[ OK ] Started Getty on tty3. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty2. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ 43.820312][ T6746] systemd-sysctl (6746) used greatest stack depth: 21888 bytes left Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 50.377428][ T4995] systemd-udevd (4995) used greatest stack depth: 21856 bytes left Warning: Permanently added '10.128.0.23' (ECDSA) to the list of known hosts. 2020/06/13 06:18:06 fuzzer started 2020/06/13 06:18:07 dialing manager at 10.128.0.26:39613 2020/06/13 06:18:07 syscalls: 3085 2020/06/13 06:18:07 code coverage: enabled 2020/06/13 06:18:07 comparison tracing: enabled 2020/06/13 06:18:07 extra coverage: enabled 2020/06/13 06:18:07 setuid sandbox: enabled 2020/06/13 06:18:07 namespace sandbox: enabled 2020/06/13 06:18:07 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/13 06:18:07 fault injection: enabled 2020/06/13 06:18:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/13 06:18:07 net packet injection: enabled 2020/06/13 06:18:07 net device setup: enabled 2020/06/13 06:18:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/13 06:18:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/13 06:18:07 USB emulation: enabled 06:19:36 executing program 0: ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) fremovexattr(0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000fc0000)='//selinux\x00\x00\x01\x10', 0xff95, 0x0) [ 146.470751][ T6987] IPVS: ftp: loaded support on port[0] = 21 06:19:37 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f00000014c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e11", 0x3, 0x3a, 0x0, @private0, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [@local, @mcast2]}}}}}}, 0x0) [ 146.621747][ T6987] chnl_net:caif_netlink_parms(): no params data found [ 146.738749][ T6987] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.757323][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.777723][ T6987] device bridge_slave_0 entered promiscuous mode [ 146.807341][ T6987] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.814504][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.837333][ T6987] device bridge_slave_1 entered promiscuous mode [ 146.877072][ T6987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.898666][ T6987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.901665][ T7117] IPVS: ftp: loaded support on port[0] = 21 06:19:37 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) writev(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x3, 0x2, 0x607, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x1a4, 0x1a4, 0x0, 0x1a4, 0x1a4, 0x244, 0x244, 0x244, 0x244, 0x244, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d], 0x0, 0x164, 0x1a4, 0xa, {0x9000000}, [@common=@inet=@recent0={{0xf4, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'bridge_slave_0\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa0, 0x0, {0xff00000000000000}}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0xeb}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x334) [ 146.970736][ T6987] team0: Port device team_slave_0 added [ 146.981865][ T6987] team0: Port device team_slave_1 added [ 147.043190][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.051142][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.081137][ T6987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.128121][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.135084][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.163242][ T6987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.250713][ T7117] chnl_net:caif_netlink_parms(): no params data found 06:19:37 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c01000024000b0f008000"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a00010063686f6b650000001c0102"], 0x14c}}, 0x0) [ 147.360356][ T6987] device hsr_slave_0 entered promiscuous mode [ 147.406676][ T6987] device hsr_slave_1 entered promiscuous mode [ 147.525168][ T7246] IPVS: ftp: loaded support on port[0] = 21 [ 147.679378][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.697555][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.705232][ T7117] device bridge_slave_0 entered promiscuous mode 06:19:38 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x18, 0x3a, 0x0, @empty, @empty, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, [], @empty}}}}}}, 0x0) [ 147.738925][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.748842][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.758421][ T7117] device bridge_slave_1 entered promiscuous mode [ 147.823999][ T7117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.855301][ T7293] IPVS: ftp: loaded support on port[0] = 21 [ 147.875233][ T7117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.003332][ T7117] team0: Port device team_slave_0 added [ 148.055036][ T6987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.102521][ T7117] team0: Port device team_slave_1 added [ 148.141487][ T6987] netdevsim netdevsim0 netdevsim1: renamed from eth1 06:19:38 executing program 5: lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f0000fc0000)='//selinux\x00\x00\x01\x10', 0xd, 0x0) [ 148.220306][ T6987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.264013][ T6987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.339920][ T7246] chnl_net:caif_netlink_parms(): no params data found [ 148.363931][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.371838][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.398093][ T7117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.422135][ T7382] IPVS: ftp: loaded support on port[0] = 21 [ 148.438997][ T7463] IPVS: ftp: loaded support on port[0] = 21 [ 148.456247][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.463200][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.493809][ T7117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.560473][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.568638][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.577081][ T7246] device bridge_slave_0 entered promiscuous mode [ 148.631013][ T7117] device hsr_slave_0 entered promiscuous mode [ 148.677422][ T7117] device hsr_slave_1 entered promiscuous mode [ 148.716068][ T7117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.723887][ T7117] Cannot create hsr debugfs directory [ 148.733540][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.743402][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.751454][ T7246] device bridge_slave_1 entered promiscuous mode [ 148.832929][ T7246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.849395][ T7246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.947893][ T7293] chnl_net:caif_netlink_parms(): no params data found [ 148.971790][ T7246] team0: Port device team_slave_0 added [ 148.987256][ T7246] team0: Port device team_slave_1 added [ 149.102775][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.110827][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.138090][ T7246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.174375][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.182033][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.209030][ T7246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.230055][ T7463] chnl_net:caif_netlink_parms(): no params data found [ 149.309537][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.319744][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.328293][ T7293] device bridge_slave_0 entered promiscuous mode [ 149.344609][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.351710][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.361287][ T7293] device bridge_slave_1 entered promiscuous mode [ 149.439752][ T7246] device hsr_slave_0 entered promiscuous mode [ 149.496564][ T7246] device hsr_slave_1 entered promiscuous mode [ 149.576065][ T7246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.583633][ T7246] Cannot create hsr debugfs directory [ 149.620583][ T7382] chnl_net:caif_netlink_parms(): no params data found [ 149.694364][ T6987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.733802][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.792985][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.810459][ T7463] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.818625][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.827343][ T7463] device bridge_slave_0 entered promiscuous mode [ 149.843331][ T6987] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.881683][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.890424][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.904330][ T7463] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.912136][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.920844][ T7463] device bridge_slave_1 entered promiscuous mode [ 149.959690][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.970480][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.979955][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.987231][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.996263][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.004807][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.013428][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.020584][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.030576][ T7293] team0: Port device team_slave_0 added [ 150.077005][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.085263][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.096722][ T7293] team0: Port device team_slave_1 added [ 150.127034][ T7463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.139749][ T7463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.149423][ T7117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 150.213450][ T7382] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.221290][ T7382] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.229885][ T7382] device bridge_slave_0 entered promiscuous