:20): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:39 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 22:31:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r2, &(0x7f0000000b00)='cpuacct.usage_sys\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28012, r3, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b98ddc3c61ccc99a30a7d3b4731ab23a2233cfd3f66ac152", 0x18) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000100)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xfffffdef}, 0x1, 0x300}, 0x0) 22:31:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x100000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:39 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x4c00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:39 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x200000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 650.625444][T23798] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 650.655470][T23798] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 650.679650][T23802] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 650.712039][T23802] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 650.723197][ T28] audit: type=1804 audit(1593037899.735:1135): pid=23808 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/374/bus" dev="sda1" ino=16055 res=1 [ 650.758834][T23805] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:39 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x5865}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 650.776301][T23805] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 650.810300][T23802] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x300000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 650.862912][T23802] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 650.917518][ T3355] usb 4-1: new high-speed USB device number 25 using dummy_hcd 22:31:40 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x902}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x400000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 651.090148][T23822] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 651.149912][T23822] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 651.186511][ T3355] usb 4-1: Using ep0 maxpacket: 8 22:31:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x500000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 651.209697][T23826] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 651.237165][T23826] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 651.305160][T23825] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 651.307406][ T3355] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.329262][ T3355] usb 4-1: config 0 has no interface number 0 [ 651.346893][T23825] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 651.362962][ T3355] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 651.391750][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 651.436783][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 651.460333][ T3355] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 651.494431][ T3355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.534978][T23826] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 651.547697][ T3355] usb 4-1: config 0 descriptor?? [ 651.561492][T23826] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 651.576843][T23799] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 651.584182][T23799] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 651.820693][T23799] FAULT_INJECTION: forcing a failure. [ 651.820693][T23799] name failslab, interval 1, probability 0, space 0, times 0 [ 651.850873][T23799] CPU: 1 PID: 23799 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 651.859521][T23799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.870093][T23799] Call Trace: [ 651.873830][T23799] dump_stack+0x188/0x20d [ 651.878192][T23799] should_fail.cold+0x5/0xa [ 651.882694][T23799] ? fault_create_debugfs_attr+0x140/0x140 [ 651.888855][T23799] should_failslab+0x5/0xf [ 651.893283][T23799] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 651.898853][T23799] ? mark_held_locks+0x9f/0xe0 [ 651.903610][T23799] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 651.909573][T23799] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 651.915555][T23799] snd_seq_port_connect+0x5d/0x510 [ 651.920693][T23799] ? _raw_read_unlock+0x24/0x40 [ 651.925719][T23799] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 651.931355][T23799] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 651.938119][T23799] snd_seq_kernel_client_ctl+0xeb/0x130 [ 651.943853][T23799] snd_seq_oss_midi_open+0x50a/0x670 [ 651.949174][T23799] ? snd_seq_oss_midi_setup+0x50/0x50 [ 651.954535][T23799] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 651.960344][T23799] ? get_mdev+0x75/0x90 [ 651.964856][T23799] ? get_mididev.isra.0+0x76/0xa0 [ 651.969880][T23799] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 651.976398][T23799] snd_seq_oss_open+0x7fa/0x980 [ 651.981366][T23799] odev_open+0x6c/0x90 [ 651.985705][T23799] ? odev_release+0x70/0x70 [ 651.990203][T23799] soundcore_open+0x446/0x600 [ 651.995011][T23799] ? sound_devnode+0xf0/0xf0 [ 651.999720][T23799] chrdev_open+0x219/0x5c0 [ 652.004345][T23799] ? cdev_put.part.0+0x50/0x50 [ 652.009109][T23799] ? security_file_open+0x84/0x410 [ 652.014490][T23799] do_dentry_open+0x546/0x1340 [ 652.019574][T23799] ? cdev_put.part.0+0x50/0x50 [ 652.024376][T23799] ? security_inode_permission+0xc4/0xf0 [ 652.030024][T23799] ? chown_common+0x550/0x550 [ 652.035003][T23799] ? inode_permission+0xab/0x500 [ 652.040279][T23799] path_openat+0x1e59/0x27d0 [ 652.044900][T23799] ? path_lookupat.isra.0+0x530/0x530 [ 652.050287][T23799] do_filp_open+0x192/0x260 [ 652.054800][T23799] ? may_open_dev+0xf0/0xf0 [ 652.060022][T23799] ? do_raw_spin_lock+0x129/0x2e0 [ 652.065520][T23799] ? _raw_spin_unlock+0x24/0x40 [ 652.070402][T23799] ? __alloc_fd+0x46d/0x600 [ 652.075530][T23799] do_sys_openat2+0x585/0x7d0 [ 652.081445][T23799] ? file_open_root+0x400/0x400 [ 652.086328][T23799] ? __mutex_unlock_slowpath+0xe2/0x660 [ 652.092039][T23799] ? wait_for_completion+0x270/0x270 [ 652.097421][T23799] ? __this_cpu_preempt_check+0x28/0x190 [ 652.103779][T23799] ? __sb_end_write+0x101/0x1d0 [ 652.108724][T23799] do_sys_open+0xc3/0x140 [ 652.113204][T23799] ? filp_open+0x70/0x70 [ 652.117435][T23799] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 652.123744][T23799] ? do_syscall_64+0x21/0x7d0 [ 652.128418][T23799] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 652.134489][T23799] do_syscall_64+0xf6/0x7d0 [ 652.138979][T23799] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 652.144878][T23799] RIP: 0033:0x45ca59 [ 652.148870][T23799] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 652.169172][T23799] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 652.178128][T23799] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 652.186310][T23799] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 652.194280][T23799] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 652.202245][T23799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 652.210421][T23799] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 652.286652][ T3355] usb 4-1: USB disconnect, device number 25 22:31:41 executing program 3 (fault-call:4 fault-nth:21): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x600000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:41 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:41 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000080)={&(0x7f0000000040), &(0x7f0000000240)=""/205, 0xcd}) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r5, r6, 0x0, 0x8000fffffffe) 22:31:41 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7fb, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0xb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x321002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) readahead(0xffffffffffffffff, 0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r0}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x601, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000180)={0x8}) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xff000000}}], 0x4000000000000d0, 0x0) 22:31:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x800000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 652.912348][T23879] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 652.957116][T23879] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 653.013650][T23878] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 653.036252][T23888] QAT: Invalid ioctl [ 653.044006][T23878] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 653.068418][T23883] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 653.091862][ T28] kauditd_printk_skb: 1 callbacks suppressed 22:31:42 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x900000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 653.091877][ T28] audit: type=1804 audit(1593037902.125:1137): pid=23886 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/375/bus" dev="sda1" ino=16289 res=1 [ 653.121584][T23883] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:42 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 653.284785][T23898] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 653.324991][T23898] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xa00000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 653.337622][ T3358] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 653.375662][T23903] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 653.412960][T23903] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:42 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 653.473616][T23904] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 653.503965][T23904] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 653.579496][T23907] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 653.591433][ T3358] usb 4-1: Using ep0 maxpacket: 8 [ 653.612023][T23907] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 653.698348][T23912] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 653.710324][T23912] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 653.724673][ T3358] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 653.737658][ T28] audit: type=1804 audit(1593037902.778:1138): pid=23886 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/375/bus" dev="sda1" ino=16289 res=1 [ 653.772330][ T3358] usb 4-1: config 0 has no interface number 0 [ 653.781910][ T3358] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 653.798309][ T3358] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 653.824367][ T3358] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 653.854723][ T3358] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 653.874988][ T3358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.896820][ T3358] usb 4-1: config 0 descriptor?? [ 653.913226][T23912] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 653.915841][T23891] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 653.933568][T23891] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 653.942810][T23912] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 654.161311][T23885] FAULT_INJECTION: forcing a failure. [ 654.161311][T23885] name failslab, interval 1, probability 0, space 0, times 0 [ 654.174712][T23885] CPU: 0 PID: 23885 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 654.183063][T23885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.193134][T23885] Call Trace: [ 654.196488][T23885] dump_stack+0x188/0x20d [ 654.200994][T23885] should_fail.cold+0x5/0xa [ 654.205549][T23885] ? fault_create_debugfs_attr+0x140/0x140 [ 654.211400][T23885] should_failslab+0x5/0xf [ 654.215844][T23885] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 654.221252][T23885] ? mark_held_locks+0x9f/0xe0 [ 654.227001][T23885] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 654.233833][T23885] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 654.239848][T23885] snd_seq_port_connect+0x5d/0x510 [ 654.245034][T23885] ? _raw_read_unlock+0x24/0x40 [ 654.249906][T23885] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 654.255304][T23885] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 654.261227][T23885] snd_seq_kernel_client_ctl+0xeb/0x130 [ 654.266797][T23885] snd_seq_oss_midi_open+0x3ee/0x670 [ 654.272114][T23885] ? snd_seq_oss_midi_setup+0x50/0x50 [ 654.277704][T23885] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 654.283550][T23885] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 654.289625][T23885] ? __raw_spin_lock_init+0x34/0x100 [ 654.294941][T23885] snd_seq_oss_open+0x7fa/0x980 [ 654.299820][T23885] odev_open+0x6c/0x90 [ 654.303911][T23885] ? odev_release+0x70/0x70 [ 654.308436][T23885] soundcore_open+0x446/0x600 [ 654.313146][T23885] ? sound_devnode+0xf0/0xf0 [ 654.317756][T23885] chrdev_open+0x219/0x5c0 [ 654.322202][T23885] ? cdev_put.part.0+0x50/0x50 [ 654.327051][T23885] ? security_file_open+0x84/0x410 [ 654.332302][T23885] do_dentry_open+0x546/0x1340 [ 654.337208][T23885] ? cdev_put.part.0+0x50/0x50 [ 654.342010][T23885] ? security_inode_permission+0xc4/0xf0 [ 654.347749][T23885] ? chown_common+0x550/0x550 [ 654.352449][T23885] ? inode_permission+0xab/0x500 [ 654.357415][T23885] path_openat+0x1e59/0x27d0 [ 654.362054][T23885] ? path_lookupat.isra.0+0x530/0x530 [ 654.367460][T23885] ? lock_acquire+0x1f2/0x8f0 [ 654.372288][T23885] do_filp_open+0x192/0x260 [ 654.376818][T23885] ? may_open_dev+0xf0/0xf0 [ 654.381447][T23885] ? do_raw_spin_lock+0x129/0x2e0 [ 654.387869][T23885] ? _raw_spin_unlock+0x24/0x40 [ 654.392755][T23885] ? __alloc_fd+0x46d/0x600 [ 654.397446][T23885] do_sys_openat2+0x585/0x7d0 [ 654.402270][T23885] ? file_open_root+0x400/0x400 [ 654.407140][T23885] ? __mutex_unlock_slowpath+0xe2/0x660 [ 654.412766][T23885] ? wait_for_completion+0x270/0x270 [ 654.418076][T23885] ? __this_cpu_preempt_check+0x28/0x190 [ 654.423737][T23885] ? __sb_end_write+0x101/0x1d0 [ 654.428614][T23885] do_sys_open+0xc3/0x140 [ 654.432982][T23885] ? filp_open+0x70/0x70 [ 654.437250][T23885] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 654.443262][T23885] ? do_syscall_64+0x21/0x7d0 [ 654.447964][T23885] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 654.453981][T23885] do_syscall_64+0xf6/0x7d0 [ 654.458507][T23885] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 654.464421][T23885] RIP: 0033:0x45ca59 [ 654.468362][T23885] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 654.487976][T23885] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 654.496397][T23885] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 654.504416][T23885] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 654.512400][T23885] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 654.520525][T23885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 654.528512][T23885] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 654.583067][ T12] usb 4-1: USB disconnect, device number 26 22:31:44 executing program 3 (fault-call:4 fault-nth:22): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xb00000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:44 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x6800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:44 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) name_to_handle_at(r4, &(0x7f0000000040)='./bus\x00', &(0x7f0000000240)={0xad, 0x1, "a80d5790cbdd5bf78d0d9ce87335a1aeb1329cbae0ee083593b2c20282b96fb6e88407867e4a6550c07717bd3d8b8ed7eb98e956de6f0dec516fc3b358d258488911eebc4dac65e56f4d55c962d030f96b66aab8861caf39bdae22c3264663fff6b0ddd4500c075cd5e53af2a1d48e0bf46ed82802c05268881ea7c2af6d43b4b37f3b1af21a699c74ce4876d4fbb94bc006d0e99134263837e4b2b318f97e7cb38533e116"}, &(0x7f0000000080), 0x400) r5 = dup(r2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1d) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r5, r6, 0x0, 0x8000fffffffe) 22:31:44 executing program 1: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000009058103ff320000000904010010020d00000904010102020d000009058202000000000009"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="0f01c2f4baf80c66b86ce0468d66efbafc0cec66b95509000066b85700000066ba000000000f30f00fb1aa0500660f1afb0f769201000fc735b800008ed00fc7a90300", 0x43}], 0x1, 0x10, &(0x7f0000000100)=[@cstype3={0x5, 0xe}, @cr4={0x1, 0x400400}], 0x2) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 22:31:44 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 655.227210][T23959] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 655.244253][T23959] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xe00000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 655.301609][T23960] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 655.343453][T23960] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 655.373292][ T28] audit: type=1804 audit(1593037904.415:1139): pid=23971 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/376/bus" dev="sda1" ino=16383 res=1 [ 655.406559][T23969] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 655.436560][T23969] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xf00000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 655.485080][T23968] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 655.523722][T23968] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:44 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 655.577549][ T2484] usb 2-1: new low-speed USB device number 4 using dummy_hcd 22:31:44 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x6c00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 655.627477][T23919] usb 4-1: new high-speed USB device number 27 using dummy_hcd 22:31:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x1000000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 655.746341][T23982] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 655.796133][T23982] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 655.866227][T23919] usb 4-1: Using ep0 maxpacket: 8 22:31:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x1100000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 655.891665][T23989] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 655.946639][ T2484] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 655.964228][T23989] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 655.985423][ T2484] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 767, setting to 8 [ 655.986726][T23919] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 656.010217][T23919] usb 4-1: config 0 has no interface number 0 [ 656.023462][T23919] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 656.034818][ T28] audit: type=1804 audit(1593037905.068:1140): pid=23967 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/376/bus" dev="sda1" ino=16383 res=1 [ 656.037973][ T2484] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 656.063499][T23919] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 656.101117][T23919] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 656.152547][T23919] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 656.156413][ T2484] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 656.174247][T23919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.197132][T23991] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 656.208912][T23919] usb 4-1: config 0 descriptor?? [ 656.214341][T23991] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 656.226713][ T2484] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 656.241630][T23989] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 656.246188][T23970] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 656.271648][T23970] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 656.272077][T23989] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 656.289770][ T2484] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 656.513906][T23966] FAULT_INJECTION: forcing a failure. [ 656.513906][T23966] name failslab, interval 1, probability 0, space 0, times 0 [ 656.537705][T23966] CPU: 0 PID: 23966 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 656.547119][T23966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.557517][T23966] Call Trace: [ 656.560907][T23966] dump_stack+0x188/0x20d [ 656.565455][T23966] should_fail.cold+0x5/0xa [ 656.570086][T23966] ? fault_create_debugfs_attr+0x140/0x140 [ 656.576276][T23966] should_failslab+0x5/0xf [ 656.580725][T23966] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 656.586298][T23966] ? mark_held_locks+0x9f/0xe0 [ 656.591117][T23966] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 656.597419][T23966] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 656.603464][T23966] snd_seq_port_connect+0x5d/0x510 [ 656.608637][T23966] ? _raw_read_unlock+0x24/0x40 [ 656.613860][T23966] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 656.619261][T23966] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 656.625301][T23966] snd_seq_kernel_client_ctl+0xeb/0x130 [ 656.631314][T23966] snd_seq_oss_midi_open+0x50a/0x670 [ 656.637668][T23966] ? snd_seq_oss_midi_setup+0x50/0x50 [ 656.643058][T23966] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 656.648891][T23966] ? get_mdev+0x75/0x90 [ 656.653095][T23966] ? get_mididev.isra.0+0x76/0xa0 [ 656.658227][T23966] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 656.664310][T23966] snd_seq_oss_open+0x7fa/0x980 [ 656.669205][T23966] odev_open+0x6c/0x90 [ 656.673302][T23966] ? odev_release+0x70/0x70 [ 656.677820][T23966] soundcore_open+0x446/0x600 [ 656.682818][T23966] ? sound_devnode+0xf0/0xf0 [ 656.687434][T23966] chrdev_open+0x219/0x5c0 [ 656.691874][T23966] ? cdev_put.part.0+0x50/0x50 [ 656.696668][T23966] ? security_file_open+0x84/0x410 [ 656.701800][T23966] do_dentry_open+0x546/0x1340 [ 656.706593][T23966] ? cdev_put.part.0+0x50/0x50 [ 656.711396][T23966] ? security_inode_permission+0xc4/0xf0 [ 656.717048][T23966] ? chown_common+0x550/0x550 [ 656.721753][T23966] ? inode_permission+0xab/0x500 [ 656.726747][T23966] path_openat+0x1e59/0x27d0 [ 656.731393][T23966] ? path_lookupat.isra.0+0x530/0x530 [ 656.736800][T23966] do_filp_open+0x192/0x260 [ 656.741355][T23966] ? may_open_dev+0xf0/0xf0 [ 656.746042][T23966] ? do_raw_spin_lock+0x129/0x2e0 [ 656.751364][T23966] ? _raw_spin_unlock+0x24/0x40 [ 656.756228][T23966] ? __alloc_fd+0x46d/0x600 [ 656.760760][T23966] do_sys_openat2+0x585/0x7d0 [ 656.765459][T23966] ? file_open_root+0x400/0x400 [ 656.770332][T23966] ? __mutex_unlock_slowpath+0xe2/0x660 [ 656.775933][T23966] ? wait_for_completion+0x270/0x270 [ 656.781235][T23966] ? __this_cpu_preempt_check+0x28/0x190 [ 656.786891][T23966] ? __sb_end_write+0x101/0x1d0 [ 656.791775][T23966] do_sys_open+0xc3/0x140 [ 656.796128][T23966] ? filp_open+0x70/0x70 [ 656.800395][T23966] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 656.806401][T23966] ? do_syscall_64+0x21/0x7d0 [ 656.811130][T23966] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 656.817136][T23966] do_syscall_64+0xf6/0x7d0 [ 656.821660][T23966] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 656.827566][T23966] RIP: 0033:0x45ca59 [ 656.831502][T23966] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 656.851111][T23966] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 656.859544][T23966] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 656.867539][T23966] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 656.875534][T23966] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 656.883540][T23966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 656.891610][T23966] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 656.962542][ T2484] usb 2-1: string descriptor 0 read error: -22 [ 656.969055][ T2484] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 656.978363][T22180] usb 4-1: USB disconnect, device number 27 [ 656.988839][ T2484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.032867][T23964] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 657.300565][ T2484] cdc_ncm 2-1:1.0: bind() failure [ 657.309358][ T2484] cdc_ncm 2-1:1.1: bind() failure [ 657.333777][ T2484] usb 2-1: USB disconnect, device number 4 22:31:46 executing program 3 (fault-call:4 fault-nth:23): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:46 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) mount(&(0x7f0000000040)=@sr0='/dev/sr0\x00', &(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='cgroup\x00', 0x1001, &(0x7f0000000240)) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000240)={0x5c58, 0x2, [{0xc, 0x1}, {0x2, 0x1}]}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x581, 0x70bd26}, 0x20}}, 