mode [ 150.242753][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.252566][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.262344][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.272874][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.284234][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.311614][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.324478][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.331586][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.357757][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.383811][ T7117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 150.434229][ T7382] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.441591][ T7382] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.450155][ T7382] device bridge_slave_1 entered promiscuous mode [ 150.472776][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.488805][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.503951][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.517843][ T7463] team0: Port device team_slave_0 added [ 150.525408][ T7117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 150.600808][ T7117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 150.661230][ T7382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.677500][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.686530][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.699198][ T7463] team0: Port device team_slave_1 added [ 150.738447][ T7382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.799961][ T7293] device hsr_slave_0 entered promiscuous mode [ 150.847325][ T7293] device hsr_slave_1 entered promiscuous mode [ 150.885794][ T7293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.893385][ T7293] Cannot create hsr debugfs directory [ 150.901349][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.911430][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.921744][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.937463][ T7463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.944414][ T7463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.971264][ T7463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.021606][ T7463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.029091][ T7463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.056372][ T7463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.086012][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.093513][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.109796][ T7382] team0: Port device team_slave_0 added [ 151.145022][ T7382] team0: Port device team_slave_1 added [ 151.201815][ T7463] device hsr_slave_0 entered promiscuous mode [ 151.246150][ T7463] device hsr_slave_1 entered promiscuous mode [ 151.305852][ T7463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.313410][ T7463] Cannot create hsr debugfs directory [ 151.321574][ T6987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.395072][ T7382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.403750][ T7382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.431755][ T7382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.457493][ T7246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 151.497368][ T7382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.504337][ T7382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.535444][ T7382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.564238][ T7246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 151.658165][ T7246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 151.731730][ T7246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 151.820205][ T7382] device hsr_slave_0 entered promiscuous mode [ 151.876261][ T7382] device hsr_slave_1 entered promiscuous mode [ 151.945833][ T7382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.953535][ T7382] Cannot create hsr debugfs directory [ 151.980307][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.989032][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.092975][ T6987] device veth0_vlan entered promiscuous mode [ 152.100814][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.111352][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.120434][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.129385][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.165045][ T7293] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 152.244332][ T7293] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 152.320788][ T7293] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 152.398150][ T7293] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 152.439766][ T7117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.459885][ T6987] device veth1_vlan entered promiscuous mode [ 152.546164][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.554248][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 152.567698][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.580893][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.640124][ T7117] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.647862][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.660085][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.669463][ T7463] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.721377][ T6987] device veth0_macvtap entered promiscuous mode [ 152.737158][ T6987] device veth1_macvtap entered promiscuous mode [ 152.753063][ T7463] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.798729][ T7463] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 152.869550][ T7463] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.952815][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.964514][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.973535][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.982142][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.992662][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.001754][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.008871][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.017217][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.026048][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.061636][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.075200][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.084576][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.094433][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.104689][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.115201][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.123571][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.132505][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.141345][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.150599][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.213743][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.222645][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.233721][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.243181][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.252381][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.261476][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.270119][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.279872][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.288702][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.304895][ T7117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.315330][ T7382] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 153.446657][ T7382] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 153.478089][ T7382] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 153.595088][ T7246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.610460][ T7382] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 153.679013][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.686731][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.773735][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.822319][ T7117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.889354][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.897893][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.908308][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.916540][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.944920][ T7246] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.958895][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 06:19:44 executing program 0: [ 154.009676][ T7463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.036436][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.045975][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 06:19:44 executing program 0: [ 154.055227][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.072011][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.082023][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.089172][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state 06:19:44 executing program 0: [ 154.166327][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.174213][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.199049][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.233897][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.241062][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.253680][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.263089][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.274006][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 06:19:44 executing program 0: [ 154.285302][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.294833][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.305975][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.314484][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.321636][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.364153][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.379442][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.389442][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.396610][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state 06:19:44 executing program 0: [ 154.414410][ T7117] device veth0_vlan entered promiscuous mode [ 154.442738][ T7463] 8021q: adding VLAN 0 to HW filter on device team0 06:19:45 executing program 0: [ 154.472727][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.482874][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.492523][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.502747][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.513064][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.536386][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.545226][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.569500][ T7117] device veth1_vlan entered promiscuous mode 06:19:45 executing program 0: [ 154.593728][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.603704][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.613038][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.622196][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.630880][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.654977][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.678654][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.693667][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.712783][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.721767][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.780572][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 154.793259][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.808943][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.818374][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.827526][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.834569][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.842524][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.851037][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.859982][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.868655][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.877256][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.885689][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.894877][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.923538][ T7117] device veth0_macvtap entered promiscuous mode [ 154.941705][ T7246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.953341][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.964287][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.973609][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.982101][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.989265][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.997057][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.006089][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.014265][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.024309][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.037073][ T7117] device veth1_macvtap entered promiscuous mode [ 155.049600][ T7293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.081883][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.089975][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.106015][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.122365][ T7382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.182801][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.196181][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.204301][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.213835][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.223237][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.232391][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.243527][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.254299][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.271194][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.285145][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.314778][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.326501][ T7382] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.333342][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.343399][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.352504][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.361510][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.369453][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.377648][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.385036][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.393169][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.401895][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.415304][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.431499][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.442968][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.454542][ T7246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.469401][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.479531][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.490077][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.499491][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.508139][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.515182][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.529306][ T7463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.546549][ T7463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.571338][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.580559][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.589456][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.598419][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.612802][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.622038][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.629165][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.637307][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.646261][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.695583][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.704214][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.714033][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.723234][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.731949][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.741539][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.750514][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.758563][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.934846][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.956927][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.966345][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.974932][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.988141][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.014039][ T7463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.030476][ T7293] device veth0_vlan entered promiscuous mode [ 156.045841][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.059191][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 06:19:46 executing program 1: [ 156.089610][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.115399][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.126017][ T7382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.218346][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.226811][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.250672][ T7293] device veth1_vlan entered promiscuous mode [ 156.264245][ T7246] device veth0_vlan entered promiscuous mode [ 156.305684][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.314111][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.333637][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.341685][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.362175][ T7382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.371659][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.381329][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.404675][ T7246] device veth1_vlan entered promiscuous mode [ 156.434294][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.447532][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.459390][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.469861][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.501770][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.519769][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.536762][ T7293] device veth0_macvtap entered promiscuous mode [ 156.553396][ T7463] device veth0_vlan entered promiscuous mode [ 156.571675][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.583135][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.593073][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.628049][ T7293] device veth1_macvtap entered promiscuous mode [ 156.641649][ T7463] device veth1_vlan entered promiscuous mode [ 156.649643][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.659571][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.667790][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.676155][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.684110][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.693219][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.706419][ T7246] device veth0_macvtap entered promiscuous mode [ 156.722638][ T7246] device veth1_macvtap entered promiscuous mode [ 