0x8040) dup2(r1, r6) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:31:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x1200000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:46 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 657.726568][T24050] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 657.752964][T24050] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 657.768076][ T28] audit: type=1804 audit(1593037906.825:1141): pid=24051 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/377/bus" dev="sda1" ino=15741 res=1 [ 657.807561][T24051] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 657.830113][T24051] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 657.853438][T24056] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 657.878007][T24056] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 657.938089][T22180] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 658.037386][ T3355] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 658.186880][T22180] usb 4-1: Using ep0 maxpacket: 8 [ 658.306601][T22180] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 658.314647][T22180] usb 4-1: config 0 has no interface number 0 [ 658.336463][T22180] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 658.356108][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 658.386089][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 658.415876][T22180] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 658.425049][T22180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.456242][T22180] usb 4-1: config 0 descriptor?? [ 658.473060][ T3355] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 658.486484][T24047] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 658.494500][T24047] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 658.511147][ T3355] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 767, setting to 8 [ 658.523924][ T3355] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 658.539024][ T3355] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 658.551389][ T3355] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 658.561850][ T28] audit: type=1804 audit(1593037907.618:1142): pid=24055 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/377/bus" dev="sda1" ino=15741 res=1 [ 658.570892][T24055] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:47 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x7400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x1206000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:47 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 658.607787][ T3355] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 22:31:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)={'syz0', "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"}, 0x1004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000001140)=0x8, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000000c0)={0x3, 0x7, 0x0, 0x0, 0xffffff97, 0x3, 0x5, 0x3f, 0x0, 0x3b, 0x8, 0x9, 0x0, 0x5, 0xffff0000, 0x9, 0x1, 0x81, 0x52, [], 0xa, 0x3}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x159, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008104e00f80ecdb4cb902020000040e000000810040fb12000100040fda1b40d819a906000500000f", 0x33fe0}], 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) [ 658.675897][ T3355] usb 2-1: string descriptor 0 read error: -71 [ 658.692493][ T3355] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 658.710680][T24055] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 658.727714][ T3355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.728867][T24047] FAULT_INJECTION: forcing a failure. [ 658.728867][T24047] name failslab, interval 1, probability 0, space 0, times 0 [ 658.759229][ T3355] usb 2-1: can't set config #1, error -71 [ 658.785972][ T3355] usb 2-1: USB disconnect, device number 5 [ 658.798880][T24087] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 658.814457][T24047] CPU: 0 PID: 24047 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 658.822834][T24047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.830572][T24087] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 658.832894][T24047] Call Trace: [ 658.832931][T24047] dump_stack+0x188/0x20d [ 658.832954][T24047] should_fail.cold+0x5/0xa [ 658.832974][T24047] ? fault_create_debugfs_attr+0x140/0x140 [ 658.832998][T24047] should_failslab+0x5/0xf [ 658.833019][T24047] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 658.871763][T24047] ? mark_held_locks+0x9f/0xe0 [ 658.876551][T24047] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 658.882413][T24047] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 658.888417][T24047] snd_seq_port_connect+0x5d/0x510 [ 658.893633][T24047] ? _raw_read_unlock+0x24/0x40 [ 658.898593][T24047] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 658.903995][T24047] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 658.909917][T24047] snd_seq_kernel_client_ctl+0xeb/0x130 [ 658.915486][T24047] snd_seq_oss_midi_open+0x3ee/0x670 [ 658.920838][T24047] ? snd_seq_oss_midi_setup+0x50/0x50 [ 658.926230][T24047] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 658.932064][T24047] ? get_mdev+0x75/0x90 [ 658.936264][T24047] ? get_mididev.isra.0+0x76/0xa0 [ 658.941311][T24047] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 658.947237][T24047] snd_seq_oss_open+0x7fa/0x980 [ 658.952114][T24047] odev_open+0x6c/0x90 [ 658.956198][T24047] ? odev_release+0x70/0x70 [ 658.960727][T24047] soundcore_open+0x446/0x600 [ 658.965452][T24047] ? sound_devnode+0xf0/0xf0 [ 658.970162][T24047] chrdev_open+0x219/0x5c0 [ 658.974696][T24047] ? cdev_put.part.0+0x50/0x50 [ 658.979512][T24047] ? security_file_open+0x84/0x410 [ 658.984652][T24047] do_dentry_open+0x546/0x1340 [ 658.989443][T24047] ? cdev_put.part.0+0x50/0x50 [ 658.994300][T24047] ? security_inode_permission+0xc4/0xf0 [ 658.999953][T24047] ? chown_common+0x550/0x550 [ 659.004658][T24047] ? inode_permission+0xab/0x500 [ 659.009736][T24047] path_openat+0x1e59/0x27d0 [ 659.014357][T24047] ? path_lookupat.isra.0+0x530/0x530 [ 659.019816][T24047] do_filp_open+0x192/0x260 [ 659.024353][T24047] ? may_open_dev+0xf0/0xf0 [ 659.028929][T24047] ? do_raw_spin_lock+0x129/0x2e0 [ 659.033988][T24047] ? _raw_spin_unlock+0x24/0x40 [ 659.038870][T24047] ? __alloc_fd+0x46d/0x600 [ 659.043417][T24047] do_sys_openat2+0x585/0x7d0 [ 659.048320][T24047] ? file_open_root+0x400/0x400 [ 659.053193][T24047] ? __mutex_unlock_slowpath+0xe2/0x660 [ 659.059085][T24047] ? wait_for_completion+0x270/0x270 [ 659.064399][T24047] ? __this_cpu_preempt_check+0x28/0x190 [ 659.070053][T24047] ? __sb_end_write+0x101/0x1d0 [ 659.074934][T24047] do_sys_open+0xc3/0x140 [ 659.079282][T24047] ? filp_open+0x70/0x70 [ 659.083575][T24047] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 659.089581][T24047] ? do_syscall_64+0x21/0x7d0 [ 659.094279][T24047] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 659.100289][T24047] do_syscall_64+0xf6/0x7d0 [ 659.104814][T24047] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 659.110762][T24047] RIP: 0033:0x45ca59 [ 659.114672][T24047] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:31:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x1300000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x6000000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x9effffff00000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 659.134415][T24047] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 659.142843][T24047] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 659.150830][T24047] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 659.158844][T24047] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 659.167065][T24047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 659.175071][T24047] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 659.211836][T24085] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:48 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x6046}, @timestamp, @sack_perm, @window={0x3, 0x3ff, 0x4}, @mss={0x2, 0x80000000}, @window={0x3, 0x3, 0x80}, @timestamp, @sack_perm], 0x8) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe) [ 659.256869][T22180] usb 4-1: USB disconnect, device number 28 [ 659.288188][T24085] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:48 executing program 3 (fault-call:4 fault-nth:24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xca00000000000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:48 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:48 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x7a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:48 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) clock_adjtime(0x5, &(0x7f0000000180)={0x0, 0x43a, 0x3108, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0x8}) r1 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0xfbc}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r3) mount$9p_virtio(&(0x7f0000000080)='syz\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x800000, &(0x7f0000000300)={'trans=virtio,', {[{@afid={'afid', 0x3d, 0xa763}}, {@version_9p2000='version=9p2000'}, {@dfltgid={'dfltgid', 0x3d, r3}}], [{@appraise_type='appraise_type=imasig'}]}}) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) [ 659.984223][T24144] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xf0ffffff00000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 660.074595][T24144] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 660.152871][T24149] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 660.204149][T24149] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xffffff7f00000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 660.261136][T24156] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 660.330424][T24156] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:49 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x6, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) dup2(0xffffffffffffffff, r5) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 660.388224][ T3358] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 660.404381][T24152] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:49 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 660.452814][T24152] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0xfffffffffffff000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:49 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x8100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 660.627099][ T3358] usb 4-1: Using ep0 maxpacket: 8 [ 660.698290][T24168] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 660.747544][ T3358] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 660.771566][ T3358] usb 4-1: config 0 has no interface number 0 22:31:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x2}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 660.821408][T24168] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 660.823192][ T3358] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 660.849169][ T28] audit: type=1804 audit(1593037909.917:1143): pid=24169 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/379/bus" dev="sda1" ino=16060 res=1 [ 660.908393][T24169] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 660.933087][T24169] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 660.935765][ T3358] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 660.974926][T24180] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 661.011256][T24180] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 661.037355][T24182] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 661.045463][ T3358] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 661.052987][T24182] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 661.097336][T24180] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 661.107736][ T3358] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 661.121017][T24180] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 661.139118][ T28] audit: type=1804 audit(1593037910.208:1144): pid=24178 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/379/bus" dev="sda1" ino=16060 res=1 [ 661.163650][ T3358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.187932][ T3358] usb 4-1: config 0 descriptor?? [ 661.203707][T24178] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 661.216457][T24153] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 661.230201][T24153] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 661.254732][T24178] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 661.469753][T24151] FAULT_INJECTION: forcing a failure. [ 661.469753][T24151] name failslab, interval 1, probability 0, space 0, times 0 [ 661.489521][T24151] CPU: 0 PID: 24151 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 661.497905][T24151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.508198][T24151] Call Trace: [ 661.511511][T24151] dump_stack+0x188/0x20d [ 661.515885][T24151] should_fail.cold+0x5/0xa [ 661.520877][T24151] ? fault_create_debugfs_attr+0x140/0x140 [ 661.526987][T24151] should_failslab+0x5/0xf [ 661.531701][T24151] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 661.538103][T24151] ? mark_held_locks+0x9f/0xe0 [ 661.544040][T24151] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 661.551375][T24151] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 661.557949][T24151] snd_seq_port_connect+0x5d/0x510 [ 661.563097][T24151] ? _raw_read_unlock+0x24/0x40 [ 661.567995][T24151] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 661.573683][T24151] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 661.579602][T24151] snd_seq_kernel_client_ctl+0xeb/0x130 [ 661.585181][T24151] snd_seq_oss_midi_open+0x50a/0x670 [ 661.590534][T24151] ? snd_seq_oss_midi_setup+0x50/0x50 [ 661.595927][T24151] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 661.601783][T24151] ? get_mdev+0x75/0x90 [ 661.606148][T24151] ? get_mididev.isra.0+0x76/0xa0 [ 661.611209][T24151] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 661.617234][T24151] snd_seq_oss_open+0x7fa/0x980 [ 661.622134][T24151] odev_open+0x6c/0x90 [ 661.626224][T24151] ? odev_release+0x70/0x70 [ 661.630764][T24151] soundcore_open+0x446/0x600 [ 661.635474][T24151] ? sound_devnode+0xf0/0xf0 [ 661.640280][T24151] chrdev_open+0x219/0x5c0 [ 661.644719][T24151] ? cdev_put.part.0+0x50/0x50 [ 661.649680][T24151] ? security_file_open+0x84/0x410 [ 661.654816][T24151] do_dentry_open+0x546/0x1340 [ 661.659684][T24151] ? cdev_put.part.0+0x50/0x50 [ 661.664475][T24151] ? security_inode_permission+0xc4/0xf0 [ 661.670133][T24151] ? chown_common+0x550/0x550 [ 661.674832][T24151] ? inode_permission+0xab/0x500 [ 661.680067][T24151] path_openat+0x1e59/0x27d0 [ 661.684883][T24151] ? path_lookupat.isra.0+0x530/0x530 [ 661.690286][T24151] ? lock_acquire+0x1f2/0x8f0 [ 661.695000][T24151] do_filp_open+0x192/0x260 [ 661.699786][T24151] ? may_open_dev+0xf0/0xf0 [ 661.704377][T24151] ? do_raw_spin_lock+0x129/0x2e0 [ 661.709575][T24151] ? _raw_spin_unlock+0x24/0x40 [ 661.714623][T24151] ? __alloc_fd+0x46d/0x600 [ 661.719510][T24151] do_sys_openat2+0x585/0x7d0 [ 661.724620][T24151] ? file_open_root+0x400/0x400 [ 661.730135][T24151] ? __mutex_unlock_slowpath+0xe2/0x660 [ 661.735827][T24151] ? wait_for_completion+0x270/0x270 [ 661.741138][T24151] ? __this_cpu_preempt_check+0x28/0x190 [ 661.746800][T24151] ? __sb_end_write+0x101/0x1d0 [ 661.751706][T24151] do_sys_open+0xc3/0x140 [ 661.756450][T24151] ? filp_open+0x70/0x70 [ 661.761018][T24151] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 661.767064][T24151] ? do_syscall_64+0x21/0x7d0 [ 661.771845][T24151] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 661.778123][T24151] do_syscall_64+0xf6/0x7d0 [ 661.782656][T24151] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 661.788562][T24151] RIP: 0033:0x45ca59 [ 661.792474][T24151] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 661.814067][T24151] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 661.822520][T24151] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 661.830765][T24151] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 661.838926][T24151] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 661.846914][T24151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 661.855179][T24151] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 662.118299][ T2484] usb 4-1: USB disconnect, device number 29 22:31:51 executing program 3 (fault-call:4 fault-nth:25): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x2}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x68, r2, 0x30e, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x48084) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigaction(0x0, &(0x7f0000000240)={&(0x7f0000000040)="8fa8789e1889c4a3f55cb95874536304c401716895a4000000c441fa2c2b460f01da45dacc0faaf2470f38f08cebd5c500000fa31c4dfcffffff36f2a5", 0x0, 0x0}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003080), 0x0, 0x10) 22:31:51 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5865}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x3}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:51 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:31:51 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x9102}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 662.791959][T24233] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x4}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 662.838045][T24233] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 662.868780][T24235] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 662.902292][T24235] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 662.913754][ T28] audit: type=1804 audit(1593037911.975:1145): pid=24242 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/380/bus" dev="sda1" ino=16383 res=1 [ 662.957164][T24243] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 662.991209][T24243] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:52 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 663.026496][T24241] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 663.050434][T24241] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x5}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:52 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xf000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 663.247139][ T2484] usb 4-1: new high-speed USB device number 30 using dummy_hcd 22:31:52 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000030000060003003f000000060011004e24690005001600020000000500170000000000050008000000000008000600ac141419"], 0xd4}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0xfff, 0x6, 0xb1e6, 0x8, 0x1a, "caebddd25ecaafd3209ab34ba2dee28660c2e6"}) [ 663.323475][T24262] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x6}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 663.392260][T24262] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 663.437729][T24266] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 663.464050][T24266] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 663.495701][T24268] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 663.507952][ T2484] usb 4-1: Using ep0 maxpacket: 8 [ 663.529004][T24268] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 663.560107][T24271] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 663.626520][ T2484] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 663.635427][ T2484] usb 4-1: config 0 has no interface number 0 [ 663.653063][ T28] audit: type=1804 audit(1593037912.728:1146): pid=24276 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/380/bus" dev="sda1" ino=16383 res=1 [ 663.711320][ T2484] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 663.749653][ T28] audit: type=1800 audit(1593037912.728:1147): pid=24276 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16383 res=0 [ 663.765231][ T2484] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 663.810362][ T2484] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 663.836268][ T2484] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 663.856785][ T2484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.882836][ T2484] usb 4-1: config 0 descriptor?? [ 663.916118][T24246] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 663.923465][T24246] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 664.109365][T24266] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 664.131084][T24266] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 664.161380][T24244] FAULT_INJECTION: forcing a failure. [ 664.161380][T24244] name failslab, interval 1, probability 0, space 0, times 0 [ 664.207428][T24244] CPU: 1 PID: 24244 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 664.215801][T24244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.225894][T24244] Call Trace: [ 664.229214][T24244] dump_stack+0x188/0x20d [ 664.234016][T24244] should_fail.cold+0x5/0xa [ 664.238935][T24244] ? fault_create_debugfs_attr+0x140/0x140 [ 664.244897][T24244] should_failslab+0x5/0xf [ 664.249335][T24244] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 664.254733][T24244] ? mark_held_locks+0x9f/0xe0 [ 664.259795][T24244] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 664.265631][T24244] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 664.271644][T24244] snd_seq_port_connect+0x5d/0x510 [ 664.276841][T24244] ? _raw_read_unlock+0x24/0x40 [ 664.281727][T24244] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 664.287302][T24244] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 664.293229][T24244] snd_seq_kernel_client_ctl+0xeb/0x130 [ 664.299020][T24244] snd_seq_oss_midi_open+0x3ee/0x670 [ 664.305298][T24244] ? snd_seq_oss_midi_setup+0x50/0x50 [ 664.310700][T24244] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 664.316538][T24244] ? get_mdev+0x75/0x90 [ 664.320719][T24244] ? get_mididev.isra.0+0x76/0xa0 [ 664.326988][T24244] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 664.332909][T24244] snd_seq_oss_open+0x7fa/0x980 [ 664.337825][T24244] odev_open+0x6c/0x90 [ 664.341916][T24244] ? odev_release+0x70/0x70 [ 664.346447][T24244] soundcore_open+0x446/0x600 [ 664.351206][T24244] ? sound_devnode+0xf0/0xf0 [ 664.355820][T24244] chrdev_open+0x219/0x5c0 [ 664.360263][T24244] ? cdev_put.part.0+0x50/0x50 [ 664.365056][T24244] ? security_file_open+0x84/0x410 [ 664.370196][T24244] do_dentry_open+0x546/0x1340 [ 664.374995][T24244] ? cdev_put.part.0+0x50/0x50 [ 664.379888][T24244] ? security_inode_permission+0xc4/0xf0 [ 664.385547][T24244] ? chown_common+0x550/0x550 [ 664.390252][T24244] ? inode_permission+0xab/0x500 [ 664.395301][T24244] path_openat+0x1e59/0x27d0 [ 664.399930][T24244] ? path_lookupat.isra.0+0x530/0x530 [ 664.405384][T24244] do_filp_open+0x192/0x260 [ 664.409893][T24244] ? may_open_dev+0xf0/0xf0 [ 664.414515][T24244] ? do_raw_spin_lock+0x129/0x2e0 [ 664.419583][T24244] ? _raw_spin_unlock+0x24/0x40 [ 664.424592][T24244] ? __alloc_fd+0x46d/0x600 [ 664.429137][T24244] do_sys_openat2+0x585/0x7d0 [ 664.433846][T24244] ? file_open_root+0x400/0x400 [ 664.438725][T24244] ? __mutex_unlock_slowpath+0xe2/0x660 [ 664.444308][T24244] ? wait_for_completion+0x270/0x270 [ 664.449704][T24244] ? __this_cpu_preempt_check+0x28/0x190 [ 664.455375][T24244] ? __sb_end_write+0x101/0x1d0 [ 664.460344][T24244] do_sys_open+0xc3/0x140 [ 664.464703][T24244] ? filp_open+0x70/0x70 [ 664.468981][T24244] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 664.475121][T24244] ? do_syscall_64+0x21/0x7d0 [ 664.479932][T24244] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 664.486098][T24244] do_syscall_64+0xf6/0x7d0 [ 664.490635][T24244] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 664.496542][T24244] RIP: 0033:0x45ca59 [ 664.500581][T24244] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 664.520356][T24244] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 664.528963][T24244] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 664.536955][T24244] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 664.544944][T24244] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 664.553083][T24244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 664.561180][T24244] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 664.814461][ T12] usb 4-1: USB disconnect, device number 30 22:31:54 executing program 3 (fault-call:4 fault-nth:26): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x8}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:54 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:54 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:54 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0xff, 0x8) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:31:54 