156.754186][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.763733][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.772738][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.781289][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.790232][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.829923][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.840613][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.852906][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.863589][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.875205][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.886536][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.897606][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.907535][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.918175][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.928410][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.939347][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.951178][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.959742][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.973159][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.982000][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.994865][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.004264][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.018166][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.032358][ T7382] device veth0_vlan entered promiscuous mode [ 157.052644][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.066047][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.076051][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.086749][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.100444][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.108657][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.117190][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.124846][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.135045][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.148947][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.159009][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.173758][ T7382] device veth1_vlan entered promiscuous mode [ 157.190255][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.200774][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.212577][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.223718][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.233613][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.244268][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.256451][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.273384][ T7463] device veth0_macvtap entered promiscuous mode [ 157.282812][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.292319][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.302906][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.311890][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.333417][ T7463] device veth1_macvtap entered promiscuous mode [ 157.568604][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.589640][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.610819][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.622767][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.633392][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.644561][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.656569][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.667038][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.679579][ T7463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.687740][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.697232][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.712656][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.722600][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.733021][ T8278] netlink: 280 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.822222][ T7382] device veth0_macvtap entered promiscuous mode [ 157.831304][ T8281] netlink: 280 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.877200][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.913389][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.932899][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.951218][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.962246][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.984682][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.005964][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.016547][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.028780][ T7463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.044700][ T7382] device veth1_macvtap entered promiscuous mode [ 158.070565][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 06:19:48 executing program 0: 06:19:48 executing program 1: [ 158.079176][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.089926][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.104556][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.181928][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 158.202300][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.226406][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 158.245171][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.254981][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 158.268643][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.279420][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 158.291643][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.303233][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 158.314789][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.327834][ T7382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.380255][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.396032][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.429145][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.455166][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.475184][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.487748][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.499329][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.511095][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.521780][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.532742][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.553839][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.564816][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.577627][ T7382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.623218][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.632533][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:19:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x6948}) 06:19:49 executing program 2: 06:19:49 executing program 3: 06:19:49 executing program 0: 06:19:49 executing program 1: 06:19:49 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x6}]}}, 0x0, 0x26}, 0x20) 06:19:49 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ttyS3\x00', 0x0, 0x0) 06:19:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000040)) 06:19:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4182) r1 = memfd_create(&(0x7f00000000c0)='.^\xcd', 0x0) pwritev(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) setsockopt$inet_mreqn(r2, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x24000000) 06:19:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x10) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x8a) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) 06:19:49 executing program 3: 06:19:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x6948}) 06:19:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 06:19:49 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) 06:19:49 executing program 1: r0 = gettid() capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000200)) [ 159.238141][ C0] hrtimer: interrupt took 38948 ns 06:19:49 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) [ 159.284924][ T29] audit: type=1800 audit(1592029189.760:2): pid=8323 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15760 res=0 06:19:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) signalfd(0xffffffffffffffff, 0x0, 0x0) [ 159.337270][ T8333] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 06:19:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 06:19:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) getpid() ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{&(0x7f00000004c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b40)=""/93, 0x5d}, {&(0x7f0000000640)=""/237, 0xed}, {&(0x7f00000007c0)=""/76, 0x4c}, {0x0}, {&(0x7f0000000540)=""/101, 0x65}], 0x5, &(0x7f0000000340)=""/12, 0xc}, 0x7}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000900)=""/216, 0xd8}, {&(0x7f0000000a00)=""/177, 0xb1}], 0x2}, 0x2}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000c40)="d8c813325bb60ed8f3c20d7d64de376b709be8a71bc131dd13f1c519dc90261af152370bc656fd2e649286a277439d1e4c0dd76adf255e2720e10465b96babbe00f2b0320831ea4ae9a61935367fdd051e7a30f0dd5fe14919a03f71f59d2ea5515e253d3c3edd5343fa8d5c45ea1eb969c2181cbbb9ac84b0c5a348ab97737aace6c93bc064aa3cc641c70d80301b52090cbb91b80739272ab83878e63a72c45db66c1aa5700838603496a80a9a7ce49059629dab06ac709c6402d291a82013bd1e4abc03f3dc6403d865d68f92afa01ebc7a4dfa024ebff40a6a1ebfd406ba2b4546598ab2e29babf13ec460fc4a0d8457ad", 0xf3}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000003240)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x0, 0x3, 0x0, 0x214f}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r3, &(0x7f0000000780)=[{&(0x7f0000000d40)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df087c18269bd7d2f477104c5d5db497ceaf3e1b11a5d63a2b7035dc69fa701f3b46fe701880800a7d38dccd4b3e8014aa15c96968359533ce2c5ffdd5f0d3297018bd7c025150940cdead92eb1e6bc6ba45eecf067b32425b6000b2f376ef9172426ae7fa97e5a84ef4dc540bbf5dd458ffcb75724135bd32fa04db6d6a75aedda7ab6e8501fc94e209dc3b2525ae24c954255d3247ca9c1b9525ce68179a52a87333aa2b0a8c1baa6ba6160c6d2018e67bac5402d0d89c5f798b8d1a87b0dc3306f546c61724530d9f4b6f0ee68677c7b261de5afa02d708a8ec979791de8f4831cc354ba453bc253e2435207f25494a594d4e5be39902358d362cb318ad965b7e7480a5ca5b6fe74e101c400c77392ee4419ad788f494230487811046f21f0f9665dfbaa9e94ed305a02e3fa47039e67dde19f89c8f1741aad752cdfe458ddf54e8fc10ff79b5", 0x1b9}], 0x42) 06:19:49 executing program 1: r0 = gettid() capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000200)) 06:19:50 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffff, 0x0, 0x7163250, 0x5, 0x2, "314dce701ec47c13c73c68b43d1d7a0ee50470"}) [ 159.665337][ T3810] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 160.025521][ T3810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.036874][ T29] audit: type=1800 audit(1592029190.520:3): pid=8360 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15760 res=0 [ 160.062822][ T3810] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 06:19:50 executing program 1: r0 = gettid() capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000200)) 06:19:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 06:19:50 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffff, 0x0, 0x7163250, 0x5, 0x2, "314dce701ec47c13c73c68b43d1d7a0ee50470"}) 06:19:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x10) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x8a) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) [ 160.088099][ T3810] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.40 [ 160.103605][ T3810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.164006][ T3810] usb 6-1: config 0 descriptor?? 06:19:50 executing program 1: r0 = gettid() capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000200)) 06:19:50 executing program 4: r0 = gettid() capget(&(0x7f0000000040)={0x20071026, r0}, &(0x7f0000000200)) [ 160.228209][ T3810] usbhid 6-1:0.0: can't add hid device: -22 [ 160.234556][ T3810] usbhid: probe of 6-1:0.0 failed with error -22 [ 160.284171][ T29] audit: type=1800 audit(1592029190.760:4): pid=8376 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15763 res=0 [ 160.395299][ T8381] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 160.438073][ T2988] usb 6-1: USB disconnect, device number 2 [ 160.750849][ T8374] syz-executor.0 (8374) used greatest stack depth: 19888 bytes left [ 161.215128][ T3810] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 161.575999][ T3810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.585822][ T3810] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 161.599961][ T3810] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.40 [ 161.609767][ T3810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.619666][ T3810] usb 6-1: config 0 descriptor?? [ 161.660310][ T3810] usbhid 6-1:0.0: can't add hid device: -22 [ 161.666895][ T3810] usbhid: probe of 6-1:0.0 failed with error -22 06:19:52 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) 06:19:52 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x151842, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1) unlinkat(r2, &(0x7f0000000180)='./file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc0648d0}, 0x880) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f0000000500)={0x1, 0x3, 0x1000, 0xb6, &(0x7f00000002c0)="2dd0eec1d9de49182d52569e446a650a13ef99b3536c6ed091609ed10d4964e95c93ee6a90b3e4f139c243e5d8fa6a8569d0be010538d2b94d69d68ba704c18055fde813333617a16111e471e02a8c611e794bbf441a9795fdfe7fa40db714d000c5fbd99c84db320e44518500abd772347d8db4c2f2173d0b8a444d1b9e7a05de0c27e55d8d6573fb7ee50fc880d57a3133c36e1a68e06d5eacc7d51aaaef6ce9ec24d6f0d365a1d406953ef1f503fcb22edb51debf", 0xda, 0x0, &(0x7f0000000400)="e14cb47b9b5daef8a2586790899bbca283007f18a6a3c7694509d07e52d02b7197d35bb7b02940e1a8ec93a99f86aa96addde5577fc21ed48de5d1ddf3610675c856e786738c6a90c881bc636c59e190c786e8a6d26bc4deec625f9113b4f628792113be2f780d20ba6b22c883302b53ee992e6fd8a149b79064bda2f8ada0e42f436a984c99f2161de9a510f1dc38ba03016d941d1d8e377493f0bbde001bec387b1eff48804b0e05641bea482bf07e8e73f21563adb4db8673e00ff92c54c2e8e9350aa2ab6eff503a1178c8ff94bb4b696d769d876f598f32"}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x42, 0x0, &(0x7f0000000b00)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x1, &(0x7f0000000bc0)=""/113, 0x0, 0x1, 0x16}, @fda={0x66646185, 0xa, 0x1, 0xd}}, &(0x7f0000000700)}, 0x1000}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x1, 0x27}, @fda={0x66646185, 0x8, 0x2, 0x28}}, &(0x7f00000006c0)}}, @acquire_done={0x40106309, 0x3}, @acquire_done={0x40106309, 0x1}, @exit_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000000)=0x1) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @dev}, @IFLA_VTI_LOCAL={0x8, 0x4, @loopback}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 06:19:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 06:19:52 executing program 1: capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000200)) 06:19:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2, 0x78) 06:19:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f00000001c0)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 161.859024][ T3810] usb 6-1: USB disconnect, device number 3 06:19:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f00000001c0)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 161.980536][ T8418] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 06:19:52 executing program 1: capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000200)) 06:19:52 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 06:19:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) [ 162.025533][ T8422] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 06:19:52 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 06:19:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f00000001c0)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 162.385146][ T3810] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 162.745291][ T3810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.767651][ T3810] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 162.827233][ T3810] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.40 [ 162.867268][ T3810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.919040][ T3810] usb 6-1: config 0 descriptor?? [ 162.998546][ T3810] usbhid 6-1:0.0: can't add hid device: -22 [ 163.004576][ T3810] usbhid: probe of 6-1:0.0 failed with error -22 [ 163.261665][ T2988] usb 6-1: USB disconnect, device number 4 06:19:54 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) 06:19:54 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x151842, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000a10200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000c10000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) unlinkat(r2, &(0x7f0000000180)='./file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc0648d0}, 0x880) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f0000000500)={0x1, 0x3, 0x1000, 0xb6, &(0x7f00000002c0)="2dd0eec1d9de49182d52569e446a650a13ef99b3536c6ed091609ed10d4964e95c93ee6a90b3e4f139c243e5d8fa6a8569d0be010538d2b94d69d68ba704c18055fde813333617a16111e471e02a8c611e794bbf441a9795fdfe7fa40db714d000c5fbd99c84db320e44518500abd772347d8db4c2f2173d0b8a444d1b9e7a05de0c27e55d8d6573fb7ee50fc880d57a3133c36e1a68e06d5eacc7d51aaaef6ce9ec24d6f0d365a1d406953ef1f503fcb22edb51debf", 0xda, 0x0, &(0x7f0000000400)="e14cb47b9b5daef8a2586790899bbca283007f18a6a3c7694509d07e52d02b7197d35bb7b02940e1a8ec93a99f86aa96addde5577fc21ed48de5d1ddf3610675c856e786738c6a90c881bc636c59e190c786e8a6d26bc4deec625f9113b4f628792113be2f780d20ba6b22c883302b53ee992e6fd8a149b79064bda2f8ada0e42f436a984c99f2161de9a510f1dc38ba03016d941d1d8e377493f0bbde001bec387b1eff48804b0e05641bea482bf07e8e73f21563adb4db8673e00ff92c54c2e8e9350aa2ab6eff503a1178c8ff94bb4b696d769d876f598f32"}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x42, 0x0, &(0x7f0000000b00)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x1, &(0x7f0000000bc0)=""/113, 0x0, 0x1, 0x16}, @fda={0x66646185, 0xa, 0x1, 0xd}}, &(0x7f0000000700)}, 0x1000}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x1, 0x27}, @fda={0x66646185, 0x8, 0x2, 0x28}}, &(0x7f00000006c0)}}, @acquire_done={0x40106309, 0x3}, @acquire_done={0x40106309, 0x1}, @exit_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000000)=0x1) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @dev}, @IFLA_VTI_LOCAL={0x8, 0x4, @loopback}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 06:19:54 executing program 1: capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000200)) 06:19:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 06:19:54 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 06:19:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f00000001c0)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:19:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 06:19:54 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f00000001c0)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:19:54 executing program 1: gettid() capget(0x0, &(0x7f0000000200)) 06:19:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) [ 164.194963][ T2988] usb 6-1: new full-speed USB device number 5 using dummy_hcd 06:19:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 06:19:54 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f00000001c0)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 164.367011][ T8486] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.565227][ T2988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.593955][ T2988] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 164.640437][ T2988] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.40 [ 164.670418][ T2988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.700672][ T2988] usb 6-1: config 0 descriptor?? [ 164.756336][ T2988] usbhid 6-1:0.0: can't add hid device: -22 [ 164.762372][ T2988] usbhid: probe of 6-1:0.0 failed with error -22 [ 165.052152][ T3809] usb 6-1: USB disconnect, device number 5 06:19:56 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) 06:19:56 executing program 1: gettid() capget(0x0, &(0x7f0000000200)) 06:19:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 06:19:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5441, 0x0) 06:19:56 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f00000001c0)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:19:56 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150004000a001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f98812f58caec8f", 