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./bus\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000180)={{0x2}, {0xbb, 0x4}, 0x80000001}) r2 = semget$private(0x0, 0x2, 0x0) semop(r2, &(0x7f00000001c0)=[{0x0, 0xfffc}], 0x1) semop(r2, &(0x7f00000002c0)=[{0x0, 0xffff}, {0x0, 0x367}], 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000004c0)=[0x2]) semctl$SEM_INFO(r2, 0x4, 0x13, &(0x7f0000000200)=""/75) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x100) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000300)) 22:31:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x9}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 665.497619][T24334] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 665.519722][ T28] audit: type=1804 audit(1593037914.594:1148): pid=24332 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/381/bus" dev="sda1" ino=16383 res=1 22:31:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xa}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 665.558748][T24334] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 665.618971][T24335] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 665.653825][T24335] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 665.698996][T24343] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 665.728041][T24343] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 665.768039][T24344] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:54 executing program 1: openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x100801, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f00000000c0)={0x0, 0xffffffffffff0000, 0x3, 0x81, &(0x7f0000336000/0x4000)=nil, 0x9}) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) 22:31:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xb}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:54 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 665.812992][T24344] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:55 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 665.907642][ T3355] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 665.963759][ T28] audit: type=1804 audit(1593037915.046:1149): pid=24332 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/381/bus" dev="sda1" ino=16383 res=1 [ 666.029793][T24360] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 666.055428][ T28] audit: type=1800 audit(1593037915.076:1150): pid=24354 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16383 res=0 [ 666.081493][T24360] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 666.100746][ T28] audit: type=1800 audit(1593037915.076:1151): pid=24332 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16383 res=0 [ 666.166862][ T3355] usb 4-1: Using ep0 maxpacket: 8 [ 666.187421][T24366] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 666.224597][T24366] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 666.287451][T24368] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 666.298808][ T3355] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 666.310543][ T3355] usb 4-1: config 0 has no interface number 0 [ 666.319818][T24368] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 666.331037][ T3355] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 666.344392][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 666.356198][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 666.367996][ T3355] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 666.377926][ T3355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.391307][ T3355] usb 4-1: config 0 descriptor?? [ 666.423756][T24341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 666.433475][T24341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 666.670749][T24338] FAULT_INJECTION: forcing a failure. [ 666.670749][T24338] name failslab, interval 1, probability 0, space 0, times 0 [ 666.684009][T24338] CPU: 1 PID: 24338 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 666.692358][T24338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.702426][T24338] Call Trace: [ 666.705737][T24338] dump_stack+0x188/0x20d [ 666.710108][T24338] should_fail.cold+0x5/0xa [ 666.714618][T24338] ? fault_create_debugfs_attr+0x140/0x140 [ 666.720449][T24338] should_failslab+0x5/0xf [ 666.724885][T24338] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 666.730272][T24338] ? mark_held_locks+0x9f/0xe0 [ 666.735053][T24338] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 666.740906][T24338] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 666.746904][T24338] snd_seq_port_connect+0x5d/0x510 [ 666.752022][T24338] ? _raw_read_unlock+0x24/0x40 [ 666.756885][T24338] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 666.762272][T24338] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 666.768193][T24338] snd_seq_kernel_client_ctl+0xeb/0x130 [ 666.773765][T24338] snd_seq_oss_midi_open+0x50a/0x670 [ 666.779268][T24338] ? snd_seq_oss_midi_setup+0x50/0x50 [ 666.784661][T24338] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 666.790505][T24338] ? get_mdev+0x75/0x90 [ 666.794773][T24338] ? get_mididev.isra.0+0x76/0xa0 [ 666.799830][T24338] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 666.805760][T24338] snd_seq_oss_open+0x7fa/0x980 [ 666.810640][T24338] odev_open+0x6c/0x90 [ 666.814723][T24338] ? odev_release+0x70/0x70 [ 666.819261][T24338] soundcore_open+0x446/0x600 [ 666.823979][T24338] ? sound_devnode+0xf0/0xf0 [ 666.828584][T24338] chrdev_open+0x219/0x5c0 [ 666.833004][T24338] ? cdev_put.part.0+0x50/0x50 [ 666.837909][T24338] ? security_file_open+0x84/0x410 [ 666.843052][T24338] do_dentry_open+0x546/0x1340 [ 666.847850][T24338] ? cdev_put.part.0+0x50/0x50 [ 666.852638][T24338] ? security_inode_permission+0xc4/0xf0 [ 666.858287][T24338] ? chown_common+0x550/0x550 [ 666.862978][T24338] ? inode_permission+0xab/0x500 [ 666.867961][T24338] path_openat+0x1e59/0x27d0 [ 666.872595][T24338] ? path_lookupat.isra.0+0x530/0x530 [ 666.878043][T24338] do_filp_open+0x192/0x260 [ 666.882561][T24338] ? may_open_dev+0xf0/0xf0 [ 666.887101][T24338] ? do_raw_spin_lock+0x129/0x2e0 [ 666.892156][T24338] ? _raw_spin_unlock+0x24/0x40 [ 666.897153][T24338] ? __alloc_fd+0x46d/0x600 [ 666.901686][T24338] do_sys_openat2+0x585/0x7d0 [ 666.906389][T24338] ? file_open_root+0x400/0x400 [ 666.911274][T24338] ? __mutex_unlock_slowpath+0xe2/0x660 [ 666.916857][T24338] ? wait_for_completion+0x270/0x270 [ 666.922159][T24338] ? __this_cpu_preempt_check+0x28/0x190 [ 666.927953][T24338] ? __sb_end_write+0x101/0x1d0 [ 666.932835][T24338] do_sys_open+0xc3/0x140 [ 666.937197][T24338] ? filp_open+0x70/0x70 [ 666.941589][T24338] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 666.947615][T24338] ? do_syscall_64+0x21/0x7d0 [ 666.952317][T24338] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 666.958328][T24338] do_syscall_64+0xf6/0x7d0 [ 666.962857][T24338] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 666.968875][T24338] RIP: 0033:0x45ca59 [ 666.972792][T24338] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 666.992409][T24338] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 667.001021][T24338] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 667.009012][T24338] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 667.017164][T24338] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 667.025159][T24338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 667.033341][T24338] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 667.067148][ T3358] usb 4-1: USB disconnect, device number 31 22:31:56 executing program 3 (fault-call:4 fault-nth:27): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xe}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:56 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x1fe, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001ff) setsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000040)="1006110c037574ca461e8660da4e42a1938180bcb0dfc75f3b11acc1e670d1aec49dc88a0ef3f0fb2403e8c4bc8dca678ce502f134b9dc7c172213b8c10aa6200327c70cb20c", 0x46) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r2, 0x200004) write$FUSE_STATFS(r2, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffffe) 22:31:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x488, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0xc00}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@dont_appraise='dont_appraise'}, {@dont_hash='dont_hash'}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0x7, 0x4) socket$packet(0x11, 0x3, 0x300) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000200)=0x43, 0x40001) 22:31:56 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:56 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 667.695259][T24413] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 667.733566][T24413] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xf}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 667.759405][ T28] audit: type=1804 audit(1593037916.853:1152): pid=24417 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/382/bus" dev="sda1" ino=16381 res=1 [ 667.789321][T24414] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 667.823913][T24414] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 667.866200][T24420] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 667.908844][T24420] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 667.959358][T24419] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:57 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 668.001129][T24419] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x10}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:57 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:57 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0xffff, 0xffffffff, 0x6, 0x401, 0x1f, "b998422009cde7298f5ab0c2d1068ffa96ee0f", 0x9, 0xff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0xd, r0}, 0x14) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f0000000040)) [ 668.169415][T22180] usb 4-1: new high-speed USB device number 32 using dummy_hcd 22:31:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x11}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 668.264745][T24438] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 668.320993][T24438] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 668.376310][T24443] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 668.415686][T24443] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 668.428057][T22180] usb 4-1: Using ep0 maxpacket: 8 [ 668.477530][T24448] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 668.518822][ T28] audit: type=1804 audit(1593037917.615:1153): pid=24453 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/382/bus" dev="sda1" ino=16381 res=1 [ 668.566347][T24448] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 668.578301][T22180] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 668.586511][T22180] usb 4-1: config 0 has no interface number 0 [ 668.626733][T22180] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 668.684579][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 668.730629][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 668.762604][T22180] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 668.774982][T22180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.797717][T24449] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 668.810182][T22180] usb 4-1: config 0 descriptor?? [ 668.837423][T24449] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 668.858651][T24426] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 668.866037][T24426] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 669.085084][T24423] FAULT_INJECTION: forcing a failure. [ 669.085084][T24423] name failslab, interval 1, probability 0, space 0, times 0 [ 669.106502][T24423] CPU: 1 PID: 24423 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 669.115407][T24423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.125580][T24423] Call Trace: [ 669.129121][T24423] dump_stack+0x188/0x20d [ 669.133488][T24423] should_fail.cold+0x5/0xa [ 669.138024][T24423] ? fault_create_debugfs_attr+0x140/0x140 [ 669.143881][T24423] should_failslab+0x5/0xf [ 669.148322][T24423] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 669.153734][T24423] ? mark_held_locks+0x9f/0xe0 [ 669.158530][T24423] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 669.164370][T24423] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 669.170389][T24423] snd_seq_port_connect+0x5d/0x510 [ 669.175529][T24423] ? _raw_read_unlock+0x24/0x40 [ 669.180406][T24423] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 669.185807][T24423] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 669.191734][T24423] snd_seq_kernel_client_ctl+0xeb/0x130 [ 669.197308][T24423] snd_seq_oss_midi_open+0x50a/0x670 [ 669.202628][T24423] ? snd_seq_oss_midi_setup+0x50/0x50 [ 669.208120][T24423] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 669.213955][T24423] ? get_mdev+0x75/0x90 [ 669.218400][T24423] ? get_mididev.isra.0+0x76/0xa0 [ 669.223474][T24423] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 669.229580][T24423] snd_seq_oss_open+0x7fa/0x980 [ 669.234584][T24423] odev_open+0x6c/0x90 [ 669.238968][T24423] ? odev_release+0x70/0x70 [ 669.244600][T24423] soundcore_open+0x446/0x600 [ 669.249457][T24423] ? sound_devnode+0xf0/0xf0 [ 669.254073][T24423] chrdev_open+0x219/0x5c0 [ 669.258694][T24423] ? cdev_put.part.0+0x50/0x50 [ 669.263662][T24423] ? security_file_open+0x84/0x410 [ 669.269245][T24423] do_dentry_open+0x546/0x1340 [ 669.274035][T24423] ? cdev_put.part.0+0x50/0x50 [ 669.282324][T24423] ? security_inode_permission+0xc4/0xf0 [ 669.288422][T24423] ? chown_common+0x550/0x550 [ 669.293585][T24423] ? inode_permission+0xab/0x500 [ 669.299043][T24423] path_openat+0x1e59/0x27d0 [ 669.304603][T24423] ? path_lookupat.isra.0+0x530/0x530 [ 669.310280][T24423] ? lock_acquire+0x1f2/0x8f0 [ 669.315424][T24423] do_filp_open+0x192/0x260 [ 669.320171][T24423] ? may_open_dev+0xf0/0xf0 [ 669.324732][T24423] ? do_raw_spin_lock+0x129/0x2e0 [ 669.330750][T24423] ? _raw_spin_unlock+0x24/0x40 [ 669.335627][T24423] ? __alloc_fd+0x46d/0x600 [ 669.340169][T24423] do_sys_openat2+0x585/0x7d0 [ 669.344867][T24423] ? file_open_root+0x400/0x400 [ 669.349831][T24423] ? __mutex_unlock_slowpath+0xe2/0x660 [ 669.355800][T24423] ? wait_for_completion+0x270/0x270 [ 669.361280][T24423] ? __this_cpu_preempt_check+0x28/0x190 [ 669.367192][T24423] ? __sb_end_write+0x101/0x1d0 [ 669.372204][T24423] do_sys_open+0xc3/0x140 [ 669.376558][T24423] ? filp_open+0x70/0x70 [ 669.381124][T24423] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 669.387393][T24423] ? do_syscall_64+0x21/0x7d0 [ 669.392089][T24423] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 669.398302][T24423] do_syscall_64+0xf6/0x7d0 [ 669.402891][T24423] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 669.409496][T24423] RIP: 0033:0x45ca59 [ 669.413599][T24423] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 669.433401][T24423] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 669.441945][T24423] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 669.450058][T24423] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 669.458049][T24423] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 669.466037][T24423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 669.474048][T24423] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 669.610827][ T17] usb 4-1: USB disconnect, device number 32 22:31:59 executing program 3 (fault-call:4 fault-nth:28): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:31:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x12}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:59 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:59 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x400842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0xfffffffffffffff5, 0x0, {{0xe98a, 0x0, 0xfffffffffffffffd, 0x100000000, 0x3f, 0x40000, 0x0, 0x6}}}, 0x64) sendfile(r1, r0, &(0x7f0000000280)=0x5, 0xf5) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000100)='./bus\x00', 0x444000, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000080)={0x8000, 0x7}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000240)=0x220048, 0x4) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:31:59 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:31:59 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0xffff, 0xffffffff, 0x6, 0x401, 0x1f, "b998422009cde7298f5ab0c2d1068ffa96ee0f", 0x9, 0xff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0xd, r0}, 0x14) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f0000000040)) 22:31:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x13}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 670.333841][T24501] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 670.363247][T24501] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:31:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x60}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:31:59 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x18) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffffe) [ 670.404281][T24503] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 670.454294][T24503] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 670.485779][T24511] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 670.539300][T24511] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 670.564600][T24503] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:31:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xca}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 670.614127][T24503] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 670.660772][ T3355] usb 4-1: new high-speed USB device number 33 using dummy_hcd 22:31:59 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:31:59 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 670.717277][ T28] audit: type=1804 audit(1593037919.823:1154): pid=24523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/384/bus" dev="sda1" ino=16172 res=1 [ 670.886130][T24528] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 670.929927][ T3355] usb 4-1: Using ep0 maxpacket: 8 [ 670.943300][T24528] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 670.977167][T24529] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 671.010725][T24529] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 671.035984][T24532] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 671.070252][ T3355] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 671.075235][T24532] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 671.078867][ T3355] usb 4-1: config 0 has no interface number 0 [ 671.098360][ T3355] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 671.111542][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 671.123539][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 671.146024][ T3355] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 671.169322][ T3355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.205428][ T3355] usb 4-1: config 0 descriptor?? [ 671.219267][T24529] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 671.240044][T24507] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 671.247496][T24507] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 671.280625][T24529] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 671.391744][ T28] audit: type=1804 audit(1593037920.495:1155): pid=24523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/384/bus" dev="sda1" ino=16172 res=1 [ 671.521159][T24507] FAULT_INJECTION: forcing a failure. [ 671.521159][T24507] name failslab, interval 1, probability 0, space 0, times 0 [ 671.543536][T24507] CPU: 1 PID: 24507 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 671.551911][T24507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 671.562301][T24507] Call Trace: [ 671.565794][T24507] dump_stack+0x188/0x20d [ 671.570157][T24507] should_fail.cold+0x5/0xa [ 671.574782][T24507] ? fault_create_debugfs_attr+0x140/0x140 [ 671.580727][T24507] should_failslab+0x5/0xf [ 671.585162][T24507] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 671.590653][T24507] ? mark_held_locks+0x9f/0xe0 [ 671.595437][T24507] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 671.601258][T24507] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 671.607280][T24507] snd_seq_port_connect+0x5d/0x510 [ 671.612424][T24507] ? _raw_read_unlock+0x24/0x40 [ 671.617477][T24507] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 671.622879][T24507] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 671.628884][T24507] snd_seq_kernel_client_ctl+0xeb/0x130 [ 671.635730][T24507] snd_seq_oss_midi_open+0x3ee/0x670 [ 671.641567][T24507] ? snd_seq_oss_midi_setup+0x50/0x50 [ 671.647163][T24507] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 671.654262][T24507] ? get_mdev+0x75/0x90 [ 671.658883][T24507] ? get_mididev.isra.0+0x76/0xa0 [ 671.663940][T24507] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 671.670118][T24507] snd_seq_oss_open+0x7fa/0x980 [ 671.675014][T24507] odev_open+0x6c/0x90 [ 671.679459][T24507] ? odev_release+0x70/0x70 [ 671.684004][T24507] soundcore_open+0x446/0x600 [ 671.688883][T24507] ? sound_devnode+0xf0/0xf0 [ 671.693581][T24507] chrdev_open+0x219/0x5c0 [ 671.698129][T24507] ? cdev_put.part.0+0x50/0x50 [ 671.702919][T24507] ? security_file_open+0x84/0x410 [ 671.708067][T24507] do_dentry_open+0x546/0x1340 [ 671.712868][T24507] ? cdev_put.part.0+0x50/0x50 [ 671.717711][T24507] ? security_inode_permission+0xc4/0xf0 [ 671.723364][T24507] ? chown_common+0x550/0x550 [ 671.728072][T24507] ? inode_permission+0xab/0x500 [ 671.734234][T24507] path_openat+0x1e59/0x27d0 [ 671.738874][T24507] ? path_lookupat.isra.0+0x530/0x530 [ 671.744476][T24507] ? lock_acquire+0x1f2/0x8f0 [ 671.749197][T24507] do_filp_open+0x192/0x260 [ 671.754240][T24507] ? may_open_dev+0xf0/0xf0 [ 671.758816][T24507] ? do_raw_spin_lock+0x129/0x2e0 [ 671.764154][T24507] ? _raw_spin_unlock+0x24/0x40 [ 671.769079][T24507] ? __alloc_fd+0x46d/0x600 [ 671.773619][T24507] do_sys_openat2+0x585/0x7d0 [ 671.778319][T24507] ? file_open_root+0x400/0x400 [ 671.783208][T24507] ? __mutex_unlock_slowpath+0xe2/0x660 [ 671.788795][T24507] ? wait_for_completion+0x270/0x270 [ 671.794191][T24507] ? __this_cpu_preempt_check+0x28/0x190 [ 671.799850][T24507] ? __sb_end_write+0x101/0x1d0 [ 671.804818][T24507] do_sys_open+0xc3/0x140 [ 671.809279][T24507] ? filp_open+0x70/0x70 [ 671.813634][T24507] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 671.819819][T24507] ? do_syscall_64+0x21/0x7d0 [ 671.824554][T24507] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 671.830735][T24507] do_syscall_64+0xf6/0x7d0 [ 671.835272][T24507] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 671.841187][T24507] RIP: 0033:0x45ca59 [ 671.845102][T24507] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 671.865164][T24507] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 671.873711][T24507] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 671.881702][T24507] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 671.889687][T24507] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 671.897683][T24507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 671.905675][T24507] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 672.018546][ T2484] usb 4-1: USB disconnect, device number 33 22:32:01 executing program 3 (fault-call:4 fault-nth:29): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:32:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xf0}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:32:01 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:32:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="20010000", @ANYRES16=r5, @ANYBLOB="000227bd7000fcdbdf25410000000800010070636900d611000200303030303a00000000302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000008690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303230303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000000000000000070011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000000000000d4f443fc686fd44911ae90d5fc1a7ff336e8b6e3fc45bcc5bc2e9915e64206a74843f40eea0d46fa531bf92d5658297d7684443ace4872fffd22870b4e818919de056c2a737aedccd0dcc5371f4d9542d2c5720e07f8d5f1e77ff0fa62b019ca2b4096b1ab8e525020"], 0x120}, 0x1, 0x0, 0x0, 0x10}, 0x8001) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:32:01 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:32:01 executing program 5: write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x1f) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x200004) write$FUSE_STATFS(r0, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) r1 = socket(0x2, 0x803, 