0x4c}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 165.629366][ T8514] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.645324][ T8516] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 06:19:56 executing program 1: gettid() capget(0x0, &(0x7f0000000200)) 06:19:56 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f00000001c0)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:19:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5441, 0x0) [ 165.675251][ T8516] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 06:19:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 06:19:56 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x10000, 0x1ff) 06:19:56 executing program 1: r0 = gettid() capget(&(0x7f0000000000)={0x0, r0}, &(0x7f0000000200)) [ 165.782908][ T8529] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.964550][ T3805] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 166.334934][ T3805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.344931][ T3805] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 166.358910][ T3805] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.40 [ 166.368135][ T3805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.381104][ T3805] usb 6-1: config 0 descriptor?? [ 166.426291][ T3805] usbhid 6-1:0.0: can't add hid device: -22 [ 166.432328][ T3805] usbhid: probe of 6-1:0.0 failed with error -22 [ 166.642355][ T2988] usb 6-1: USB disconnect, device number 6 06:19:57 executing program 5: 06:19:57 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 06:19:57 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f00000001c0)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:19:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5441, 0x0) 06:19:57 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x10000, 0x1ff) 06:19:57 executing program 1: r0 = gettid() capget(&(0x7f0000000000)={0x0, r0}, &(0x7f0000000200)) 06:19:57 executing program 1: r0 = gettid() capget(&(0x7f0000000000)={0x0, r0}, &(0x7f0000000200)) 06:19:57 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f00000001c0)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:19:57 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 06:19:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 06:19:57 executing program 5: 06:19:57 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x10000, 0x1ff) 06:19:57 executing program 1: gettid() capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000200)) 06:19:57 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 06:19:57 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f00000001c0)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:19:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 06:19:57 executing program 5: 06:19:58 executing program 1: gettid() capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000200)) 06:19:58 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x10000, 0x1ff) 06:19:58 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) 06:19:58 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f00000001c0)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:19:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) 06:19:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 06:19:58 executing program 1: gettid() capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000200)) 06:19:58 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f00000001c0)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:19:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) 06:19:58 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5441, 0x0) 06:19:58 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x10000, 0x1ff) 06:19:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:19:58 executing program 1: r0 = gettid() capget(&(0x7f0000000000)={0x19980330, r0}, 0x0) 06:19:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) [ 167.975675][ T8622] binder: 8618:8622 ioctl c0306201 0 returned -14 [ 167.994648][ T2988] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 168.355153][ T2988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.370267][ T2988] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 168.400088][ T2988] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.40 [ 168.409989][ T2988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.420212][ T2988] usb 6-1: config 0 descriptor?? [ 168.466110][ T2988] usbhid 6-1:0.0: can't add hid device: -22 [ 168.472220][ T2988] usbhid: probe of 6-1:0.0 failed with error -22 [ 168.669835][ T2987] usb 6-1: USB disconnect, device number 7 06:19:59 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) 06:19:59 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x10000, 0x1ff) 06:19:59 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5441, 0x0) 06:19:59 executing program 1: r0 = gettid() capget(&(0x7f0000000000)={0x19980330, r0}, 0x0) 06:19:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100), 0x0) 06:19:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:19:59 executing program 1: r0 = gettid() capget(&(0x7f0000000000)={0x19980330, r0}, 0x0) 06:19:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100), 0x0) 06:19:59 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x10000, 0x1ff) 06:19:59 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5441, 0x0) [ 169.308208][ T8655] binder: 8652:8655 ioctl c0306201 0 returned -14 06:19:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:19:59 executing program 1: syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4182) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = memfd_create(&(0x7f0000000240)='.^\xcdH\x82\xb2\x84\xe2\xa2C\x99\xbeV=\x92\xf9\xf3|\x1c\xd6\xe9\xc9b\xf4\x85\x86k&&\xe1\xf4\x0f\xfbD\xceu\xe1\xfd8r\xe7#\xb0k\x138\xb2?\x02\x8a', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000001a80)="bb", 0xfffffd76}], 0x1, 0x81805) [ 169.471742][ T8673] binder: 8671:8673 ioctl c0306201 0 returned -14 [ 169.644718][ T2985] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 170.014554][ T2985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.024356][ T2985] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 170.039058][ T2985] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.40 [ 170.050278][ T2985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.060513][ T2985] usb 6-1: config 0 descriptor?? [ 170.105952][ T2985] usbhid 6-1:0.0: can't add hid device: -22 [ 170.112012][ T2985] usbhid: probe of 6-1:0.0 failed with error -22 [ 170.313841][ T2985] usb 6-1: USB disconnect, device number 8 06:20:01 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) 06:20:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100), 0x0) 06:20:01 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x10000, 0x1ff) 06:20:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 06:20:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:20:01 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 06:20:01 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x10000, 0x1ff) 06:20:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 06:20:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 06:20:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:20:01 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 06:20:01 executing program 1: syz_usb_connect(0x2, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xbc, 0x4f, 0x59, 0x40, 0xa12, 0x5d10, 0x59e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xa6, 0xf0}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000080)={0xa}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f5fee5b20abe0d92f44a9b8344835bb6"}]}}) [ 171.231477][ T3805] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 171.464499][ T3810] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 171.614578][ T3805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.624699][ T3805] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 171.640019][ T3805] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.40 [ 171.649560][ T3805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.667122][ T3805] usb 6-1: config 0 descriptor?? [ 171.710103][ T3805] usbhid 6-1:0.0: can't add hid device: -22 [ 171.716661][ T3805] usbhid: probe of 6-1:0.0 failed with error -22 [ 171.909161][ T3805] usb 6-1: USB disconnect, device number 9 [ 171.944687][ T3810] usb 2-1: not running at top speed; connect to a high speed hub [ 172.194565][ T3810] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=59.e5 [ 172.204247][ T3810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.212754][ T3810] usb 2-1: Product: syz [ 172.217419][ T3810] usb 2-1: Manufacturer: syz [ 172.222098][ T3810] usb 2-1: SerialNumber: syz [ 172.232860][ T3810] usb 2-1: config 0 descriptor?? 06:20:02 executing program 5: syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 06:20:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 06:20:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:20:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 06:20:02 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x10000, 0x1ff) 06:20:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 06:20:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 06:20:03 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x10000, 0x1ff) 06:20:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0}) [ 172.502815][ T2987] usb 2-1: USB disconnect, device number 2 06:20:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 06:20:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) [ 173.294562][ T2985] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 173.694375][ T2985] usb 2-1: not running at top speed; connect to a high speed hub [ 173.934356][ T2985] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=59.e5 [ 173.943583][ T2985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.952490][ T2985] usb 2-1: Product: syz [ 173.957324][ T2985] usb 2-1: Manufacturer: syz [ 173.961907][ T2985] usb 2-1: SerialNumber: syz [ 173.969364][ T2985] usb 2-1: config 0 descriptor?? 