0xff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) signalfd4(r2, &(0x7f0000000100)={[0xffff]}, 0x8, 0x800) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e21, 0x5, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8000}, {0xa, 0x4e20, 0x9ed, @private1={0xfc, 0x1, [], 0x1}, 0x9}, 0x63b3, [0x800, 0x7, 0xd1b8, 0x6, 0xd97, 0x2, 0x6, 0x3]}, 0x5c) r3 = dup(r1) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 672.672742][T24580] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 22:32:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x300}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 672.723499][T24583] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 672.745089][T24583] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 672.758757][T24584] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 672.772987][T24584] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 672.796728][T24585] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 672.808799][ T28] audit: type=1804 audit(1593037921.910:1156): pid=24584 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/385/bus" dev="sda1" ino=16382 res=1 [ 672.856440][T24585] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 672.895086][T24583] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 672.921967][T24583] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x500}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:32:02 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x34000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 672.990670][T24580] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 673.080470][T24585] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 673.109479][T24585] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 673.112805][ T3355] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 673.124433][ T28] audit: type=1804 audit(1593037922.231:1157): pid=24609 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/385/bus" dev="sda1" ino=16382 res=1 22:32:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x600}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 673.179015][T24592] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 673.200466][T24592] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:02 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:32:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="20010000", @ANYRES16=r5, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x10}, 0x8001) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 673.223790][ T28] audit: type=1800 audit(1593037922.311:1158): pid=24584 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16382 res=0 [ 673.263381][T24615] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 673.294203][T24615] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 673.336574][ T28] audit: type=1800 audit(1593037922.311:1159): pid=24609 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16382 res=0 [ 673.385537][T24622] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 673.411774][ T3355] usb 4-1: Using ep0 maxpacket: 8 [ 673.417396][T24622] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 673.438854][T24623] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 673.521841][T24620] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 673.532161][ T3355] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 673.539590][T24620] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 673.548201][ T3355] usb 4-1: config 0 has no interface number 0 [ 673.564448][ T3355] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 673.591450][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 673.609269][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 673.627768][ T3355] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 673.637912][ T3355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.659215][ T3355] usb 4-1: config 0 descriptor?? [ 673.692246][T24593] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 673.700441][T24593] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 673.712917][T24620] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 673.743038][T24620] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 673.965307][T24590] FAULT_INJECTION: forcing a failure. [ 673.965307][T24590] name failslab, interval 1, probability 0, space 0, times 0 [ 673.998441][T24590] CPU: 1 PID: 24590 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 674.006830][T24590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.016935][T24590] Call Trace: [ 674.020265][T24590] dump_stack+0x188/0x20d [ 674.024644][T24590] should_fail.cold+0x5/0xa [ 674.030250][T24590] ? fault_create_debugfs_attr+0x140/0x140 [ 674.036192][T24590] should_failslab+0x5/0xf [ 674.040660][T24590] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 674.046067][T24590] ? mark_held_locks+0x9f/0xe0 [ 674.050991][T24590] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 674.056956][T24590] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 674.062979][T24590] snd_seq_port_connect+0x5d/0x510 [ 674.068117][T24590] ? _raw_read_unlock+0x24/0x40 [ 674.072989][T24590] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 674.078477][T24590] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 674.084412][T24590] snd_seq_kernel_client_ctl+0xeb/0x130 [ 674.090008][T24590] snd_seq_oss_midi_open+0x50a/0x670 [ 674.095325][T24590] ? snd_seq_oss_midi_setup+0x50/0x50 [ 674.100717][T24590] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 674.106555][T24590] ? get_mdev+0x75/0x90 [ 674.110736][T24590] ? get_mididev.isra.0+0x76/0xa0 [ 674.115793][T24590] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 674.121725][T24590] snd_seq_oss_open+0x7fa/0x980 [ 674.126617][T24590] odev_open+0x6c/0x90 [ 674.130718][T24590] ? odev_release+0x70/0x70 [ 674.135272][T24590] soundcore_open+0x446/0x600 [ 674.139990][T24590] ? sound_devnode+0xf0/0xf0 [ 674.144633][T24590] chrdev_open+0x219/0x5c0 [ 674.149088][T24590] ? cdev_put.part.0+0x50/0x50 [ 674.153888][T24590] ? security_file_open+0x84/0x410 [ 674.159032][T24590] do_dentry_open+0x546/0x1340 [ 674.163826][T24590] ? cdev_put.part.0+0x50/0x50 [ 674.168619][T24590] ? security_inode_permission+0xc4/0xf0 [ 674.174276][T24590] ? chown_common+0x550/0x550 [ 674.178978][T24590] ? inode_permission+0xab/0x500 [ 674.183939][T24590] path_openat+0x1e59/0x27d0 [ 674.188610][T24590] ? path_lookupat.isra.0+0x530/0x530 [ 674.194024][T24590] ? lock_acquire+0x1f2/0x8f0 [ 674.198735][T24590] do_filp_open+0x192/0x260 [ 674.203367][T24590] ? may_open_dev+0xf0/0xf0 [ 674.208037][T24590] ? do_raw_spin_lock+0x129/0x2e0 [ 674.213175][T24590] ? _raw_spin_unlock+0x24/0x40 [ 674.218046][T24590] ? __alloc_fd+0x46d/0x600 [ 674.222596][T24590] do_sys_openat2+0x585/0x7d0 [ 674.227906][T24590] ? file_open_root+0x400/0x400 [ 674.233066][T24590] ? __mutex_unlock_slowpath+0xe2/0x660 [ 674.238732][T24590] ? wait_for_completion+0x270/0x270 [ 674.244201][T24590] ? __this_cpu_preempt_check+0x28/0x190 [ 674.249860][T24590] ? __sb_end_write+0x101/0x1d0 [ 674.254744][T24590] do_sys_open+0xc3/0x140 [ 674.259100][T24590] ? filp_open+0x70/0x70 [ 674.263626][T24590] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 674.270253][T24590] ? do_syscall_64+0x21/0x7d0 [ 674.274959][T24590] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 674.281014][T24590] do_syscall_64+0xf6/0x7d0 [ 674.285845][T24590] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 674.291790][T24590] RIP: 0033:0x45ca59 [ 674.295700][T24590] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 674.315319][T24590] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 674.323764][T24590] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 674.331750][T24590] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 674.340490][T24590] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 674.348653][T24590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 674.356728][T24590] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 674.458646][ T2484] usb 4-1: USB disconnect, device number 34 22:32:04 executing program 3 (fault-call:4 fault-nth:30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:32:04 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) ftruncate(r1, 0x200004) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000040)=',\x00') setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 22:32:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x612}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:32:04 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:32:04 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:32:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r5, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x6, &(0x7f0000000040)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xd7, &(0x7f00000002c0)=""/215, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x3b, 0x10, &(0x7f0000000000)={0x4}, 0x10, r6}, 0x78) [ 675.099429][T24675] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 675.114919][T24675] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x900}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:32:04 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000000)=""/124, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1412, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x400a004}, 0x12) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000005c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000100)={[{@dioread_nolock='dioread_nolock'}]}) [ 675.147922][T24674] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 675.187409][T24674] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 675.226475][T24682] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 675.243268][T24682] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:04 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 675.274913][T24674] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 675.286112][ T28] audit: type=1804 audit(1593037924.398:1160): pid=24685 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/386/bus" dev="sda1" ino=16003 res=1 22:32:04 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 675.324998][T24674] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xa00}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 675.378054][T24687] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 675.444287][T24687] EXT4-fs (loop1): Invalid log block size: 65 [ 675.459946][T24696] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 675.476496][T24696] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:04 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 675.514355][T24703] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 675.521290][T24693] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 675.545201][ T3358] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 675.552033][T24703] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 675.591612][T24700] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 675.664766][T24693] EXT4-fs (loop1): Invalid log block size: 65 [ 675.681578][T24700] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 675.744936][T24708] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 675.783232][T24708] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 675.833967][ T3358] usb 4-1: Using ep0 maxpacket: 8 [ 675.839797][T24706] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 675.873731][T24706] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 675.913545][T24714] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 675.938639][T24714] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 675.952741][ T28] audit: type=1804 audit(1593037925.070:1161): pid=24716 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir100310078/syzkaller.IJmnHo/386/bus" dev="sda1" ino=16003 res=1 [ 675.979565][ T3358] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 676.001462][ T3358] usb 4-1: config 0 has no interface number 0 [ 676.018243][ T3358] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 676.041212][ T3358] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 676.063725][ T3358] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 676.079448][ T3358] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 676.098013][ T3358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.108770][ T3358] usb 4-1: config 0 descriptor?? [ 676.134521][T24689] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 676.141903][T24689] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 676.377641][T24684] FAULT_INJECTION: forcing a failure. [ 676.377641][T24684] name failslab, interval 1, probability 0, space 0, times 0 [ 676.398034][T24684] CPU: 1 PID: 24684 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 676.406553][T24684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.416712][T24684] Call Trace: [ 676.420035][T24684] dump_stack+0x188/0x20d [ 676.424535][T24684] should_fail.cold+0x5/0xa [ 676.429068][T24684] ? fault_create_debugfs_attr+0x140/0x140 [ 676.435866][T24684] should_failslab+0x5/0xf [ 676.440303][T24684] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 676.445792][T24684] ? mark_held_locks+0x9f/0xe0 [ 676.450616][T24684] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 676.456459][T24684] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 676.462464][T24684] snd_seq_port_connect+0x5d/0x510 [ 676.467596][T24684] ? _raw_read_unlock+0x24/0x40 [ 676.472551][T24684] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 676.477951][T24684] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 676.483877][T24684] snd_seq_kernel_client_ctl+0xeb/0x130 [ 676.489549][T24684] snd_seq_oss_midi_open+0x3ee/0x670 [ 676.494917][T24684] ? snd_seq_oss_midi_setup+0x50/0x50 [ 676.500397][T24684] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 676.506317][T24684] ? get_mdev+0x75/0x90 [ 676.510506][T24684] ? get_mididev.isra.0+0x76/0xa0 [ 676.515557][T24684] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 676.521511][T24684] snd_seq_oss_open+0x7fa/0x980 [ 676.526410][T24684] odev_open+0x6c/0x90 [ 676.530505][T24684] ? odev_release+0x70/0x70 [ 676.535034][T24684] soundcore_open+0x446/0x600 [ 676.539742][T24684] ? sound_devnode+0xf0/0xf0 [ 676.544356][T24684] chrdev_open+0x219/0x5c0 [ 676.548807][T24684] ? cdev_put.part.0+0x50/0x50 [ 676.553597][T24684] ? security_file_open+0x84/0x410 [ 676.558824][T24684] do_dentry_open+0x546/0x1340 [ 676.564092][T24684] ? cdev_put.part.0+0x50/0x50 [ 676.568885][T24684] ? security_inode_permission+0xc4/0xf0 [ 676.574542][T24684] ? chown_common+0x550/0x550 [ 676.579240][T24684] ? inode_permission+0xab/0x500 [ 676.584214][T24684] path_openat+0x1e59/0x27d0 [ 676.589095][T24684] ? path_lookupat.isra.0+0x530/0x530 [ 676.594500][T24684] ? lock_acquire+0x1f2/0x8f0 [ 676.599227][T24684] do_filp_open+0x192/0x260 [ 676.603763][T24684] ? may_open_dev+0xf0/0xf0 [ 676.608298][T24684] ? do_raw_spin_lock+0x129/0x2e0 [ 676.613512][T24684] ? _raw_spin_unlock+0x24/0x40 [ 676.618385][T24684] ? __alloc_fd+0x46d/0x600 [ 676.622921][T24684] do_sys_openat2+0x585/0x7d0 [ 676.627624][T24684] ? file_open_root+0x400/0x400 [ 676.632500][T24684] ? __mutex_unlock_slowpath+0xe2/0x660 [ 676.638064][T24684] ? wait_for_completion+0x270/0x270 [ 676.643365][T24684] ? __this_cpu_preempt_check+0x28/0x190 [ 676.649019][T24684] ? __sb_end_write+0x101/0x1d0 [ 676.653894][T24684] do_sys_open+0xc3/0x140 [ 676.658241][T24684] ? filp_open+0x70/0x70 [ 676.662509][T24684] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 676.668517][T24684] ? do_syscall_64+0x21/0x7d0 [ 676.673222][T24684] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 676.679228][T24684] do_syscall_64+0xf6/0x7d0 [ 676.683761][T24684] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 676.690192][T24684] RIP: 0033:0x45ca59 [ 676.694102][T24684] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 676.713723][T24684] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 676.722151][T24684] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 676.730136][T24684] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 676.738124][T24684] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 676.746107][T24684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 676.754090][T24684] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 676.811232][ T3358] usb 4-1: USB disconnect, device number 35 22:32:06 executing program 3 (fault-call:4 fault-nth:31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:32:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xb00}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:32:06 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x48, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c758c0d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000700ffffffff"], 0x3c}}, 0x0) sendto(r2, &(0x7f0000000000)="29d8496a", 0x4, 0x4c081, &(0x7f0000000140)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000000c0)={0x67e3, "589e1c1ae7906aad0afdf482653f2d5a7ce2dfe60e3c71c6d430b472e47bf13a", 0x40, 0x401, 0x6, 0x10, 0x1}) close(0xffffffffffffffff) 22:32:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4a) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x30, 0x2, 0x8d, 0x51, 0x200, 0x3, 0x0, 0x5, 0x53, 0x40, 0x236, 0x2b00, 0x7, 0x38, 0x2, 0x9, 0x3, 0xdd}, [{0x60000000, 0x5, 0x8b2, 0x2, 0x1, 0x7, 0x444, 0x6}, {0x6, 0x400, 0x9, 0x9, 0x2, 0x0, 0x1ff, 0x2}], "bcea8592f5ca55b63a7fe172fd6c165e731118f832fe7d7b11d1d17f8cb96d1c769e91e918df261de415ce84062b6b4ecda91b47ac53b988e55de02272bb82a3d6ee", [[], []]}, 0x2f2) 22:32:06 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:32:06 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:32:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xe00}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 677.463396][T24762] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:32:06 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) pipe(&(0x7f0000000040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup3(0xffffffffffffffff, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000000)={0x7, 0x1, 0x8, 0x101, 0x101, 0xdf}) dup2(r1, r4) [ 677.524081][T24762] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 677.593365][T24765] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:32:06 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 677.640033][T24765] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xf00}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 677.694608][T24770] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 677.722916][T24765] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 677.764927][T24765] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 677.800134][T24785] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:32:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) sendto$unix(r2, &(0x7f0000000440)="206935c2db7f40b3775053c6914bf0c45971d076df1764e8327438b885554355152da3f6d3448d13a0712bb12e7004bfffd99df3d36967b4f4bffa1bfacc8159", 0x40, 0x810, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0x400, './file0\x00'}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000592c7df2b0ca7e0706010400000000000000000000000008000640000000056f4ac280c5f87a9e9262ac6e6cf6095749c82e342a8cfe50e5e64ca152a3d2876f76cadf8c95ef2fac8b6079bb53f8cadc6bcddce97b597f82f8f08a57948839bb44f04cf4e4b7fa0ab74fa0ea9ba8b4ea8e932314f753d1488ec121d68fdaca066c981533e6e0a5ed97358b1088e106fd1712d9a26814d6b94f5c8091ed127468d6719f79f6e6d4dccb521cf0b7d7b48a078451122eb9c8a48b105621b3f31593f91465f3bee3a6499ffb3262b631e08a6f05d7262563748578"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 677.855155][T24785] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 677.858002][ T3358] usb 4-1: new high-speed USB device number 36 using dummy_hcd 22:32:07 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 677.971478][T24795] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 678.032922][T24795] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 678.116010][T24798] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 678.186885][T24798] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 678.196533][ T3358] usb 4-1: Using ep0 maxpacket: 8 [ 678.300914][T24798] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 678.320654][ T3358] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 678.341739][ T3358] usb 4-1: config 0 has no interface number 0 [ 678.354503][T24798] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 678.376810][ T3358] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 678.428490][ T3358] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 678.475217][ T3358] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 678.518136][ T3358] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 678.563563][ T3358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.611850][ T3358] usb 4-1: config 0 descriptor?? [ 678.656734][T24776] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 678.664828][T24776] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 679.004570][T24771] FAULT_INJECTION: forcing a failure. [ 679.004570][T24771] name failslab, interval 1, probability 0, space 0, times 0 [ 679.033947][T24771] CPU: 0 PID: 24771 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 679.042739][T24771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.053499][T24771] Call Trace: [ 679.056823][T24771] dump_stack+0x188/0x20d [ 679.061185][T24771] should_fail.cold+0x5/0xa [ 679.065862][T24771] ? fault_create_debugfs_attr+0x140/0x140 [ 679.071750][T24771] should_failslab+0x5/0xf [ 679.076506][T24771] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 679.081941][T24771] ? mark_held_locks+0x9f/0xe0 [ 679.086920][T24771] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 679.093733][T24771] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 679.100470][T24771] snd_seq_port_connect+0x5d/0x510 [ 679.106370][T24771] ? _raw_read_unlock+0x24/0x40 [ 679.111674][T24771] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 679.117553][T24771] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 679.125140][T24771] snd_seq_kernel_client_ctl+0xeb/0x130 [ 679.131547][T24771] snd_seq_oss_midi_open+0x3ee/0x670 [ 679.137380][T24771] ? snd_seq_oss_midi_setup+0x50/0x50 [ 679.143441][T24771] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 679.150601][T24771] ? get_mdev+0x75/0x90 [ 679.156849][T24771] ? get_mididev.isra.0+0x76/0xa0 [ 679.163816][T24771] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 679.169962][T24771] snd_seq_oss_open+0x7fa/0x980 [ 679.175015][T24771] odev_open+0x6c/0x90 [ 679.180662][T24771] ? odev_release+0x70/0x70 [ 679.186075][T24771] soundcore_open+0x446/0x600 [ 679.192719][T24771] ? sound_devnode+0xf0/0xf0 [ 679.197340][T24771] chrdev_open+0x219/0x5c0 [ 679.202145][T24771] ? cdev_put.part.0+0x50/0x50 [ 679.207216][T24771] ? security_file_open+0x84/0x410 [ 679.212362][T24771] do_dentry_open+0x546/0x1340 [ 679.217165][T24771] ? cdev_put.part.0+0x50/0x50 [ 679.222852][T24771] ? security_inode_permission+0xc4/0xf0 [ 679.228735][T24771] ? chown_common+0x550/0x550 [ 679.233979][T24771] ? inode_permission+0xab/0x500 [ 679.239505][T24771] path_openat+0x1e59/0x27d0 [ 679.244606][T24771] ? path_lookupat.isra.0+0x530/0x530 [ 679.250338][T24771] do_filp_open+0x192/0x260 [ 679.255348][T24771] ? may_open_dev+0xf0/0xf0 [ 679.260149][T24771] ? do_raw_spin_lock+0x129/0x2e0 [ 679.265414][T24771] ? _raw_spin_unlock+0x24/0x40 [ 679.270822][T24771] ? __alloc_fd+0x46d/0x600 [ 679.275807][T24771] do_sys_openat2+0x585/0x7d0 [ 679.281002][T24771] ? file_open_root+0x400/0x400 [ 679.286464][T24771] ? __mutex_unlock_slowpath+0xe2/0x660 [ 679.292157][T24771] ? wait_for_completion+0x270/0x270 [ 679.297691][T24771] ? __this_cpu_preempt_check+0x28/0x190 [ 679.304137][T24771] ? __sb_end_write+0x101/0x1d0 [ 679.309040][T24771] do_sys_open+0xc3/0x140 [ 679.313643][T24771] ? filp_open+0x70/0x70 [ 679.318509][T24771] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 679.325590][T24771] ? do_syscall_64+0x21/0x7d0 [ 679.331509][T24771] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 679.338136][T24771] do_syscall_64+0xf6/0x7d0 [ 679.343157][T24771] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 679.349646][T24771] RIP: 0033:0x45ca59 [ 679.354018][T24771] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 679.376764][T24771] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 679.386071][T24771] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 679.394574][T24771] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 679.403932][T24771] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 679.412752][T24771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 679.422192][T24771] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 679.460534][T22180] usb 4-1: USB disconnect, device number 36 22:32:09 executing program 3 (fault-call:4 fault-nth:32): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:32:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x1100}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:32:09 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf04000000", @ANYRES32=0x0, @ANYBLOB="000000000000000098e92c5122436178098c95518d08000a002e0000003c0012000c00010069703667726500002c00020029beea8bbd6d633863382d797190924429d321567d13d6374f2ac94da0598e0314f8002b9ec58f8145e0ce3b411b0c1de1c165e64bfb26848a9da824e613dc6e5413bac9c5c5a57bc12ac3b85fbf625c2a79d194223808efea37061c58f18450a153fc9a54bd12ae7487a965e3000000"], 0x64}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:32:09 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:32:09 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:32:09 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4001, 0x0, @ipv4={[], [], @remote}, 0xfc000000}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000800) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) clock_gettime(0x4, &(0x7f0000000100)) writev(r1, &(0x7f0000001400)=[{&(0x7f0000000200)="8d83293badcb07f880698ea0394327c94f92c692a3e9b00173f03073a11a0394ccf5c9b738c15353df83d61d45e8b1e008f5fa453967c2744659d075121295ec7755bd41dcc1bbfcee3557652ed85e15489f5a78eb3dba511dda09c31a8ac63a98ee9299ede088921f4d720dd3d962c8b8d61b7fdc835c5a6697e3fe655fc9245ababd7231436e27bb365efa", 0x8c}], 0x1) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = open(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x44}) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000040)={0x7, 0x9, 0x6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}}, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000000c0)={'bond_slave_1\x00', 0x3800}) 22:32:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x1200}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 680.130282][T24862] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:32:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x1206}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 680.174600][T24862] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 680.206187][T24861] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:32:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x1300}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 680.288517][T24861] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 680.344847][T24869] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 680.379383][T24866] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:32:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x6000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 680.439890][T24866] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:09 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 680.494587][T24867] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 680.532914][T24867] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xca00}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 680.545357][T22180] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 680.569452][T24869] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 680.702495][T24889] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 680.759206][T24889] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 680.798705][T22180] usb 4-1: Using ep0 maxpacket: 8 [ 680.929225][T22180] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 680.958403][T22180] usb 4-1: config 0 has no interface number 0 [ 680.965437][T22180] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 681.027958][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 681.057923][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 681.077805][T22180] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 681.088978][T22180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.102007][T22180] usb 4-1: config 0 descriptor?? [ 681.124260][T24873] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 681.133368][T24873] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 681.388024][T24870] FAULT_INJECTION: forcing a failure. [ 681.388024][T24870] name failslab, interval 1, probability 0, space 0, times 0 [ 681.446775][T24870] CPU: 0 PID: 24870 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 681.456383][T24870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.467097][T24870] Call Trace: [ 681.471471][T24870] dump_stack+0x188/0x20d [ 681.476118][T24870] should_fail.cold+0x5/0xa [ 681.480922][T24870] ? fault_create_debugfs_attr+0x140/0x140 [ 681.487099][T24870] should_failslab+0x5/0xf [ 681.495896][T24870] kmem_cache_alloc_node_trace+0x27c/0x790 [ 681.502817][T24870] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 681.509153][T24870] ? free_object+0x70/0x70 [ 681.513754][T24870] ? lockdep_init_map_waits+0x26a/0x890 [ 681.520088][T24870] __kmalloc_node+0x38/0x60 [ 681.524834][T24870] kvmalloc_node+0x61/0xf0 [ 681.529297][T24870] open_substream+0x33d/0x880 [ 681.534107][T24870] rawmidi_open_priv+0x58e/0x6e0 [ 681.539790][T24870] snd_rawmidi_kernel_open+0x1b5/0x270 [ 681.545966][T24870] midisynth_use+0xee/0x250 [ 681.550918][T24870] ? midisynth_unsubscribe+0x70/0x70 [ 681.556988][T24870] ? down_write+0xdb/0x150 [ 681.561795][T24870] ? __down_timeout+0x2d0/0x2d0 [ 681.567336][T24870] ? up_write+0x148/0x470 [ 681.572151][T24870] check_and_subscribe_port+0x5b5/0x800 [ 681.578094][T24870] ? midisynth_unsubscribe+0x70/0x70 [ 681.583728][T24870] snd_seq_port_connect+0x381/0x510 [ 681.589453][T24870] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 681.595545][T24870] snd_seq_kernel_client_ctl+0xeb/0x130 [ 681.601156][T24870] snd_seq_oss_midi_open+0x50a/0x670 [ 681.606978][T24870] ? snd_seq_oss_midi_setup+0x50/0x50 [ 681.613025][T24870] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 681.619511][T24870] ? get_mdev+0x75/0x90 [ 681.624038][T24870] ? get_mididev.isra.0+0x76/0xa0 [ 681.629094][T24870] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 681.635649][T24870] snd_seq_oss_open+0x7fa/0x980 [ 681.641052][T24870] odev_open+0x6c/0x90 [ 681.645788][T24870] ? odev_release+0x70/0x70 [ 681.651087][T24870] soundcore_open+0x446/0x600 [ 681.657205][T24870] ? sound_devnode+0xf0/0xf0 [ 681.661873][T24870] chrdev_open+0x219/0x5c0 [ 681.666627][T24870] ? cdev_put.part.0+0x50/0x50 [ 681.672012][T24870] ? security_file_open+0x84/0x410 [ 681.677792][T24870] do_dentry_open+0x546/0x1340 [ 681.682753][T24870] ? cdev_put.part.0+0x50/0x50 [ 681.687776][T24870] ? security_inode_permission+0xc4/0xf0 [ 681.693922][T24870] ? chown_common+0x550/0x550 [ 681.698850][T24870] ? inode_permission+0xab/0x500 [ 681.703836][T24870] path_openat+0x1e59/0x27d0 [ 681.708869][T24870] ? path_lookupat.isra.0+0x530/0x530 [ 681.715027][T24870] ? lock_acquire+0x1f2/0x8f0 [ 681.720214][T24870] do_filp_open+0x192/0x260 [ 681.725129][T24870] ? may_open_dev+0xf0/0xf0 [ 681.729890][T24870] ? do_raw_spin_lock+0x129/0x2e0 [ 681.735008][T24870] ? _raw_spin_unlock+0x24/0x40 [ 681.740228][T24870] ? __alloc_fd+0x46d/0x600 [ 681.745241][T24870] do_sys_openat2+0x585/0x7d0 [ 681.752541][T24870] ? file_open_root+0x400/0x400 [ 681.758386][T24870] ? __mutex_unlock_slowpath+0xe2/0x660 [ 681.764864][T24870] ? wait_for_completion+0x270/0x270 [ 681.770398][T24870] ? __this_cpu_preempt_check+0x28/0x190 [ 681.776988][T24870] ? __sb_end_write+0x101/0x1d0 [ 681.782073][T24870] do_sys_open+0xc3/0x140 [ 681.788533][T24870] ? filp_open+0x70/0x70 [ 681.793083][T24870] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 681.800730][T24870] ? do_syscall_64+0x21/0x7d0 [ 681.805789][T24870] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 681.812255][T24870] do_syscall_64+0xf6/0x7d0 [ 681.817300][T24870] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 681.823721][T24870] RIP: 0033:0x45ca59 [ 681.827861][T24870] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 681.852526][T24870] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 681.862466][T24870] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 681.872715][T24870] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 681.881221][T24870] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 681.891457][T24870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 681.900315][T24870] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 681.937433][ T3355] usb 4-1: USB disconnect, device number 37 22:32:11 executing program 3 (fault-call:4 fault-nth:33): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:32:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xf000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:32:11 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:32:11 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:32:11 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x8000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3e8, 0x108, 0x1f0, 0x0, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x80000001}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff000000, 0xb, 0x3, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x7, 0x3f, 0x3, 0x5, 0x3, 0x18, 'bridge_slave_0\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x88}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast1, 0xe, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x438) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x6, 0x2, 0x19, 0xfd, 0x0, 0x41c1, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x403}, 0x4a40, 0x0, 0x0, 0x7, 0x9, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffd}, 0x1c) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000700)=""/201) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$kcm(0x10, 0x2, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000080500", @ANYRES16=r2, @ANYBLOB="95c40000000000000000010000000000000009410000004c0018000000f062726f6164636173742d6c696e6bf77a3365f492fa9300000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000004000"], 0x68}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000080)={0x6c6, 0x1f, 0xff, 0x4}, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) 22:32:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x6, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010000000000000000a31ed45ee6", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002f299d77742029029800600020000000000a4727166022bd61ce7d9195a1844aaf7492ecb25d3a65339762b3b2e460667cee22424d6772bfe5edc63338e3af0ddc00465f2cd7374966108033d96959facfd1d2dd7722b0bb244feba6ad6c8539cbbb869c02deb238f9bd8627e1753ce2aa9026e70c2461eb3c2a5bbfcc7a0805395a10b889a567315b1f125737b3f18"], 0x3c}}, 0x0) 22:32:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x34000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 682.592036][T24938] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 682.624925][T24938] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:11 executing program 5: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x9f0000, 0xfffffffe, 0x3f, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x6, [], @string=&(0x7f0000000000)=0x8d}}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x10) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x81, 0x3, 0x3, 0x2, 0x7, 0x4291, 0x4}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000180)={0xf000000, 0x4, 0x1ff, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9a0907, 0xffffffff, [], @string=&(0x7f0000000100)=0xc0}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000001c0)={0x0, 0x5, 0x1002}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x3a6a9588582004b1, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x8, 0xb, 0x4, 0x400, 0x857, {}, {0x2, 0x1, 0x4, 0xa2, 0x1, 0xb8, "afcbfec4"}, 0x7fff, 0x2, @planes=&(0x7f0000000240)={0x48b, 0x0, @userptr=0x3}, 0x7e2}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x1, @local, 0x5}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e22, @remote}], 0x3c) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0xf2, "b9a90626098c2cd59249adf5c78063c59e5e6b0bbc5815ced46fb096f9392ac10481e08cf8f4dcc901b3daa3620958ea6492dae788423fe07be2bf6bc7b4c56b24f244d78270552b9bfa332f8b1098146d8e204301fc0ad290d808f2f4146dffeb3975bb9cbc1aab6fc4e715b0de6988e246fbd53bb3f7152dffbab99a830da50ea4fd747eabbaad70c5a9e198896e5c22b8d31e2d72b3fe1435a389664d79e7171874015fcb9ce52de527a9fc9af04eb55d12e6b498eb06496b461059f4bb878e6bc635cb0aa632b6e5d308eed0d5dccd142da36237e4138af7fa00197377c019d810815b93bab462b303302f2da61824af"}, &(0x7f0000000440)=0xfa) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000480)={r4, 0x80000001, 0x10}, 0xc) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x400, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000500)=0x0) setpriority(0x1, r6, 0x0) init_module(&(0x7f0000000540)='/dev/hwrng\x00', 0xb, &(0x7f0000000580)='/dev/hwrng\x00') lsetxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=@random={'security.', '/dev/hwrng\x00'}, &(0x7f0000000640)='\x00', 0x1, 0x1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000680)) connect$bt_rfcomm(r3, &(0x7f00000006c0)={0x1f, @none, 0x5}, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000740)={'ipvlan1\x00', 0x2000}) [ 682.666885][T24939] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 682.723533][T24939] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 682.753627][T24946] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:32:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x400300}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 682.780557][T24946] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:12 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x99) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x4200, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000041400032bbd7000fcdbdf25080001003002000000080001000100000008000100000000006c8fad0d637902fb"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) [ 682.831884][T24956] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 682.868589][T24956] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:12 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:32:12 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='timerslack_ns\x00') ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x2c, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x5c}}, 0x0) [ 682.972551][ T3355] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 683.152072][T24975] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 683.181422][T24975] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 683.224702][T24976] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 683.241530][ T3355] usb 4-1: Using ep0 maxpacket: 8 [ 683.268746][T24976] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 683.362056][ T3355] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 683.379016][ T3355] usb 4-1: config 0 has no interface number 0 [ 683.401260][ T3355] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 683.447745][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 683.488198][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 683.531902][ T3355] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 683.555758][ T3355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.577352][ T3355] usb 4-1: config 0 descriptor?? [ 683.622300][T24947] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 683.651148][T24947] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 683.920581][T24943] FAULT_INJECTION: forcing a failure. [ 683.920581][T24943] name failslab, interval 1, probability 0, space 0, times 0 [ 683.966365][T24943] CPU: 1 PID: 24943 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 683.974767][T24943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.985593][T24943] Call Trace: [ 683.989035][T24943] dump_stack+0x188/0x20d [ 683.993422][T24943] should_fail.cold+0x5/0xa [ 683.997961][T24943] ? fault_create_debugfs_attr+0x140/0x140 [ 684.003810][T24943] should_failslab+0x5/0xf [ 684.008282][T24943] kmem_cache_alloc_node_trace+0x27c/0x790 [ 684.014128][T24943] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 684.019956][T24943] ? free_object+0x70/0x70 [ 684.024398][T24943] ? lockdep_init_map_waits+0x26a/0x890 [ 684.029971][T24943] __kmalloc_node+0x38/0x60 [ 684.034509][T24943] kvmalloc_node+0x61/0xf0 [ 684.038961][T24943] open_substream+0x33d/0x880 [ 684.043668][T24943] rawmidi_open_priv+0x2e8/0x6e0 [ 684.048973][T24943] snd_rawmidi_kernel_open+0x1b5/0x270 [ 684.054546][T24943] midisynth_subscribe+0xf2/0x350 [ 684.059598][T24943] ? midisynth_use+0x250/0x250 [ 684.064390][T24943] ? down_write+0xdb/0x150 [ 684.068841][T24943] ? __down_timeout+0x2d0/0x2d0 [ 684.073904][T24943] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 684.079913][T24943] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 684.085837][T24943] check_and_subscribe_port+0x5b5/0x800 [ 684.091420][T24943] ? midisynth_use+0x250/0x250 [ 684.096217][T24943] snd_seq_port_connect+0x2e4/0x510 [ 684.102682][T24943] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 684.108703][T24943] snd_seq_kernel_client_ctl+0xeb/0x130 [ 684.114445][T24943] snd_seq_oss_midi_open+0x3ee/0x670 [ 684.119768][T24943] ? snd_seq_oss_midi_setup+0x50/0x50 [ 684.125273][T24943] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 684.131139][T24943] ? get_mdev+0x75/0x90 [ 684.135322][T24943] ? get_mididev.isra.0+0x76/0xa0 [ 684.140375][T24943] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 684.146385][T24943] snd_seq_oss_open+0x7fa/0x980 [ 684.151264][T24943] odev_open+0x6c/0x90 [ 684.156070][T24943] ? odev_release+0x70/0x70 [ 684.160604][T24943] soundcore_open+0x446/0x600 [ 684.165406][T24943] ? sound_devnode+0xf0/0xf0 [ 684.170052][T24943] chrdev_open+0x219/0x5c0 [ 684.175040][T24943] ? cdev_put.part.0+0x50/0x50 [ 684.179833][T24943] ? security_file_open+0x84/0x410 [ 684.184977][T24943] do_dentry_open+0x546/0x1340 [ 684.189769][T24943] ? cdev_put.part.0+0x50/0x50 [ 684.194676][T24943] ? security_inode_permission+0xc4/0xf0 [ 684.200367][T24943] ? chown_common+0x550/0x550 [ 684.205347][T24943] ? inode_permission+0xab/0x500 [ 684.210329][T24943] path_openat+0x1e59/0x27d0 [ 684.215054][T24943] ? path_lookupat.isra.0+0x530/0x530 [ 684.220556][T24943] do_filp_open+0x192/0x260 [ 684.225616][T24943] ? may_open_dev+0xf0/0xf0 [ 684.230484][T24943] ? do_raw_spin_lock+0x129/0x2e0 [ 684.235634][T24943] ? _raw_spin_unlock+0x24/0x40 [ 684.240507][T24943] ? __alloc_fd+0x46d/0x600 [ 684.245167][T24943] do_sys_openat2+0x585/0x7d0 [ 684.249878][T24943] ? file_open_root+0x400/0x400 [ 684.254756][T24943] ? __mutex_unlock_slowpath+0xe2/0x660 [ 684.260476][T24943] ? wait_for_completion+0x270/0x270 [ 684.265782][T24943] ? __this_cpu_preempt_check+0x28/0x190 [ 684.271553][T24943] ? __sb_end_write+0x101/0x1d0 [ 684.276433][T24943] do_sys_open+0xc3/0x140 [ 684.280791][T24943] ? filp_open+0x70/0x70 [ 684.285062][T24943] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 684.291442][T24943] ? do_syscall_64+0x21/0x7d0 [ 684.296286][T24943] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 684.302568][T24943] do_syscall_64+0xf6/0x7d0 [ 684.307514][T24943] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 684.314684][T24943] RIP: 0033:0x45ca59 [ 684.318596][T24943] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 684.339904][T24943] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 684.348876][T24943] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 684.357235][T24943] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 684.365409][T24943] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 684.373984][T24943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 684.383538][T24943] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 684.526853][ T3355] usb 4-1: USB disconnect, device number 38 22:32:14 executing program 3 (fault-call:4 fault-nth:34): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:32:14 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:32:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:32:14 executing program 5: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) r3 = request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='[-\x9d[//){\xb0\xec\x00', r2) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x364a3000) r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x6, 0x9}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x1) inotify_init() ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) 22:32:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_INC_SCI={0x5}]}}}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x40}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x40}}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, @sco={0x1f, @none}, @xdp={0x2c, 0x6, r7, 0x1f}, @isdn={0x22, 0xfa, 0x1, 0x3, 0x2c}, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)='gretap0\x00', 0x6c9, 0x9, 0x9}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x124, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe74a68bcef590da1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x81) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000300)={r10}, 0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r10, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r11, 0x3}, &(0x7f0000000100)=0x8) 22:32:14 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:32:14 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00d\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', @ANYRES32=r4], 0x24}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000066000100"/20, @ANYRES32=r4], 0x24}}, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003400)="844cefbcf09fd20cb8a678681898e2be9b3c19cfc773da8b59ddc46ad9087c786886dec1c0e81562a59baee3bed4c9f45553a7a1ddec52bbd9eaeffda0c7f7bfe70e9c5acb9172e69241b01e574dc6fb025ee74d05b3752877b361ad04be72cd885e08f02d923d1b7bfebfa5548a0014", 0x70}, {&(0x7f0000000300)="5045773cce386f4201a3355c3e949edfab54e561f2a4e3b901c65889e51a1ef9d865ac0fbfea87d8fb2e10604231ac8dd8b3e8912caa14ca8d779a2e1115e756cd604697049f7e0e1b2775c1abb54f383a37dbb09f38601436538f4e762f07d400fbb6aa2dcc90d5ef441e", 0x6b}, {&(0x7f0000000280)="093f594a97df65d83ffa158c829d87f5f657abec7cea5bdc6ec0b7f046aef22df8606d8da6686e5170d255d2fb9a00f0ebf34f5465b09c21080c", 0x3a}, {&(0x7f0000000380)}, {&(0x7f0000000440)="3abdde01b35725b0adf6f77cbd4ed8f1321f043b93bba0e044f972b82321863d96367a7f01d3dda1d4c4f8810094cc42eda9", 0x32}, {&(0x7f0000000480)="6c591d6288a7f07b185efe7ef577a068374be09c2cdc05585c13ddf57bf593c22781ede05b942b16353c7295430a2affd403738ec2df5479b2dd84d38333fd7ff6675e93e83746934af6599f2efa94f4cfb510511350b5feb8fa1a4c6cc9c361487fd8c74353", 0x66}, {&(0x7f0000000500)="fa496e1d6da5d747a4f056ce2788d7b2d45eda3e3b4d3ecd4b", 0x19}, {&(0x7f0000000540)="9e987a3fb41efc13072c17844b1eda05b41efd4ea8b965dae80a0dc50de97cbc4240", 0x22}], 0x8, &(0x7f0000000600)=[@op={0x18}, @iv={0x18, 0x117, 0x2, 0x4, "9ed0b21b"}], 0x30, 0x800}, {0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000640)="048c577e1124e11b0d27144195d2bbae699d2e99a32850ea", 0x18}, {&(0x7f0000000680)="758bdf269b787e62d8da6d40f3b4ba53bb3cab016a31c1", 0x17}, {&(0x7f00000006c0)="dccd637cb09bb3baff9f23a6a7b38e99cb69326f40feb1f4322aca2a85d18a8b9f555a618b0eee0418f60198b3647d3d47620c7da3219888d12650c1443937253a06f9af74e50382132eff21f2cd8305031806556cc3d369ca679fc6d97790b1edc37cab98db7de079b57d6f18b063a94ed322e31ac2fa23d448ae383bc9671560b71d82aab5be63e5e1a57f143357725de51647723e869221ae30722eb6ece8f622605ad218d479b33cd76fd2f6d534c47f3f8055463d", 0xb7}, {&(0x7f0000000780)="397021b30934dd6ee9b46e9c4ae0a9d4333682adebda90e6ebe1d73471b12275275165a08dd1a172139514fb143c4c7de97af9721ddec2dd0d24186470bf22be8b74b87978645d0bc8e9ab11fea8b8955d47a0812b62fd8ac0917510094160670d741779096095656a235b344d065ae2c7ec329251958b85f38d9c49edf0b76f1bb145a95cfafa963afdafc226d31b8cc630053dacf0495c8d3745ab", 0x9c}, {&(0x7f0000000840)="e70ba1f5b7c6040597e54843155b67cf36c0bc28621f802d06217a2a8d521d49b0015e0b458d6901abe700d896b88ee5fcc99b18975d922c96f48f18eec0e962b9e5180ed613aceb0fc29a1af671831218158f0517ee327c4119bafa0013696e83f1e7c0e5478b337d795accc11000ef1a1b1238650708abf66833228c09f0b7f079248c", 0x84}, {&(0x7f0000000900)="b142bb4abb1670beeff0c0243c873e264be126319228024154d0c80754ff273cdb1186c78af24d7bcde8cc74f074bbb83cfb920d662c743bd64f9afb18529c51a12912bcc8ee56cec9796c9acc958b2d41b17291379cca20c1084b641acc367ae5769318a411d4cc1653e899141e83c93aee4bf5", 0x74}, {&(0x7f0000000980)="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", 0xfe}, {&(0x7f0000000a80)="8ba2c7a0138c82e0d503d7f6074f13b76732ce5e09d0d9f2127e3e4d4ddc3bc5c7301ba42c5ee4e6f7d95b625a95fb6470598693d8e0487844c91404f6760949da2ffc8e5d1f837d6a050bd84d47443a167b66c34b804006f4255d8b14d59ff5bb2303d08fad96e1aea93aa844b9552f72ab6d07512516f5e21772173ee7952b3d2049fe50258d90414756382ad456cae112396bee3932a7fdb4589102a9c951a8b7767e646a90af421c62a424f9c5bba982af6806c85beb76636636fa5cd0103a6f13018145b6666935755e9c1ec76f39331891532f02548f9058d28cb3a0c50e892d136e7d78de6ef3d7c60061f88f6a041506587980", 