06:20:04 executing program 1: syz_usb_connect(0x2, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xbc, 0x4f, 0x59, 0x40, 0xa12, 0x5d10, 0x59e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xa6, 0xf0}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000080)={0xa}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f5fee5b20abe0d92f44a9b8344835bb6"}]}}) 06:20:04 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x10000, 0x1ff) 06:20:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 06:20:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1) 06:20:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 06:20:04 executing program 5: syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) [ 174.177592][ T2985] usb 2-1: USB disconnect, device number 3 06:20:04 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x10000, 0x1ff) 06:20:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 06:20:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1) 06:20:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 06:20:04 executing program 0: quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 06:20:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1) [ 174.694417][ T2985] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 175.104253][ T2985] usb 2-1: not running at top speed; connect to a high speed hub [ 175.344278][ T2985] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=59.e5 [ 175.353353][ T2985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.362379][ T2985] usb 2-1: Product: syz [ 175.367206][ T2985] usb 2-1: Manufacturer: syz [ 175.371800][ T2985] usb 2-1: SerialNumber: syz [ 175.380920][ T2985] usb 2-1: config 0 descriptor?? [ 175.649294][ T2988] usb 2-1: USB disconnect, device number 4 06:20:06 executing program 1: syz_usb_connect(0x2, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xbc, 0x4f, 0x59, 0x40, 0xa12, 0x5d10, 0x59e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xa6, 0xf0}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000080)={0xa}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f5fee5b20abe0d92f44a9b8344835bb6"}]}}) 06:20:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 06:20:06 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x10000, 0x1ff) 06:20:06 executing program 0: quotactl(0x0, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fspick(r3, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000080)={'syz', 0x3, 0x48}, &(0x7f00000000c0)='y\x7f\xcbn(\xcb\x922i\x00', 0x0) dup(r0) gettid() 06:20:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff03", 0x2c}], 0x1) 06:20:06 executing program 5: syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 06:20:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 06:20:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff03", 0x2c}], 0x1) 06:20:06 executing program 0: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x400002200006007, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, 0x0) 06:20:06 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x10000, 0x1ff) 06:20:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff03", 0x2c}], 0x1) 06:20:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) [ 176.554349][ T2985] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 176.954201][ T2985] usb 2-1: not running at top speed; connect to a high speed hub [ 177.194173][ T2985] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=59.e5 [ 177.203406][ T2985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.211773][ T2985] usb 2-1: Product: syz [ 177.216100][ T2985] usb 2-1: Manufacturer: syz [ 177.220745][ T2985] usb 2-1: SerialNumber: syz [ 177.231977][ T2985] usb 2-1: config 0 descriptor?? [ 177.493076][ T3809] usb 2-1: USB disconnect, device number 5 06:20:08 executing program 1: syz_usb_connect(0x2, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xbc, 0x4f, 0x59, 0x40, 0xa12, 0x5d10, 0x59e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xa6, 0xf0}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000080)={0xa}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f5fee5b20abe0d92f44a9b8344835bb6"}]}}) 06:20:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) 06:20:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x10000, 0x1ff) 06:20:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 06:20:08 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) tee(r0, 0xffffffffffffffff, 0xffffffffffffff81, 0x0) 06:20:08 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0xed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) 06:20:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 06:20:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x10000, 0x1ff) [ 178.110453][ T29] audit: type=1804 audit(1592029208.591:5): pid=8928 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir446154093/syzkaller.uwQMmc/38/cgroup.controllers" dev="sda1" ino=15941 res=1 06:20:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) 06:20:08 executing program 0: quotactl(0x0, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fspick(r3, &(0x7f0000000000)='./file0\x00', 0x1) lseek(r1, 0x2f93, 0x3) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000080)={'syz', 0x3, 0x48}, &(0x7f00000000c0)='y\x7f\xcbn(\xcb\x92\ai\x00', 0x0) 06:20:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5441, 0x0) [ 178.218289][ T29] audit: type=1804 audit(1592029208.631:6): pid=8928 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir446154093/syzkaller.uwQMmc/38/cgroup.controllers" dev="sda1" ino=15941 res=1 06:20:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x10000, 0x1ff) [ 178.318493][ T29] audit: type=1800 audit(1592029208.631:7): pid=8928 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=15941 res=0 [ 178.348062][ T3809] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 178.454637][ T2985] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 178.654085][ T3809] usb 6-1: device descriptor read/64, error 18 [ 178.854483][ T2985] usb 2-1: not running at top speed; connect to a high speed hub [ 179.064016][ T3809] usb 6-1: device descriptor read/64, error 18 [ 179.094389][ T2985] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=59.e5 [ 179.103442][ T2985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.113114][ T2985] usb 2-1: Product: syz [ 179.117771][ T2985] usb 2-1: Manufacturer: syz [ 179.122390][ T2985] usb 2-1: SerialNumber: syz [ 179.128479][ T2985] usb 2-1: config 0 descriptor?? [ 179.344860][ T3809] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 179.383706][ T2987] usb 2-1: USB disconnect, device number 6 [ 179.623957][ T3809] usb 6-1: device descriptor read/64, error 18 06:20:10 executing program 1: 06:20:10 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x10000, 0x1ff) 06:20:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) 06:20:10 executing program 0: 06:20:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5441, 0x0) [ 180.023940][ T3809] usb 6-1: device descriptor read/64, error 18 [ 180.150983][ T3809] usb usb6-port1: attempt power cycle [ 180.616949][ T0] NOHZ: local_softirq_pending 08 [ 180.893882][ T3809] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 180.984171][ T3809] usb 6-1: Invalid ep0 maxpacket: 0 06:20:11 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0xed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) 06:20:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5441, 0x0) 06:20:11 executing program 1: 06:20:11 executing program 0: 06:20:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000010008", 0x4d}], 0x1) 06:20:11 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x10000, 0x1ff) 06:20:11 executing program 4: 06:20:11 executing program 1: 06:20:11 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x10000, 0x1ff) 06:20:11 executing program 0: 06:20:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000010008", 0x4d}], 0x1) 06:20:11 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x10000, 0x1ff) [ 181.655265][ T3809] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 181.744086][ T3809] usb 6-1: Invalid ep0 maxpacket: 0 [ 181.750760][ T3809] usb usb6-port1: unable to enumerate USB device 06:20:14 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0xed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) 06:20:14 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xbc, 0x4f, 0x59, 0x40, 0xa12, 0x5d10, 0x59e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xa6, 0xf0}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000080)={0xa}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f5fee5b20abe0d92f44a9b8344835bb6"}]}}) 06:20:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000010008", 0x4d}], 0x1) 06:20:14 executing program 4: 06:20:14 executing program 0: 06:20:14 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x1ff) 06:20:14 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x1ff) 06:20:14 executing program 4: 06:20:14 executing program 0: 06:20:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c1000000000", 0x53}], 0x1) 06:20:14 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x1ff) 06:20:14 executing program 0: [ 184.433946][ T2986] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 184.503851][ T3810] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 184.783741][ T3810] usb 6-1: device descriptor read/64, error 18 [ 185.053722][ T2986] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=59.e5 [ 185.063014][ T2986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.071488][ T2986] usb 2-1: Product: syz [ 185.076036][ T2986] usb 2-1: Manufacturer: syz [ 185.080675][ T2986] usb 2-1: SerialNumber: syz [ 185.087198][ T2986] usb 2-1: config 0 descriptor?? [ 185.193709][ T3810] usb 6-1: device descriptor read/64, error 18 [ 185.330026][ T3805] usb 2-1: USB disconnect, device number 7 [ 185.473670][ T3810] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 185.744027][ T3810] usb 6-1: device descriptor