0xf7}, {&(0x7f0000000b80)="86d9b0908d2de766b2d844fd748609deba259dcb909edf5816b815ce45bedc67103d237b8aea07022de6b0a5217b1c253b063ca4aa043e33cae839b78b25976a6b93ff25b5bd6dbcbda15f0e5b2deed8e2b815cb43209cc2c910ace1e9be6bb5fb5c444c1919c0d4030a3a4009feb3cd6230857934c29c48d65754e03f0519b5cf829d4e47e7cad3f1fcba3fe4ec7d4ac5fc30d051a97687d40c87d2f9589f6ad277a9485e0a009e200dbcaad1cbcd421dceae737de1b383905c10408155a1a84ac1918435b0", 0xc6}, {&(0x7f0000000c80)="b6fecfa451e36314fbaddbe9f0fb2d79ab2510db15bcc9c992258102100e8d8af430ce96c21d08a441b27ba372227e1785f732b0d2a6f8216007aaf365b0cdf3ef2fc8aeca5f4ac0cf4052470b592802b00278ea2fa29ab9c7ec1eeaa8a539463fb2be676de48c67baee30999bf38d1fd6", 0x71}], 0xa, &(0x7f0000000dc0)=[@assoc={0x18, 0x117, 0x4, 0x80}, @iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x101}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x6bb3ccf09e5cadeb}, @iv={0x20, 0x117, 0x2, 0xa, "06b32089835fcde6c2cf"}, @iv={0x1018, 0x117, 0x2, 0x1000, "dc9d2fc1bec143ac02ac5704814b8e320cda14331b7df11bb00cc03ffcf3b8ec02b538c636de74182a1798b3b8405167cadc03b829b6914ebc723a1a2cd97316312b0a50635eab4320bfed82748566626c8efdb0c6f12ace32a34e683804b653200aa6212ffedc508f7be7b4a85bda8fc3dc15c58669567b53e343072710452bc9d1b2a11c5d1202f3677b4ce42247f8782d63769477769aa6ea7ccd4c2a98fd7bef87e1f2ee099c4659cc659ce76036fab88ab3252dc580ba2c1162827a6d2984f6b9de536417f856e5b48d24dcbdca996eb412f6fd3c5ef46e8ff5a82421a18d5463bc404ce0ed108d396c88f20a105d7ec253f2f200b7a2896d0623ba1ac846924d900f91daae212b5e85a227d81c78abe3ed9e25d181cf7d37410b837975e3b1fc8f5040b8f85754b7c57e2fbea026b9415d5ea149081850cd552074fef2c7d83730a70198496487b65ab6efa283c31314c8bc195908876cd907434988709cad97fc6493545a54abd8110480da0ea70049ab3ae5ce5feedec3ce7e7b4dd74a02c00242d12f53ab2434ed7dafe451b39cca0b40872f8aab3bc5864c834255b523ff2e43d694444819675d81cfbaf50dbc71dc839a39ca2eca8f7cd225591735c95cdc978842c12e9616015eaff4184e94d1cf9b1c2daa1ed8e8c49cb166b2fb68057730ffa27e1170110217273ba698c0043563386e40f4ba809e1d55e6fa3f252d8db23cb2d0f7f4d079604bbccbcbbf7c7d32a94ba29b3f16072adb6d17cf361250d12a8d8c70ff17d23599a24f5fc18355987750e5393472a5ba8734c4e2c69d6cd83c9341e8f18c21be117693cbd1dfeb513184f8174b4a851c1b527f21f2d4d389ffc55bb4de705a52d27b954bb0e0b37955ae046714ebd404bd6ddcc4dfc7808aaffef97687917b0fcfe217b44dbae9b8d320ebc6e63e60c6f0c5167dbdec2e69ebca4f4999be3a0cb2e5aee4b2d4c51f6da5c7e897829f623823daffb4dea1db60ebc846157e37d8acb41cf34a8fe346ee0495a4719d3e11a3dbbee90136ee2cae1f21119a24cce7e3aadee05ede99eea69948688e3d5d2cb024b79620a1f6246cd4b49ac01f1d867e8be0b2cad952ba77bc6cfd085752f3cd7440c2859dcfe24aa2a2884fcd3ae3e8a607868449094e0e8981fafff5bff7573a30a3c27dc3a27865607372a0fa97c5979142a51a8f5ed8f335cb56f7b0dbd9dabd251961ef7d2cdfa62375d0edacf538cb2b04e073f85b8195d9ec207cdecb475f46484031f4324e05591eda6904c35e9396053d2521d3b8164944ddb2f00dc2a9f0eb7e61ea501d84737c40f550697488299286a947c3f351bc23a002839423825b7cae385873c8f972c0a887203c46cbdb49601986aabfd9a609e3fdb22583ff1fb34dd1b57541b0bad95e1bedf6f58e5bb40d77765b38cb5dd720714f29386001df8c217083ebe262d0ecbe2de7a5327408fd25915d37027f293df142e095c0aa0fa670dbfc38eb021409b502e8e5c3d5935439ec10f4c07a711369ec499aa1708bfb7908f08d9bf10c010ce633fdd3f0a8f8e0fc11b9591bf411be507dbfd7b76f32cccc10a9eb2a9ccf57fb98a5a57ca2979499c8ce7be6397dfac81a0d07023e55b29e85e7f195f0be5615811ba721ca9dd8a84418873acbc495f13887405a34721561b515a007d5669bc367a08e7bd0d7cf926f4935cfbe015d10a2e9957afe6510a80d1ea8302c7df3d4ff2a6f333c2f288e0677300e5e95ad448d190baba3c9eac985a436613784f3cd953d374dda9d06a4d5610796f83a250cb20c734c48e2766340ab82641b112c2335d81c12d5a5ab8f154ad37ae4704ef651c2a5e753a9d8857c257e17fe60159ef7fd880b39f3ed5fdf92dd5d9f521b58dea6cfc50c8280e80c31065a9f3efa4d97277aff4e24ea20a239f6292f692ebd0beb94f3929e1c4dd1c5541a3b12973cdc5e72a190c2ec43897da7f481efc32570d9672a1a7179de3b6a57cab47460e26e22938b4b47a3c02707e2f18ab0b6ad50b1be6a9e8e40510da58bfadbc65b5a89cacae674c4d1ee55ebe0f7ff8541749d24c6a7dcbf54fc72166caa9fabae53486d149a5a715e6b29a2f79451a85cbe1c5e71b7736d245bdc0cd14ee8c89970a221b011e9c8ebbe819bed7a3ee975008f3f2e23cc3c8857c259d484d7ed8a8e803a3605d2f12a39569267a5051d94c147b73398c10dfd1f580fbd94226b908a3d1c9eef486c30834556cb87fbfb133b22f71c3c590aa862a18f4cb6bcbb40114e6c0184d283f8dc21d78ede7b108e2485f7295a8c70946e0c859bc615ed9715633d5f9cf0b8307985d3457e572d5478d29c088148019ee97c7480bbfd37f2ab0a34aefa7f545e89d3fbe5c9de1e60a97c10921f86c550944ec2f9eef39696e9ab23a266637f8a510b67c17f0b9917d91a60813a184090e29841157cc65781d91943a0683e71581ccaeefca6289a74c9604f6f52ef0c0fe3531b37e853a8beddd9c37f3b544b16687363469c137eb9d2f8e37ce484ff2aa0d322a3c3e0daaddca11dbafefb9ccff8a0f729928634fe2c7716b5356be2993858ffc39423f8f294ebb6ea70c8e99b0497881d1c29cfaf1da449c741b83235b5277bb8030beec9a9785a44f7da5faf7dc3a82644f0e1c7f31ec1b84a6648e63888a33caaf0a734c3fca209ffff3800a9b8e0007f3663e4e8d80825b246c93dac9f03eb43df6dcb4c755ba8417535607d7b59d1200e1890d052daf9ba7dff3c6abada568407d96bf7d1f70fe04371e6f3cd44ec28582154a2d43f1634057fcd5b175f82fc91a3d6f3378c0212fc0484195f3f35976c8a7cf2b2806ebbdab84f948722b8b11a887ce3ebf4dbbb9a93cd37eb360cc19809550f8e982e1ec9959c240efe5d22636ed8439cc2c9f0a955ed808bb319a349224f4a0068c597bd4f98420e0ca2c93d3587469a8cb010a6c94ec3db5094143d7fb70ef25c6d5ddeec45781168d706e4c240523f555bb009a4f1b75115f5f7ed81ef58e8a67e113362b671d7982dfd327a70472e54c78b3b91823dcbef4941c884697b7b303bcb0dfc5758b9767422eac7ee220476f76d1f764c82036a8ae73ff3a8ee439297014c1d98010dc70f8edb4e2ade3d545ecb3e75dc5d4249b9d19596fdf0eefb519c51d7dff379680a0116ef37b7e034dc07ed35f9522f5cddda29e61ba890400e4b139aee018edffa33ce5e358727617bed0f3941238f6ceb97cf7b31f9f37e136280ea271bfae424ff582ff3013330ff919e53e6a78ccf7e69bb7a48f3a41efde131393786c1a130e0fbcbfc688da1d10408166c63300bb3ca63b1fee8960adea01db6aca1df1238e7bcfc5c91d27298c2a9f455b8dc5805ea849e943936bb39dfaf3444c4d9f4d9d6d19a5d9176a3a579ad025a5669012bb33230a7e85de389326dd5cadb3c8e846d3aba19543165a103b5a901efe1d6929df29ae5936cccb7b0a0552b74febb6e96d6089c214888897160fc9b5caa330c006fa24248a0f59ec51424ae64017ef3a978c959fa93f8fa50d4518198d379e84165fbd70fbf05e722d02ae298561b9fbd47f5329004388283807418695a6000094c5e2e8862201cf8ed4ba4fcfee6f1f3703a7303f0035e57d367def55fe60c7c20acd1c7404a6505106baffd070ecc0f0c926e807fa631fae6b65397c5f7399d6a78beafe9fb5cabbc58aaf485e9bccd52e095eadc71c57833eaed98d8ebd4d0f1120beb2a00916257461863b63a7a69595ce131fcffabe2349db4d078f29822f920e55df93c3b63c8454569630bcb68e8ba7741740ef430fbbb99a52bd1a3c1ecf1c90bb19fc37feffa211357b9dc776032ed24e8c77dc154910c7c8af3b25b17c66085c8c699bcd4176e73f5d7313e7ae0e9709c6781d957976279544ac0bb2ee145d42bcec3074d2ba93a0f479cd308531ddc86b77206981dade603e103deb0f0e376239b3acea1197525316aeedb57763d6bdcc0ec5b6ec9a8e645b7b787896e2b61fe429fb02fb35a575e6ae8236c5864b1fc1d51523b0abedf5ae5e8f5f6283bfec08ef14495d4b7e277c02a08fba0ffe51065e96ce5fe7b3a6171808c4984d98868f0d446635b06e77dfcea2dffe4133e1c299130b53eeea43335a336e4a250854ff9e1dd1c6c247672a9d293eef58972ffcb41437935a8757416d62e1ae7a20d4c53ae11e6a85d78b863b960bd49829b7e4a616d7444b2fd6c5da36015f46c23df21a72df59955e67163ca84f57457d7296d3f46bf2e6dd774208b636f21c84754269aefae21739f08d9b7fa754736763accd178b04f1b8b11a2e58e6dede68aa83d68135bc492aca17177d9e74c122bffac0d9acb3c761f593d6b5d7d99bede617b86017f1c2ea96538603050e369bf5af8927301b14b2dd147ac4d1e436824b7e33f227d1da214faf9a230ea29b93f36421172b8ad3e124277c976672a2862052d5ed6b789fa79205264f0c6bc87ca8bc747a7ae425066cd8a790bdad0ac5489822ea19b653bf5b3ff45b0c85222d02c80f3c8937003e96dab463d0baca4736e5c76fe9c24292e5e31e4280fafd17f7f11cce1fbd34035638d33aa72c934ad9b10acb9b38ca86937e6c6fdbdf72668238b04dccbaa6aced80a86c3a4dbd2511464d0088c0498d1e33f89741de6633d56485695ab47c69e70ab9aa4ec3e53e816fe4cc173d2627244ee1945c15b12ce5125ffbda468411c9f54cd8f9f47d2daf29869e2b239af6bf78a7ce53e670a5a46e254dd98e29683f425f48e1295b8948d1e00e09fabec5b756d1ab5a03c1feedb2aead83f2b03a6f5fdd85221ce9fdcdb7011b38c2ed3707d305221eca4950522f288cca060704031d7d9ee5ff21d850c2a77775a0899afd1b6ade5643e82a871dad56aac5a4495da9bf53bd90350e25e1ec5889d4b527baa97b442dd0b91b5d858c85cfc185e8a9fdebd2dace938397053582f3d02bbbd324eba338f850851d62c4062f7a131dc9edb1daa9f0e7d766105682148ef21dc77ab9d74b82e4ed11c55a84a3e347a0ce7b96ea45bc0f4af9004593c3e08bf7e02290b58ed6fd9d132776bc00626cfced0e84f2f3a2d7ef1f0f953f556fa4eb37f6ad8c304f61ffb4732df28111f11248b83eeec0706ae5e81e0d203fe0b819e5dac2069d5480cf3615f97b02fba36fdfd5afb88a387c6c82c443d469cd1d7a5186dd6bf9f33fa9f88e90bdcef024e2dade88ecfbbaa83f780a9f308e8cf0ad57891072ad2c8b1787e9f9e7828a6366bf67d03cb29cc62398cb1fc52874e6e3f8f7dcce0649243872570917e36dc5d94f2740e1b6c056d97e2372e7fe5f7927fdd04cf84e934b3c300b8fb07718e688947ac5995033cda91d305cedcc73397e5dce48be5fdc1dea9f654cefc914cd98f88bee8a9205da1bd2e9353446e6763d83dcce17d542c3f74c15ce655107f3e230b36d47e22221c75e2df301f4daf8f07b596e50d266095a27cf5d51e9fc0c927bd062e7d9ed648345f183b6b2da9f1f46314f70bd36b4305a6d7767d4bc5aaf24af7500da8283123f1ad200a83922d7beb17a0bde3b55618ee2b01e2aedeed77fae5fd7607710dec38f1cbbd159f6e45b72acdcc36c505c9d9d4868cea7f53fefb6c1f1ac08a5d3f967e7f3d241402acd81032a30748bb3e6376893c7e8bf5643c68cfedae046f1ef836231eac094cdac54495fac0010b90896b03cfe05637c357b7f32f7707bac0ee772f56100b3d393ff591bed385e54b6ca86f7a360cc97281d11f64e94ea43cc8bcdd"}], 0x10b0, 0x800}, {0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001e80)="127a15f6ef4f5ccdf203b7fbf98e678c65b0c81a8c2357cb3d7171c66963042a73f3a1234128c07f8b2ee2d241851ba3d6f6a8e5171e0ec19d40d35b7ae7abeca86489076379a0a7b5d9add2b852cbc71ad309ff14b4860b43ac1b56503e7c82fa649a5c6d27305260fd633b46dbea62a64711412058ddfd916de2d2a8016d276c551f171adcdd26c3f9c8a517d5d3e52386aaacd885986c1eb0aa1cd6f462cd7dbe9e2d2eaef75b11ff07d499d52bcd10e7", 0xb2}], 0x1, 0x0, 0x0, 0x4090}, {0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000001f80)="131320fa", 0x4}, {&(0x7f0000001fc0)="541450a543f98b3a7d74ec9eea2baf545ee1c5f7287f385f8cf057fd477633b742c0ba8a36bf71fd68fbf7c9a54b58ef4db284f72cd5caac5a3a1347a579baf835586ccc2349f5b14475d546ee4ccf078780e3c31a4f6668c321feb1c054851dcb5b6ca0debc46f870ff095b586468126eb83e47f94dcd4b76e1a96ae75026ffbc059b444da9d6f8dd4bd2e1047ff3a58f500c7e0b3cdc30f0552434c42e4fe2efd4726099f7dd43cb7bbad6c05a169349486c3b7f05223de660c019a6244f73104f", 0xc2}, {&(0x7f00000020c0)="5bcb6e5a834785ce1b270ebfb1ea4016eaca5e2029234a425e68a8fb297f1d94f06f6cbe38b24025d6fd16a7917d8a82e6ff1384836b05fbce2bf2cf892fe02d95dce9d3c228b28e40ee2590204b16aa0dd360c1095e6bf2e8271c7378a250556816b6dfc9156bfff34f44e9e6c803457422e887a47983be0a88c1bf3b6188664bce00d078e71d947f3efe8d2f186ed7b4d360b513552b7eb1a387fbb6f7ea7ddb3edd971a3109eff9947aae892ef2852a28ee68eb", 0xb5}, {&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000003180)="b1e709065660a2b8b135c5e98d44e885c265", 0x12}], 0x5, 0x0, 0x0, 0x4008041}, {0x0, 0x0, &(0x7f0000003280), 0x0, 0x0, 0x0, 0x41}], 0x5, 0x0) [ 685.215062][T25026] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:32:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x1000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 685.312632][T25026] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 685.331488][T25024] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 685.355276][T25024] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x2000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 685.392375][T25034] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 685.421977][T25034] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:14 executing program 1: unshare(0x40000000) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x30, 0x280, 0x0, 0x10, 0xffff, 0x3, 0xf, 0x0, {0xa0e, 0xfff, 0x1}, {0x1, 0x0, 0x1}, {0x101, 0xffffff01, 0x1}, {0x3, 0x1}, 0x2, 0x40, 0x1f, 0x8bd, 0x1, 0x4, 0x9, 0x5f0b, 0x52842824, 0xd36a, 0x401, 0xaabf, 0x10, 0x105, 0x0, 0x1}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x59) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 685.475453][ T2484] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 685.505398][T25024] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:32:14 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 685.528951][T25024] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x3000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 685.576348][T25041] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 685.672720][T25054] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 685.705175][T25057] IPVS: ftp: loaded support on port[0] = 21 [ 685.717189][T25054] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 685.730779][ T2484] usb 4-1: Using ep0 maxpacket: 8 [ 685.753988][T25044] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 685.797924][T25065] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 685.848778][T25065] device ipvlan2 entered promiscuous mode [ 685.856232][ T2484] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 685.889919][ T2484] usb 4-1: config 0 has no interface number 0 [ 685.928789][ T2484] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 685.950560][ T2484] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 685.963451][ T2484] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 685.981327][ T2484] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 685.991515][ T2484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.009722][ T2484] usb 4-1: config 0 descriptor?? [ 686.035223][T25025] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 686.042568][T25025] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 686.285445][T25025] FAULT_INJECTION: forcing a failure. [ 686.285445][T25025] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 686.298687][T25025] CPU: 0 PID: 25025 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 686.307023][T25025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.317088][T25025] Call Trace: [ 686.320405][T25025] dump_stack+0x188/0x20d [ 686.324767][T25025] should_fail.cold+0x5/0xa [ 686.329290][T25025] ? save_stack+0x1b/0x40 [ 686.333645][T25025] ? fault_create_debugfs_attr+0x140/0x140 [ 686.339470][T25025] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 686.345472][T25025] ? mark_lock+0x11f/0xdd0 [ 686.349916][T25025] __alloc_pages_nodemask+0x17a/0x810 [ 686.355313][T25025] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 686.362096][T25025] ? find_held_lock+0x2d/0x110 [ 686.366908][T25025] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 686.372749][T25025] cache_grow_begin+0x8c/0xc10 [ 686.377535][T25025] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 686.383018][T25025] kmem_cache_alloc_node_trace+0x6c3/0x790 [ 686.388839][T25025] ? free_object+0x70/0x70 [ 686.393361][T25025] ? lockdep_init_map_waits+0x26a/0x890 [ 686.398933][T25025] __kmalloc_node+0x38/0x60 [ 686.403467][T25025] kvmalloc_node+0x61/0xf0 [ 686.407916][T25025] open_substream+0x33d/0x880 [ 686.412628][T25025] rawmidi_open_priv+0x58e/0x6e0 [ 686.417597][T25025] snd_rawmidi_kernel_open+0x1b5/0x270 [ 686.423091][T25025] midisynth_use+0xee/0x250 [ 686.427677][T25025] ? midisynth_unsubscribe+0x70/0x70 [ 686.433102][T25025] ? down_write+0xdb/0x150 [ 686.437533][T25025] ? __down_timeout+0x2d0/0x2d0 [ 686.442397][T25025] ? up_write+0x148/0x470 [ 686.446746][T25025] check_and_subscribe_port+0x5b5/0x800 [ 686.452324][T25025] ? midisynth_unsubscribe+0x70/0x70 [ 686.457651][T25025] snd_seq_port_connect+0x381/0x510 [ 686.462888][T25025] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 686.468031][T25062] IPVS: ftp: loaded support on port[0] = 21 [ 686.468823][T25025] snd_seq_kernel_client_ctl+0xeb/0x130 [ 686.480272][T25025] snd_seq_oss_midi_open+0x50a/0x670 [ 686.485612][T25025] ? snd_seq_oss_midi_setup+0x50/0x50 [ 686.491013][T25025] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 686.496857][T25025] ? get_mdev+0x75/0x90 [ 686.501040][T25025] ? get_mididev.isra.0+0x76/0xa0 [ 686.506126][T25025] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 686.512060][T25025] snd_seq_oss_open+0x7fa/0x980 [ 686.517023][T25025] odev_open+0x6c/0x90 [ 686.521218][T25025] ? odev_release+0x70/0x70 [ 686.525748][T25025] soundcore_open+0x446/0x600 [ 686.530490][T25025] ? sound_devnode+0xf0/0xf0 [ 686.535136][T25025] chrdev_open+0x219/0x5c0 [ 686.539579][T25025] ? cdev_put.part.0+0x50/0x50 [ 686.545158][T25025] ? security_file_open+0x84/0x410 [ 686.550389][T25025] do_dentry_open+0x546/0x1340 [ 686.555174][T25025] ? cdev_put.part.0+0x50/0x50 [ 686.559961][T25025] ? security_inode_permission+0xc4/0xf0 [ 686.565611][T25025] ? chown_common+0x550/0x550 [ 686.570308][T25025] ? inode_permission+0xab/0x500 [ 686.576428][T25025] path_openat+0x1e59/0x27d0 [ 686.581083][T25025] ? path_lookupat.isra.0+0x530/0x530 [ 686.586477][T25025] ? lock_acquire+0x1f2/0x8f0 [ 686.591270][T25025] do_filp_open+0x192/0x260 [ 686.595795][T25025] ? may_open_dev+0xf0/0xf0 [ 686.600329][T25025] ? do_raw_spin_lock+0x129/0x2e0 [ 686.605389][T25025] ? _raw_spin_unlock+0x24/0x40 [ 686.610273][T25025] ? __alloc_fd+0x46d/0x600 [ 686.614840][T25025] do_sys_openat2+0x585/0x7d0 [ 686.619547][T25025] ? file_open_root+0x400/0x400 [ 686.624417][T25025] ? __mutex_unlock_slowpath+0xe2/0x660 [ 686.630022][T25025] ? wait_for_completion+0x270/0x270 [ 686.635442][T25025] ? __this_cpu_preempt_check+0x28/0x190 [ 686.641113][T25025] ? __sb_end_write+0x101/0x1d0 [ 686.645988][T25025] do_sys_open+0xc3/0x140 [ 686.650372][T25025] ? filp_open+0x70/0x70 [ 686.654638][T25025] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 686.662465][T25025] ? do_syscall_64+0x21/0x7d0 [ 686.667170][T25025] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 686.674135][T25025] do_syscall_64+0xf6/0x7d0 [ 686.678661][T25025] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 686.684566][T25025] RIP: 0033:0x45ca59 [ 686.688475][T25025] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 686.708241][T25025] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 686.716675][T25025] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 686.724761][T25025] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 686.732747][T25025] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 686.740738][T25025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 686.748730][T25025] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 686.822854][T25096] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 686.868853][T25096] device ipvlan2 entered promiscuous mode [ 686.961578][ T12] usb 4-1: USB disconnect, device number 39 22:32:16 executing program 3 (fault-call:4 fault-nth:35): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:32:16 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:32:16 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9020000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:32:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x4000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:32:16 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000002, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000173000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/xfrm_stat\x00') ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000080)) 22:32:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x5000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 687.680998][T25150] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 687.741472][T25150] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 687.810480][T25151] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 687.838097][T25151] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 687.884875][T25160] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 687.913803][T25160] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x6000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 687.980837][T25157] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:32:17 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 688.028271][T22180] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 688.030260][T25157] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:17 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 688.231879][T25169] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 688.277552][T22180] usb 4-1: Using ep0 maxpacket: 8 [ 688.285773][T25169] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 688.371237][T25174] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 688.398000][T22180] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 688.406401][T22180] usb 4-1: config 0 has no interface number 0 [ 688.440955][T25174] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 688.458763][T22180] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 688.487932][T25175] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 688.511357][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 688.517888][T25175] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 688.559232][T22180] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 688.620970][T22180] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 688.661244][T22180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.703563][T22180] usb 4-1: config 0 descriptor?? [ 688.751693][T25156] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 688.765112][T25175] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 688.784883][T25156] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 688.819864][T25175] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 689.071228][T25154] FAULT_INJECTION: forcing a failure. [ 689.071228][T25154] name failslab, interval 1, probability 0, space 0, times 0 [ 689.102533][T25154] CPU: 0 PID: 25154 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 689.111089][T25154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 689.121161][T25154] Call Trace: [ 689.124475][T25154] dump_stack+0x188/0x20d [ 689.128850][T25154] should_fail.cold+0x5/0xa [ 689.133392][T25154] ? fault_create_debugfs_attr+0x140/0x140 [ 689.139264][T25154] should_failslab+0x5/0xf [ 689.143687][T25154] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 689.149070][T25154] ? mutex_trylock+0x2c0/0x2c0 [ 689.153877][T25154] ? snd_seq_oss_midi_open+0x3ee/0x670 [ 689.159354][T25154] ? snd_seq_oss_synth_setup_midi+0x123/0x520 [ 689.165441][T25154] ? snd_seq_oss_open+0x7fa/0x980 [ 689.170496][T25154] open_substream+0xe9/0x880 [ 689.175103][T25154] rawmidi_open_priv+0x2e8/0x6e0 [ 689.180061][T25154] snd_rawmidi_kernel_open+0x1b5/0x270 [ 689.185543][T25154] midisynth_subscribe+0xf2/0x350 [ 689.190586][T25154] ? midisynth_use+0x250/0x250 [ 689.195368][T25154] ? down_write+0xdb/0x150 [ 689.199792][T25154] ? __down_timeout+0x2d0/0x2d0 [ 689.204643][T25154] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 689.210642][T25154] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 689.216908][T25154] check_and_subscribe_port+0x5b5/0x800 [ 689.222477][T25154] ? midisynth_use+0x250/0x250 [ 689.227290][T25154] snd_seq_port_connect+0x2e4/0x510 [ 689.232575][T25154] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 689.238500][T25154] snd_seq_kernel_client_ctl+0xeb/0x130 [ 689.244078][T25154] snd_seq_oss_midi_open+0x3ee/0x670 [ 689.249381][T25154] ? snd_seq_oss_midi_setup+0x50/0x50 [ 689.254765][T25154] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 689.260595][T25154] ? get_mdev+0x75/0x90 [ 689.264777][T25154] ? get_mididev.isra.0+0x76/0xa0 [ 689.269835][T25154] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 689.275749][T25154] snd_seq_oss_open+0x7fa/0x980 [ 689.280623][T25154] odev_open+0x6c/0x90 [ 689.284703][T25154] ? odev_release+0x70/0x70 [ 689.289212][T25154] soundcore_open+0x446/0x600 [ 689.293899][T25154] ? sound_devnode+0xf0/0xf0 [ 689.298523][T25154] chrdev_open+0x219/0x5c0 [ 689.302960][T25154] ? cdev_put.part.0+0x50/0x50 [ 689.307746][T25154] ? security_file_open+0x84/0x410 [ 689.313015][T25154] do_dentry_open+0x546/0x1340 [ 689.317857][T25154] ? cdev_put.part.0+0x50/0x50 [ 689.322636][T25154] ? security_inode_permission+0xc4/0xf0 [ 689.328269][T25154] ? chown_common+0x550/0x550 [ 689.332950][T25154] ? inode_permission+0xab/0x500 [ 689.337937][T25154] path_openat+0x1e59/0x27d0 [ 689.342633][T25154] ? path_lookupat.isra.0+0x530/0x530 [ 689.348025][T25154] do_filp_open+0x192/0x260 [ 689.352617][T25154] ? may_open_dev+0xf0/0xf0 [ 689.357140][T25154] ? do_raw_spin_lock+0x129/0x2e0 [ 689.362177][T25154] ? _raw_spin_unlock+0x24/0x40 [ 689.367227][T25154] ? __alloc_fd+0x46d/0x600 [ 689.371780][T25154] do_sys_openat2+0x585/0x7d0 [ 689.376495][T25154] ? file_open_root+0x400/0x400 [ 689.381361][T25154] ? __mutex_unlock_slowpath+0xe2/0x660 [ 689.386965][T25154] ? wait_for_completion+0x270/0x270 [ 689.392290][T25154] ? __this_cpu_preempt_check+0x28/0x190 [ 689.397964][T25154] ? __sb_end_write+0x101/0x1d0 [ 689.402938][T25154] do_sys_open+0xc3/0x140 [ 689.407441][T25154] ? filp_open+0x70/0x70 [ 689.411721][T25154] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 689.417734][T25154] ? do_syscall_64+0x21/0x7d0 [ 689.422431][T25154] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 689.428680][T25154] do_syscall_64+0xf6/0x7d0 [ 689.433172][T25154] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 689.439046][T25154] RIP: 0033:0x45ca59 [ 689.442964][T25154] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 689.462754][T25154] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 689.471254][T25154] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 689.479236][T25154] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 689.487293][T25154] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 689.495865][T25154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 689.503906][T25154] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 689.743247][ T17] usb 4-1: USB disconnect, device number 40 22:32:19 executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x4d4900, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000100)={[{@nolazytime='nolazytime'}, {@usrjquota='usrjquota='}, {@commit={'commit', 0x3d, 0x4d}}]}) 22:32:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x8000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:32:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000200)=""/244, 0xf4}, &(0x7f0000000040), 0x4d}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 22:32:19 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:32:19 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:32:19 executing program 3 (fault-call:4 fault-nth:36): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:32:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x9000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 690.697521][T25228] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 690.728885][T25228] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 690.773152][T25224] ISOFS: Unable to identify CD-ROM format. [ 690.793071][T25227] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 690.839920][T25227] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xa000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 690.892797][T25235] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 690.931894][T25235] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 690.956985][ T17] usb 4-1: new high-speed USB device number 41 using dummy_hcd 22:32:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xb000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 691.000694][T25232] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:32:20 executing program 5: perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d04, &(0x7f0000000100)) syz_mount_image$ocfs2(&(0x7f0000000180)='ocfs2\x00', 0x0, 0x0, 0x6, &(0x7f0000000640)=[{0x0, 0x0, 0x7fff}, {&(0x7f0000000340)="5b69caf6116a95f8c0ba7384c68e9a4bc22babfda61693093312f5105361086cfc40ebe5d3bac9a439e9d091b1b17db0463d66719690d9ecdfc06b4eea005a13ec02a291e881d66d6b2c8e9a927a1b9b1b8cbc", 0x53, 0x90c}, {0x0}, {&(0x7f00000003c0)}, {0x0}, {0x0, 0x0, 0x2}], 0x2140f0, &(0x7f0000000740)='\xaf\x00') write(r1, &(0x7f0000001400)="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"/3584, 0xe00) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) fallocate(r1, 0x0, 0x0, 0x10000) sendfile(r1, r2, 0x0, 0x11f08) 22:32:20 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 691.057412][T25232] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:20 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 691.221487][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 691.293890][T25252] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 691.340221][ T17] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 691.348420][ T17] usb 4-1: config 0 has no interface number 0 [ 691.364121][ T28] audit: type=1800 audit(1593037940.514:1162): pid=25250 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16248 res=0 [ 691.397133][T25252] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 691.413331][ T17] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 691.429020][T25255] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 691.480169][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 691.483630][T25255] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 691.500929][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 691.566932][ T17] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 691.586080][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.631942][T25231] EXT4-fs (sda1): re-mounted. Opts: nolazytime,usrjquota=,commit=0x000000000000004d, [ 691.643769][ T17] usb 4-1: config 0 descriptor?? [ 691.667495][T25260] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:32:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000)=0x7ff, 0x4) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) r5 = request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)='\x00', r4) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000280)='#\xdb\xb0$Q\xa3\x9a,\xaeS\x18\xde\x88\xe4I\xa0:L', &(0x7f0000000180)) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r1}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2404c72c, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffffe0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r3, 0x0, r2, 0x0, 0x7fffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x810, r7, 0x10000000) 22:32:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xe000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:32:20 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:32:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0xc008ae88, &(0x7f0000001a40)={"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"}) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@nolazytime='nolazytime'}], [{@subj_role={'subj_role', 0x3d, '\xa3'}}, {@appraise_type='appraise_type=imasig'}, {@subj_user={'subj_user', 0x3d, '/dev/kvm\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 691.690205][T25223] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 691.698257][T25223] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 691.720114][T25260] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:21 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 691.889505][T25288] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 691.909119][T25288] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 691.950919][T25295] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 691.981136][T25223] FAULT_INJECTION: forcing a failure. [ 691.981136][T25223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 691.994995][T25223] CPU: 1 PID: 25223 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 691.996690][T25295] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 692.003698][T25223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.003706][T25223] Call Trace: [ 692.003736][T25223] dump_stack+0x188/0x20d [ 692.003757][T25223] should_fail.cold+0x5/0xa [ 692.003774][T25223] ? save_stack+0x1b/0x40 [ 692.003790][T25223] ? fault_create_debugfs_attr+0x140/0x140 [ 692.003807][T25223] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 692.003823][T25223] ? mark_lock+0x11f/0xdd0 [ 692.003840][T25223] __alloc_pages_nodemask+0x17a/0x810 [ 692.003859][T25223] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 692.003874][T25223] ? find_held_lock+0x2d/0x110 [ 692.003893][T25223] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 692.003919][T25223] cache_grow_begin+0x8c/0xc10 [ 692.100120][T25223] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 692.105607][T25223] kmem_cache_alloc_node_trace+0x6c3/0x790 [ 692.113193][T25223] ? free_object+0x70/0x70 [ 692.117775][T25223] ? lockdep_init_map_waits+0x26a/0x890 [ 692.123983][T25223] __kmalloc_node+0x38/0x60 [ 692.128703][T25223] kvmalloc_node+0x61/0xf0 [ 692.133346][T25223] open_substream+0x33d/0x880 [ 692.138420][T25223] rawmidi_open_priv+0x2e8/0x6e0 [ 692.143384][T25223] snd_rawmidi_kernel_open+0x1b5/0x270 [ 692.148868][T25223] midisynth_subscribe+0xf2/0x350 [ 692.153923][T25223] ? midisynth_use+0x250/0x250 [ 692.158972][T25223] ? down_write+0xdb/0x150 [ 692.163635][T25223] ? __down_timeout+0x2d0/0x2d0 [ 692.169646][T25223] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 692.175645][T25223] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 692.182717][T25300] xfs: Unknown parameter 'subj_role' [ 692.183725][T25223] check_and_subscribe_port+0x5b5/0x800 [ 692.194753][T25223] ? midisynth_use+0x250/0x250 [ 692.199768][T25223] snd_seq_port_connect+0x2e4/0x510 [ 692.205021][T25223] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 692.211052][T25223] snd_seq_kernel_client_ctl+0xeb/0x130 [ 692.218879][T25223] snd_seq_oss_midi_open+0x3ee/0x670 [ 692.224933][T25223] ? snd_seq_oss_midi_setup+0x50/0x50 [ 692.231073][T25223] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 692.238195][T25223] ? get_mdev+0x75/0x90 [ 692.243503][T25223] ? get_mididev.isra.0+0x76/0xa0 [ 692.249045][T25223] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 692.255450][T25223] snd_seq_oss_open+0x7fa/0x980 [ 692.260684][T25223] odev_open+0x6c/0x90 [ 692.264960][T25223] ? odev_release+0x70/0x70 [ 692.269485][T25223] soundcore_open+0x446/0x600 [ 692.274186][T25223] ? sound_devnode+0xf0/0xf0 [ 692.278827][T25223] chrdev_open+0x219/0x5c0 [ 692.283744][T25223] ? cdev_put.part.0+0x50/0x50 [ 692.288810][T25223] ? security_file_open+0x84/0x410 [ 692.294479][T25223] do_dentry_open+0x546/0x1340 [ 692.299462][T25223] ? cdev_put.part.0+0x50/0x50 [ 692.304680][T25223] ? security_inode_permission+0xc4/0xf0 [ 692.311590][T25223] ? chown_common+0x550/0x550 [ 692.316427][T25223] ? inode_permission+0xab/0x500 [ 692.321425][T25223] path_openat+0x1e59/0x27d0 [ 692.326045][T25223] ? path_lookupat.isra.0+0x530/0x530 [ 692.331583][T25223] do_filp_open+0x192/0x260 [ 692.336248][T25223] ? may_open_dev+0xf0/0xf0 [ 692.340796][T25223] ? do_raw_spin_lock+0x129/0x2e0 [ 692.345869][T25223] ? _raw_spin_unlock+0x24/0x40 [ 692.350933][T25223] ? __alloc_fd+0x46d/0x600 [ 692.355560][T25223] do_sys_openat2+0x585/0x7d0 [ 692.360261][T25223] ? file_open_root+0x400/0x400 [ 692.365123][T25223] ? __mutex_unlock_slowpath+0xe2/0x660 [ 692.371097][T25223] ? wait_for_completion+0x270/0x270 [ 692.376379][T25223] ? __this_cpu_preempt_check+0x28/0x190 [ 692.382020][T25223] ? __sb_end_write+0x101/0x1d0 [ 692.387837][T25223] do_sys_open+0xc3/0x140 [ 692.392547][T25223] ? filp_open+0x70/0x70 [ 692.397787][T25223] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 692.404055][T25223] ? do_syscall_64+0x21/0x7d0 [ 692.408853][T25223] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 692.415957][T25223] do_syscall_64+0xf6/0x7d0 [ 692.420478][T25223] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 692.426485][T25223] RIP: 0033:0x45ca59 [ 692.430380][T25223] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 692.451926][T25223] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 692.460959][T25223] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 692.468958][T25223] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 692.477065][T25223] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 692.485049][T25223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 692.493373][T25223] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 692.529440][T25296] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 692.566970][T25296] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 692.613826][T25296] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 692.638916][T25296] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 692.812856][T23919] usb 4-1: USB disconnect, device number 41 22:32:22 executing program 3 (fault-call:4 fault-nth:37): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:32:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xf000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:32:22 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:32:22 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5}, 0x20) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff777e, &(0x7f000006ffe4)={0xa, 0x4e21, 0x0, @mcast2, 0xff}, 0x1c) sendto$inet6(r1, &(0x7f0000001600)="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", 0x106a, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1}, 0x40000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000340)=0x3d) 22:32:22 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:32:22 executing program 1: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x3, 0xa, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x40}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0xe80, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8ffffffff00000000122e25d386dd", 0x0, 0x3b, 0x0, 0x22d}, 0x28) 22:32:22 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) setuid(0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000001001c00128009000100626f6e44000000000c00028008000700ffffffff"], 0x3c}}, 0x0) r6 = pidfd_getfd(r4, r5, 0x0) connect$pppoe(r6, &(0x7f0000000180)={0x18, 0x0, {0x2, @empty, 'erspan0\x00'}}, 0x1e) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x92080, 0x0) ioctl$SG_GET_NUM_WAITING(r7, 0x227d, &(0x7f0000000140)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 693.561928][T25347] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:32:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x10000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 693.621711][T25347] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 693.672762][T25352] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:32:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x62642, 0x0) syz_usb_connect$cdc_ncm(0x2, 0xb4, &(0x7f0000000440)=ANY=[@ANYBLOB="12010102020000402505a1a44000010203010902a20002010480010904000001020d00000a2406000166a45a74d705240000000d240f010400000003000700ff06241a00000410240701070071bbb902ff7f040000801224070101000100020007000800bb8a02000c241b004c0000018101040407240ad81f08000c241b6d00800000382e500106000809058103ff020205fc0904010000020d00000904010102020d000009058202400007050009050302ff03"], &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x0, 0x7, 0x3, 0x28}, 0x25, &(0x7f0000000140)={0x5, 0xf, 0x25, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x81, 0x3f, 0xcaa3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x81, 0x85, 0x8}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x7fffff9, 0x1e, 0x69}]}, 0x3, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x441}}, {0x70, &(0x7f0000000500)=@string={0x70, 0x3, "255472839d7f5a8de81cffa1a7d5783d9a5af47639b6b53faeddc8ce9f23bcd5961504b3c12cf071209636534020cb545663e4eb9148bb803632b9f18d2f7ef10ae29ebb66bbb889b64139c73a6efad39cfaa2efe2024e81f949123c9c4faf8f04f5b684974ce9968078e7f53364"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x416}}]}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, 0xffffffffffffffff, &(0x7f00000005c0)={r0, r0, 0x3}) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x164, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x955000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x309}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x968b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeea}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}]}]}, 0x164}, 0x1, 0x0, 0x0, 0xc094}, 0x10) [ 693.721125][T25352] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 693.825989][T25360] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 693.875373][T25360] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 693.901554][T25358] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:32:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x11000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:32:23 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 693.943694][T25358] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 693.963663][ T3355] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 693.978135][T25372] IPVS: ftp: loaded support on port[0] = 21 22:32:23 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x291}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 694.209334][T25389] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 694.232528][ T3355] usb 4-1: Using ep0 maxpacket: 8 [ 694.242280][ T2484] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 694.288651][T25389] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 694.316531][T25397] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 694.341426][T25397] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 694.379345][T25400] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 694.402520][ T3355] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 694.421804][T25400] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 694.434079][ T3355] usb 4-1: config 0 has no interface number 0 [ 694.440421][ T3355] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 694.471667][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 694.501570][ T3355] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 694.512950][ T3355] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 694.523132][ T3355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.546012][T25401] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 694.571439][T25401] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 694.572039][ T3355] usb 4-1: config 0 descriptor?? [ 694.622597][T25355] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 694.630132][T25355] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 694.641840][ T2484] usb 6-1: not running at top speed; connect to a high speed hub [ 694.669907][ T7] tipc: TX() has been purged, node left! [ 694.721693][ T2484] usb 6-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 694.766730][ T2484] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 694.798646][ T2484] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 694.906727][T25351] FAULT_INJECTION: forcing a failure. [ 694.906727][T25351] name failslab, interval 1, probability 0, space 0, times 0 [ 694.940098][T25351] CPU: 1 PID: 25351 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 694.948490][T25351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.958557][T25351] Call Trace: [ 694.961879][T25351] dump_stack+0x188/0x20d [ 694.966244][T25351] should_fail.cold+0x5/0xa [ 694.970780][T25351] ? fault_create_debugfs_attr+0x140/0x140 [ 694.976966][T25351] should_failslab+0x5/0xf [ 694.981414][T25351] kmem_cache_alloc_node_trace+0x27c/0x790 [ 694.987396][T25351] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 694.993338][T25351] ? free_object+0x70/0x70 [ 694.997783][T25351] ? lockdep_init_map_waits+0x26a/0x890 [ 695.003355][T25351] __kmalloc_node+0x38/0x60 [ 695.007883][T25351] kvmalloc_node+0x61/0xf0 [ 695.012111][ T2484] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 695.012321][T25351] open_substream+0x33d/0x880 [ 695.022328][ T2484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.026072][T25351] rawmidi_open_priv+0x2e8/0x6e0 [ 695.026093][T25351] snd_rawmidi_kernel_open+0x1b5/0x270 [ 695.026116][T25351] midisynth_subscribe+0xf2/0x350 [ 695.026133][T25351] ? midisynth_use+0x250/0x250 [ 695.026152][T25351] ? down_write+0xdb/0x150 [ 695.026171][T25351] ? __down_timeout+0x2d0/0x2d0 [ 695.035900][ T2484] usb 6-1: Product: Ж [ 695.039264][T25351] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 695.039286][T25351] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 695.039313][T25351] check_and_subscribe_port+0x5b5/0x800 [ 695.039337][T25351] ? midisynth_use+0x250/0x250 [ 695.039360][T25351] snd_seq_port_connect+0x2e4/0x510 [ 695.045067][ T2484] usb 6-1: Manufacturer: 吥荲羝赚᳨ꇿ햧㵸媚直똹㾵컈⎟햼ᖖ댄ⳁ燰阠匶⁀哋捖䢑肻㈶⾍뮞뭦覸䆶윹渺폺煮ˢ腎䧹㰒侜辯蒶䲗雩碀搳 [ 695.049844][T25351] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 695.049870][T25351] snd_seq_kernel_client_ctl+0xeb/0x130 [ 695.049890][T25351] snd_seq_oss_midi_open+0x3ee/0x670 [ 695.049909][T25351] ? snd_seq_oss_midi_setup+0x50/0x50 [ 695.056146][ T2484] usb 6-1: SerialNumber: syz [ 695.059079][T25351] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 695.059107][T25351] ? get_mdev+0x75/0x90 [ 695.059122][T25351] ? get_mididev.isra.0+0x76/0xa0 [ 695.059143][T25351] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 695.161706][T25351] snd_seq_oss_open+0x7fa/0x980 [ 695.166599][T25351] odev_open+0x6c/0x90 [ 695.170771][T25351] ? odev_release+0x70/0x70 [ 695.175293][T25351] soundcore_open+0x446/0x600 [ 695.180004][T25351] ? sound_devnode+0xf0/0xf0 [ 695.184747][T25351] chrdev_open+0x219/0x5c0 [ 695.189195][T25351] ? cdev_put.part.0+0x50/0x50 [ 695.194006][T25351] ? security_file_open+0x84/0x410 [ 695.199217][T25351] do_dentry_open+0x546/0x1340 [ 695.204186][T25351] ? cdev_put.part.0+0x50/0x50 [ 695.211069][T25351] ? security_inode_permission+0xc4/0xf0 [ 695.216741][T25351] ? chown_common+0x550/0x550 [ 695.221471][T25351] ? inode_permission+0xab/0x500 [ 695.226453][T25351] path_openat+0x1e59/0x27d0 [ 695.231086][T25351] ? path_lookupat.isra.0+0x530/0x530 [ 695.236475][T25351] ? perf_trace_lock+0xe2/0x4b0 [ 695.241609][T25351] ? debug_smp_processor_id+0x2f/0x185 [ 695.247106][T25351] ? perf_trace_lock+0xe2/0x4b0 [ 695.251996][T25351] ? __bfs+0x520/0x520 [ 695.256106][T25351] do_filp_open+0x192/0x260 [ 695.260643][T25351] ? may_open_dev+0xf0/0xf0 [ 695.265316][T25351] ? do_raw_spin_lock+0x129/0x2e0 [ 695.270387][T25351] ? _raw_spin_unlock+0x24/0x40 [ 695.275259][T25351] ? __alloc_fd+0x46d/0x600 [ 695.279805][T25351] do_sys_openat2+0x585/0x7d0 [ 695.284505][T25351] ? file_open_root+0x400/0x400 [ 695.289476][T25351] ? __mutex_unlock_slowpath+0xe2/0x660 [ 695.295059][T25351] ? wait_for_completion+0x270/0x270 [ 695.300374][T25351] ? __this_cpu_preempt_check+0x28/0x190 [ 695.306034][T25351] ? __sb_end_write+0x101/0x1d0 [ 695.310911][T25351] do_sys_open+0xc3/0x140 [ 695.315261][T25351] ? filp_open+0x70/0x70 [ 695.319533][T25351] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 695.325534][T25351] ? do_syscall_64+0x21/0x7d0 [ 695.330242][T25351] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 695.336254][T25351] do_syscall_64+0xf6/0x7d0 [ 695.340783][T25351] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 695.346689][T25351] RIP: 0033:0x45ca59 [ 695.350602][T25351] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 695.370224][T25351] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 695.378693][T25351] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 695.386680][T25351] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 695.394664][T25351] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 695.402652][T25351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 695.410638][T25351] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 695.435148][T23919] usb 4-1: USB disconnect, device number 42 [ 695.470549][ T2484] cdc_ncm 6-1:1.0: skipping garbage [ 695.475818][ T2484] cdc_ncm 6-1:1.0: skipping garbage [ 695.504873][ T2484] cdc_ncm 6-1:1.0: bind() failure [ 695.549370][ T2484] usb 6-1: USB disconnect, device number 60 22:32:25 executing program 3 (fault-call:4 fault-nth:38): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:32:25 executing program 1: r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) read(r0, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f00000000c0)={0xec6, 0x81, 0x0, 'queue1\x00'}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) close(0xffffffffffffffff) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r3, r4) 22:32:25 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:32:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x12000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:32:25 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:32:25 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:32:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x12060000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 696.123173][T25457] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 696.178418][T25457] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 696.262622][T25460] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 696.291845][T25460] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x13000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 696.334997][T25461] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 696.351254][T25461] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 696.367391][T25462] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 22:32:25 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x3, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) [ 696.411358][T25462] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 696.472224][T25471] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 696.506713][ T12] usb 4-1: new high-speed USB device number 43 using dummy_hcd 22:32:25 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) [ 696.517293][T25471] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:25 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4ba2, 0x4) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000000c0)) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000380)=0xf801fffe, 0x4) sendto$unix(r0, &(0x7f0000000140)="1d9b000000007675d706d94e590291c9900d3be5299d0a4d3d1891a1fe3d8edd715c9f981c39daefbae33fbd06698cc347008df8", 0x34, 0x0, &(0x7f0000000000)=@abs, 0x6e) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000100626f6e64000000000c00028008000701ff7edb424f4078107dca221933ffffff000000000000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4e04b0d037a25748c3d9d58bc3c00000010008183aae09742af4375e92818e11348abd32ad80723964c8e8f5404a667bfd7bdce75da65e7e6984003a71c3710acc5ee9e2f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000700ffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000740)={0x20000, 0x3fffc00, 0x3f, 0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x0, 0xfff, [], @ptr=0x8}}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000780)='/dev/full\x00', 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000002c0)="2a4d24e3cfac216820042c477c74bc037e69df56b26c9ce025439afe90bc930b182365ae2647ac4c698945ef9d95879f018e4013cb43ea1425a8f991028ce5dfb774b6125a2b92db45b0bbf4f170af4f9758f3bd5fb2aec2ea1af0e65d5e08d9605c8b514b916bd56fcf83d4aa949f2f236f73512202453dcffbe09b97bd1f942615dcda6a09a18a7bdc439b5f33513ddde6ea8efa6947b0c6078062b5803337efeceea4ffd42c99d7766ef8a5", 0xad}, {&(0x7f00000003c0)="a0eab733013fefd643945bcdd0e967fb92b0b15742b8ec035c045633f306283260ebbeff49569346f67535d02955124e24a094412cad3ec5514bc1dbcafb644feaa295571b4401a972d983065d5f6748f4b2afe019804657089e190901e15b3f06d54e5eaf6bb522a81d0c86bc555edfe29cfdfde03eb14bcb672c8ed0ceba72f807e1d305d3ce90b04731b6b263b6e0757efffec6d189d088a97a17074ba69581db4eef010cd6e0d053e3737a0ed6157b12fb72657258afccadbee6f707bc235f42cc383fb69d128462ff9cb0ce9cc07d66cfb2323eada8c41d9d0b08fa4636ef37dd6ef23d2faf0289c547071cce53f06b", 0xf2}, {&(0x7f00000004c0)="e021dc49650a9cc06b1560cb796436154cebb5aae70d1c9dafb49f7e27cabab295d4bd535a6ac9eec170", 0x2a}], 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="7a80699ec74ee98adf7ae5222bda3400005b3e634700ff0f000000000000", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x40000}, 0x48040) ptrace$cont(0x7, r1, 0x0, 0x0) r6 = syz_open_procfs(r1, &(0x7f0000000100)='net/netlink\x00') ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e22, @local}, {0x2, 0x4e23, @remote}, 0xa, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='team_slave_1\x00', 0x3800000, 0x4f7f44b5, 0x7}) 22:32:25 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 696.731953][T25484] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! [ 696.746027][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 696.748074][T25483] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 696.776108][T25483] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 696.813949][T25488] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 696.845527][T25488] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 696.866535][ T12] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 696.874579][ T12] usb 4-1: config 0 has no interface number 0 [ 696.886104][T25483] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 696.901965][ T12] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 696.911011][T25483] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 696.947132][ T12] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 696.979865][ T12] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 697.013597][ T12] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 697.034499][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.055736][ T12] usb 4-1: config 0 descriptor?? [ 697.094153][T25466] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 697.110709][T25466] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 697.358899][T25463] FAULT_INJECTION: forcing a failure. [ 697.358899][T25463] name failslab, interval 1, probability 0, space 0, times 0 [ 697.400435][T25463] CPU: 1 PID: 25463 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 697.409094][T25463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.419257][T25463] Call Trace: [ 697.422656][T25463] dump_stack+0x188/0x20d [ 697.427026][T25463] should_fail.cold+0x5/0xa [ 697.431570][T25463] ? fault_create_debugfs_attr+0x140/0x140 [ 697.437660][T25463] should_failslab+0x5/0xf [ 697.442208][T25463] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 697.447830][T25463] ? __lock_acquire+0x2224/0x48a0 [ 697.452990][T25463] dummy_urb_enqueue+0x82/0x8a0 [ 697.457934][T25463] ? usb_hcd_map_urb_for_dma+0x4aa/0x14f0 [ 697.463827][T25463] usb_hcd_submit_urb+0x2aa/0x1ee0 [ 697.469387][T25463] ? snd_rawmidi_kernel_open+0x1b5/0x270 [ 697.475045][T25463] ? usb_create_hcd+0x30/0x30 [ 697.479755][T25463] ? __mutex_lock+0x460/0x13c0 [ 697.484676][T25463] ? do_sys_open+0xc3/0x140 [ 697.489211][T25463] ? lock_release+0x800/0x800 [ 697.494093][T25463] ? substream_open.isra.0+0xab/0x830 [ 697.499491][T25463] usb_submit_urb+0x6e5/0x13b0 [ 697.504277][T25463] ? down_read+0x110/0x420 [ 697.508713][T25463] snd_usbmidi_submit_urb+0x19/0x60 [ 697.513935][T25463] snd_usbmidi_input_start.part.0+0xbe/0x1c0 [ 697.519947][T25463] substream_open.isra.0+0x505/0x830 [ 697.525257][T25463] open_substream+0x42e/0x880 [ 697.529953][T25463] rawmidi_open_priv+0x2e8/0x6e0 [ 697.535103][T25463] snd_rawmidi_kernel_open+0x1b5/0x270 [ 697.540588][T25463] midisynth_subscribe+0xf2/0x350 [ 697.545637][T25463] ? midisynth_use+0x250/0x250 [ 697.550423][T25463] ? down_write+0xdb/0x150 [ 697.554859][T25463] ? __down_timeout+0x2d0/0x2d0 [ 697.559732][T25463] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 697.565733][T25463] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 697.571655][T25463] check_and_subscribe_port+0x5b5/0x800 [ 697.577227][T25463] ? midisynth_use+0x250/0x250 [ 697.582101][T25463] snd_seq_port_connect+0x2e4/0x510 [ 697.587325][T25463] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 697.593355][T25463] snd_seq_kernel_client_ctl+0xeb/0x130 [ 697.598916][T25463] snd_seq_oss_midi_open+0x3ee/0x670 [ 697.604235][T25463] ? snd_seq_oss_midi_setup+0x50/0x50 [ 697.609620][T25463] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 697.615586][T25463] ? get_mdev+0x75/0x90 [ 697.619757][T25463] ? get_mididev.isra.0+0x76/0xa0 [ 697.624794][T25463] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 697.630702][T25463] snd_seq_oss_open+0x7fa/0x980 [ 697.635569][T25463] odev_open+0x6c/0x90 [ 697.639642][T25463] ? odev_release+0x70/0x70 [ 697.644177][T25463] soundcore_open+0x446/0x600 [ 697.648874][T25463] ? sound_devnode+0xf0/0xf0 [ 697.653563][T25463] chrdev_open+0x219/0x5c0 [ 697.657990][T25463] ? cdev_put.part.0+0x50/0x50 [ 697.662766][T25463] ? security_file_open+0x84/0x410 [ 697.667906][T25463] do_dentry_open+0x546/0x1340 [ 697.672771][T25463] ? cdev_put.part.0+0x50/0x50 [ 697.677561][T25463] ? security_inode_permission+0xc4/0xf0 [ 697.683221][T25463] ? chown_common+0x550/0x550 [ 697.687927][T25463] ? inode_permission+0xab/0x500 [ 697.693324][T25463] path_openat+0x1e59/0x27d0 [ 697.697968][T25463] ? path_lookupat.isra.0+0x530/0x530 [ 697.703461][T25463] ? lock_acquire+0x1f2/0x8f0 [ 697.708174][T25463] do_filp_open+0x192/0x260 [ 697.712697][T25463] ? may_open_dev+0xf0/0xf0 [ 697.717262][T25463] ? do_raw_spin_lock+0x129/0x2e0 [ 697.722317][T25463] ? _raw_spin_unlock+0x24/0x40 [ 697.727278][T25463] ? __alloc_fd+0x46d/0x600 [ 697.731830][T25463] do_sys_openat2+0x585/0x7d0 [ 697.736551][T25463] ? file_open_root+0x400/0x400 [ 697.741425][T25463] ? __mutex_unlock_slowpath+0xe2/0x660 [ 697.746993][T25463] ? wait_for_completion+0x270/0x270 [ 697.752297][T25463] ? __this_cpu_preempt_check+0x28/0x190 [ 697.757951][T25463] ? __sb_end_write+0x101/0x1d0 [ 697.763036][T25463] do_sys_open+0xc3/0x140 [ 697.767418][T25463] ? filp_open+0x70/0x70 [ 697.771686][T25463] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 697.777712][T25463] ? do_syscall_64+0x21/0x7d0 [ 697.782419][T25463] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 697.788424][T25463] do_syscall_64+0xf6/0x7d0 [ 697.792973][T25463] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 697.798881][T25463] RIP: 0033:0x45ca59 [ 697.802796][T25463] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 697.822794][T25463] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 697.831328][T25463] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 697.839497][T25463] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 697.847490][T25463] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 697.855623][T25463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 697.863622][T25463] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 698.011928][T25463] usb 4-1: usb_submit_urb: -12 [ 698.029253][ T12] usb 4-1: USB disconnect, device number 43 22:32:27 executing program 3 (fault-call:4 fault-nth:39): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 22:32:27 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:32:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x60000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) 22:32:27 executing program 1: syz_usb_connect(0x0, 0x3f, &(0x7f00000054c0)={{0x12, 0x1, 0x0, 0x92, 0x90, 0x81, 0x8, 0x5ac, 0x8215, 0xa2a9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xfd, 0x3c, 0xb7, 0x0, [], [{{0x9, 0x5, 0x8d, 0x1f}}, {{0x9, 0x5, 0x5, 0x2}}, {{0x9, 0x5, 0x8b, 0x1e}}]}}]}}]}}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x501900, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) fstatfs(r1, &(0x7f0000000440)=""/231) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000040)={"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"}) 22:32:27 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:32:27 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) lseek(r2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 22:32:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x9effffff}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 698.717670][T25535] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 698.758522][T25535] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xca000000}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 698.811560][T25538] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 698.834295][T25538] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 698.878297][T25537] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 698.906964][T25537] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001dc0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 698.937462][T25550] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 698.970828][T23919] usb 2-1: new high-speed USB device number 6 using dummy_hcd 22:32:28 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xffffffff00000001, 0x208101) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0x1, 0x0, 0x81, 0x304}) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x103, 0x60, 0x0}) [ 698.978127][T25550] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:28 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 699.020769][T25542] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 699.058022][T25542] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 22:32:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x23, 0x80005, 0x0, &(0x7f0000000300)={0x0, 0x0}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, &(0x7f0000000000), 0x4) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) [ 699.105981][T25559] md: could not open device unknown-block(259,96). [ 699.110720][ T12] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 699.125475][T25559] md: md_import_device returned -6 [ 699.238269][T25568] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 699.251145][T23919] usb 2-1: Using ep0 maxpacket: 8 [ 699.269851][T25568] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 699.301311][T25573] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 699.318899][T25573] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 699.383534][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 699.400449][T23919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.429697][T23919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 699.449764][T23919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 699.469574][T23919] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 699.489517][T23919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 699.500670][ T12] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 699.508957][ T12] usb 4-1: config 0 has no interface number 0 [ 699.509443][T23919] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 699.524025][ T12] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 699.545332][ T12] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 699.548565][T23919] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=a2.a9 [ 699.565325][ T12] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 699.578188][ T12] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 699.595591][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.606981][T23919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.616959][ T12] usb 4-1: config 0 descriptor?? [ 699.637507][T23919] usb 2-1: config 0 descriptor?? [ 699.640673][T25548] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 699.665198][T25548] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 699.750873][ T1524] Bluetooth: hci0: urb 00000000b0292eb5 submission failed (90) [ 699.885717][T25544] FAULT_INJECTION: forcing a failure. [ 699.885717][T25544] name failslab, interval 1, probability 0, space 0, times 0 [ 699.893528][T25536] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 699.913923][T25544] CPU: 0 PID: 25544 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 699.916615][T25536] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 699.922683][T25544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.922691][T25544] Call Trace: [ 699.922719][T25544] dump_stack+0x188/0x20d [ 699.922749][T25544] should_fail.cold+0x5/0xa [ 699.922770][T25544] ? fault_create_debugfs_attr+0x140/0x140 [ 699.922797][T25544] should_failslab+0x5/0xf [ 699.922812][T25544] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 699.922828][T25544] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 699.922846][T25544] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 699.922878][T25544] dummy_urb_enqueue+0x82/0x8a0 [ 699.988484][T25544] ? usb_hcd_map_urb_for_dma+0x4aa/0x14f0 [ 699.994418][T25544] usb_hcd_submit_urb+0x2aa/0x1ee0 [ 699.999555][T25544] ? snd_rawmidi_kernel_open+0x1b5/0x270 [ 700.005323][T25544] ? usb_create_hcd+0x30/0x30 [ 700.010032][T25544] ? __mutex_lock+0x460/0x13c0 [ 700.014823][T25544] ? do_sys_open+0xc3/0x140 [ 700.019648][T25544] ? lock_release+0x800/0x800 [ 700.024348][T25544] ? substream_open.isra.0+0xab/0x830 [ 700.029944][T25544] usb_submit_urb+0x6e5/0x13b0 [ 700.035081][T25544] ? down_read+0x110/0x420 [ 700.040528][T25544] snd_usbmidi_submit_urb+0x19/0x60 [ 700.045863][T25544] snd_usbmidi_input_start.part.0+0xbe/0x1c0 [ 700.051953][T25544] substream_open.isra.0+0x505/0x830 [ 700.057750][T25544] open_substream+0x42e/0x880 [ 700.062662][T25544] rawmidi_open_priv+0x2e8/0x6e0 [ 700.067644][T25544] snd_rawmidi_kernel_open+0x1b5/0x270 [ 700.074455][T25544] midisynth_subscribe+0xf2/0x350 [ 700.079599][T25544] ? midisynth_use+0x250/0x250 [ 700.084500][T25544] ? down_write+0xdb/0x150 [ 700.088940][T25544] ? __down_timeout+0x2d0/0x2d0 [ 700.093840][T25544] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 700.099851][T25544] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 700.105870][T25544] check_and_subscribe_port+0x5b5/0x800 [ 700.111640][T25544] ? midisynth_use+0x250/0x250 [ 700.116460][T25544] snd_seq_port_connect+0x2e4/0x510 [ 700.121715][T25544] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 700.128591][T25544] snd_seq_kernel_client_ctl+0xeb/0x130 [ 700.134351][T25544] snd_seq_oss_midi_open+0x3ee/0x670 [ 700.139675][T25544] ? snd_seq_oss_midi_setup+0x50/0x50 [ 700.145239][T25544] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 700.151242][T25544] ? get_mdev+0x75/0x90 [ 700.155773][T25544] ? get_mididev.isra.0+0x76/0xa0 [ 700.160829][T25544] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 700.166996][T25544] snd_seq_oss_open+0x7fa/0x980 [ 700.172140][T25544] odev_open+0x6c/0x90 [ 700.176239][T25544] ? odev_release+0x70/0x70 [ 700.180787][T25544] soundcore_open+0x446/0x600 [ 700.185501][T25544] ? sound_devnode+0xf0/0xf0 [ 700.190640][T25544] chrdev_open+0x219/0x5c0 [ 700.195273][T25544] ? cdev_put.part.0+0x50/0x50 [ 700.200071][T25544] ? security_file_open+0x84/0x410 [ 700.205728][T25544] do_dentry_open+0x546/0x1340 [ 700.211710][T25544] ? cdev_put.part.0+0x50/0x50 [ 700.217380][T25544] ? security_inode_permission+0xc4/0xf0 [ 700.223414][T25544] ? chown_common+0x550/0x550 [ 700.228309][T25544] ? inode_permission+0xab/0x500 [ 700.233592][T25544] path_openat+0x1e59/0x27d0 [ 700.238233][T25544] ? path_lookupat.isra.0+0x530/0x530 [ 700.243876][T25544] ? lock_acquire+0x1f2/0x8f0 [ 700.248650][T25544] do_filp_open+0x192/0x260 [ 700.253183][T25544] ? may_open_dev+0xf0/0xf0 [ 700.257835][T25544] ? do_raw_spin_lock+0x129/0x2e0 [ 700.262928][T25544] ? _raw_spin_unlock+0x24/0x40 [ 700.267800][T25544] ? __alloc_fd+0x46d/0x600 [ 700.272456][T25544] do_sys_openat2+0x585/0x7d0 [ 700.277164][T25544] ? file_open_root+0x400/0x400 [ 700.282139][T25544] ? __mutex_unlock_slowpath+0xe2/0x660 [ 700.288243][T25544] ? wait_for_completion+0x270/0x270 [ 700.293644][T25544] ? __this_cpu_preempt_check+0x28/0x190 [ 700.299702][T25544] ? __sb_end_write+0x101/0x1d0 [ 700.304835][T25544] do_sys_open+0xc3/0x140 [ 700.309320][T25544] ? filp_open+0x70/0x70 [ 700.313793][T25544] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 700.320086][T25544] ? do_syscall_64+0x21/0x7d0 [ 700.324774][T25544] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 700.330999][T25544] do_syscall_64+0xf6/0x7d0 [ 700.335535][T25544] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 700.341858][T25544] RIP: 0033:0x45ca59 [ 700.346825][T25544] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 700.366980][T25544] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 700.375384][T25544] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 700.384188][T25544] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 700.392506][T25544] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 700.400853][T25544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 700.408951][T25544] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 700.428314][T25544] usb 4-1: usb_submit_urb: -12 [ 700.433126][T25544] ------------[ cut here ]------------ [ 700.445907][T25544] URB 000000009a4fa6f9 submitted while active [ 700.447766][ T17] usb 2-1: USB disconnect, device number 6 [ 700.452722][T25544] WARNING: CPU: 0 PID: 25544 at drivers/usb/core/urb.c:363 usb_submit_urb+0x10c1/0x13b0 [ 700.467625][T25544] Kernel panic - not syncing: panic_on_warn set ... [ 700.474326][T25544] CPU: 0 PID: 25544 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 700.482945][T25544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.493016][T25544] Call Trace: [ 700.496683][T25544] dump_stack+0x188/0x20d [ 700.501260][T25544] ? usb_submit_urb+0x1090/0x13b0 [ 700.506528][T25544] panic+0x2e3/0x75c [ 700.510897][T25544] ? add_taint.cold+0x16/0x16 [ 700.515701][T25544] ? __probe_kernel_read+0x188/0x1d0 [ 700.521634][T25544] ? __warn.cold+0x14/0x35 [ 700.526094][T25544] ? usb_submit_urb+0x10c1/0x13b0 [ 700.531139][T25544] __warn.cold+0x2f/0x35 [ 700.535413][T25544] ? usb_submit_urb+0x10c1/0x13b0 [ 700.540474][T25544] report_bug+0x27b/0x2f0 [ 700.544928][T25544] do_error_trap+0x12b/0x220 [ 700.549539][T25544] ? usb_submit_urb+0x10c1/0x13b0 [ 700.554965][T25544] do_invalid_op+0x32/0x40 [ 700.559403][T25544] ? usb_submit_urb+0x10c1/0x13b0 [ 700.564542][T25544] invalid_op+0x23/0x30 [ 700.568820][T25544] RIP: 0010:usb_submit_urb+0x10c1/0x13b0 [ 700.574463][T25544] Code: 89 de e8 12 ae 63 fc 84 db 0f 85 42 f6 ff ff e8 a5 ac 63 fc 4c 89 fe 48 c7 c7 40 1a ac 88 c6 05 82 8b 76 05 01 e8 97 b0 34 fc <0f> 0b e9 20 f6 ff ff c7 44 24 14 01 00 00 00 e9 d7 f6 ff ff 41 bd [ 700.596256][T25544] RSP: 0018:ffffc900164972c0 EFLAGS: 00010286 [ 700.602867][T25544] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 700.611332][T25544] RDX: 0000000000040000 RSI: ffffffff815d5ba7 RDI: fffff52002c92e4a [ 700.619578][T25544] RBP: dffffc0000000000 R08: ffff88804d6fe400 R09: ffffed1015cc6715 [ 700.627673][T25544] R10: ffff8880ae6338a7 R11: ffffed1015cc6714 R12: 0000000000000cc0 [ 700.636246][T25544] R13: 00000000fffffff0 R14: ffff888090f7d800 R15: ffff888091debe00 [ 700.644787][T25544] ? vprintk_func+0x97/0x1a6 [ 700.649487][T25544] snd_usbmidi_submit_urb+0x19/0x60 [ 700.654803][T25544] snd_usbmidi_input_start.part.0+0xbe/0x1c0 [ 700.661087][T25544] substream_open.isra.0+0x505/0x830 [ 700.667415][T25544] open_substream+0x42e/0x880 [ 700.673143][T25544] rawmidi_open_priv+0x2e8/0x6e0 [ 700.678495][T25544] snd_rawmidi_kernel_open+0x1b5/0x270 [ 700.684334][T25544] midisynth_subscribe+0xf2/0x350 [ 700.689518][T25544] ? midisynth_use+0x250/0x250 [ 700.694404][T25544] ? down_write+0xdb/0x150 [ 700.698838][T25544] ? __down_timeout+0x2d0/0x2d0 [ 700.703917][T25544] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 700.710001][T25544] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 700.715903][T25544] check_and_subscribe_port+0x5b5/0x800 [ 700.721894][T25544] ? midisynth_use+0x250/0x250 [ 700.726828][T25544] snd_seq_port_connect+0x2e4/0x510 [ 700.732035][T25544] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 700.738098][T25544] snd_seq_kernel_client_ctl+0xeb/0x130 [ 700.743936][T25544] snd_seq_oss_midi_open+0x3ee/0x670 [ 700.749536][T25544] ? snd_seq_oss_midi_setup+0x50/0x50 [ 700.755088][T25544] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 700.761255][T25544] ? get_mdev+0x75/0x90 [ 700.765792][T25544] ? get_mididev.isra.0+0x76/0xa0 [ 700.770936][T25544] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 700.777168][T25544] snd_seq_oss_open+0x7fa/0x980 [ 700.782224][T25544] odev_open+0x6c/0x90 [ 700.786305][T25544] ? odev_release+0x70/0x70 [ 700.790817][T25544] soundcore_open+0x446/0x600 [ 700.795838][T25544] ? sound_devnode+0xf0/0xf0 [ 700.801224][T25544] chrdev_open+0x219/0x5c0 [ 700.805807][T25544] ? cdev_put.part.0+0x50/0x50 [ 700.810873][T25544] ? security_file_open+0x84/0x410 [ 700.816001][T25544] do_dentry_open+0x546/0x1340 [ 700.821238][T25544] ? cdev_put.part.0+0x50/0x50 [ 700.826459][T25544] ? security_inode_permission+0xc4/0xf0 [ 700.833158][T25544] ? chown_common+0x550/0x550 [ 700.837862][T25544] ? inode_permission+0xab/0x500 [ 700.842914][T25544] path_openat+0x1e59/0x27d0 [ 700.847727][T25544] ? path_lookupat.isra.0+0x530/0x530 [ 700.853397][T25544] ? lock_acquire+0x1f2/0x8f0 [ 700.858254][T25544] do_filp_open+0x192/0x260 [ 700.862781][T25544] ? may_open_dev+0xf0/0xf0 [ 700.867420][T25544] ? do_raw_spin_lock+0x129/0x2e0 [ 700.872492][T25544] ? _raw_spin_unlock+0x24/0x40 [ 700.877449][T25544] ? __alloc_fd+0x46d/0x600 [ 700.881990][T25544] do_sys_openat2+0x585/0x7d0 [ 700.886721][T25544] ? file_open_root+0x400/0x400 [ 700.891604][T25544] ? __mutex_unlock_slowpath+0xe2/0x660 [ 700.897151][T25544] ? wait_for_completion+0x270/0x270 [ 700.903101][T25544] ? __this_cpu_preempt_check+0x28/0x190 [ 700.908882][T25544] ? __sb_end_write+0x101/0x1d0 [ 700.914144][T25544] do_sys_open+0xc3/0x140 [ 700.918981][T25544] ? filp_open+0x70/0x70 [ 700.923395][T25544] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 700.929519][T25544] ? do_syscall_64+0x21/0x7d0 [ 700.934209][T25544] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 700.940425][T25544] do_syscall_64+0xf6/0x7d0 [ 700.944941][T25544] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 700.950846][T25544] RIP: 0033:0x45ca59 [ 700.954758][T25544] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 700.974458][T25544] RSP: 002b:00007fce498f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 700.982887][T25544] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 700.990863][T25544] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 700.999033][T25544] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 701.007005][T25544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 701.014979][T25544] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fce498f26d4 [ 701.025811][T25544] Kernel Offset: disabled [ 701.035916][T25544] Rebooting in 86400 seconds..