read/64, error 18 [ 186.143610][ T3810] usb 6-1: device descriptor read/64, error 18 [ 186.264572][ T3810] usb usb6-port1: attempt power cycle [ 186.973581][ T3810] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 187.073839][ T3810] usb 6-1: Invalid ep0 maxpacket: 0 06:20:17 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) 06:20:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c1000000000", 0x53}], 0x1) 06:20:17 executing program 4: 06:20:17 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x1ff) 06:20:17 executing program 0: 06:20:17 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xbc, 0x4f, 0x59, 0x40, 0xa12, 0x5d10, 0x59e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xa6, 0xf0}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000080)={0xa}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f5fee5b20abe0d92f44a9b8344835bb6"}]}}) [ 187.223862][ T3810] usb 6-1: new full-speed USB device number 17 using dummy_hcd 06:20:17 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x1ff) 06:20:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c1000000000", 0x53}], 0x1) 06:20:17 executing program 4: 06:20:17 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local, @random="c2d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1}}}}}}, 0x0) 06:20:17 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x1ff) 06:20:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000), 0x8) r1 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1) sendto$inet6(r0, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 187.522061][ T2987] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 187.586025][ T9101] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 187.723605][ T3810] usb 6-1: device not accepting address 17, error -71 [ 187.731997][ T3810] usb usb6-port1: unable to enumerate USB device [ 188.123556][ T3810] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 188.176286][ T2987] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=59.e5 [ 188.193514][ T2987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.201501][ T2987] usb 2-1: Product: syz [ 188.223745][ T2987] usb 2-1: Manufacturer: syz [ 188.228351][ T2987] usb 2-1: SerialNumber: syz [ 188.243729][ T2987] usb 2-1: config 0 descriptor?? [ 188.260433][ T9101] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 188.492550][ T2987] usb 2-1: USB disconnect, device number 8 [ 188.523734][ T3810] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 188.542494][ T3810] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.40 [ 188.573516][ T3810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.583061][ T3810] usb 6-1: config 0 descriptor?? [ 188.654730][ T3810] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 188.858773][ T3806] usb 6-1: USB disconnect, device number 18 06:20:19 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) 06:20:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c1000000000000000", 0x56}], 0x1) 06:20:19 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x10000, 0x0) 06:20:19 executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22044fbd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 06:20:19 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) sendmmsg(r0, &(0x7f000000a7c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="b9322505", 0x4}], 0x1}}], 0x1, 0x0) 06:20:19 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xbc, 0x4f, 0x59, 0x40, 0xa12, 0x5d10, 0x59e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xa6, 0xf0}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000080)={0xa}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f5fee5b20abe0d92f44a9b8344835bb6"}]}}) 06:20:19 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x10000, 0x0) 06:20:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c1000000000000000", 0x56}], 0x1) 06:20:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x7}, 0x1c) 06:20:20 executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22044fbd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 06:20:20 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x10000, 0x0) 06:20:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c1000000000000000", 0x56}], 0x1) [ 189.609264][ T9158] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 189.703572][ T3806] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 189.783609][ T2987] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 190.153540][ T2987] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 190.166545][ T2987] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.40 [ 190.175862][ T2987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.189439][ T2987] usb 6-1: config 0 descriptor?? [ 190.234520][ T2987] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 190.343570][ T3806] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=59.e5 [ 190.352619][ T3806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.361743][ T3806] usb 2-1: Product: syz [ 190.366676][ T3806] usb 2-1: Manufacturer: syz [ 190.371276][ T3806] usb 2-1: SerialNumber: syz [ 190.380126][ T3806] usb 2-1: config 0 descriptor?? [ 190.437868][ T2988] usb 6-1: USB disconnect, device number 19 [ 190.627816][ T3806] usb 2-1: USB disconnect, device number 9 06:20:21 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) 06:20:21 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="04"], 0x34}}, 0x0) 06:20:21 executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22044fbd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 06:20:21 executing program 2: 06:20:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000000000", 0x57}], 0x1) [ 190.988976][ T9202] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.090636][ T9208] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 06:20:21 executing program 1: syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000e40)={0xa, &(0x7f0000000080)={0xa}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f5fee5b20abe0d92f44a9b8344835bb6"}]}}) 06:20:21 executing program 2: 06:20:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000000000", 0x57}], 0x1) 06:20:21 executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22044fbd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 06:20:21 executing program 4: 06:20:21 executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x22044fbd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 06:20:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000000000", 0x57}], 0x1) [ 191.333600][ T2986] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 191.703617][ T2986] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 191.716629][ T2986] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.40 [ 191.727068][ T2986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.740712][ T2986] usb 6-1: config 0 descriptor?? [ 191.804493][ T2986] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 192.010540][ T3806] usb 6-1: USB disconnect, device number 20 06:20:23 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 06:20:23 executing program 2: 06:20:23 executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x22044fbd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 06:20:23 executing program 4: 06:20:23 executing program 3: 06:20:23 executing program 1: syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000e40)={0xa, &(0x7f0000000080)={0xa}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f5fee5b20abe0d92f44a9b8344835bb6"}]}}) 06:20:23 executing program 3: 06:20:23 executing program 2: 06:20:23 executing program 4: 06:20:23 executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x22044fbd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 06:20:23 executing program 4: 06:20:23 executing program 3: [ 192.933859][ T2986] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 193.293500][ T2986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.304738][ T2986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.314737][ T2986] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 193.327638][ T2986] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.40 [ 193.336874][ T2986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.351513][ T2986] usb 6-1: config 0 descriptor?? [ 193.397194][ T2986] usbhid 6-1:0.0: can't add hid device: -22 [ 193.410624][ T2986] usbhid: probe of 6-1:0.0 failed with error -22 [ 193.596768][ T3805] usb 6-1: USB disconnect, device number 21 06:20:24 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 06:20:24 executing program 4: 06:20:24 executing program 2: 06:20:24 executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22044fbd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 06:20:24 executing program 3: 06:20:24 executing program 1: syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000e40)={0xa, &(0x7f0000000080)={0xa}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f5fee5b20abe0d92f44a9b8344835bb6"}]}}) 06:20:24 executing program 3: 06:20:24 executing program 4: 06:20:24 executing program 2: 06:20:24 executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22044fbd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 06:20:24 executing program 3: 06:20:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) socket$packet(0x11, 0x3, 0x300) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x9, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = accept4$packet(r1, &(0x7f0000000240), &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f00000002c0)={0x1, 'vlan0\x00', {}, 0x7f}) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000552000/0x3000)=nil, 0x3000, 0x2000004, 0x392d6ad36ec0c8b2, 0xffffffffffffffff, 0xba5a9000) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000040)={0x1, 0x3f, 0x61914cdb, 0x5, 0x1, 0x8}) [ 194.493269][ T3805] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 194.916891][ T3805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 194.944675][ T3805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.971202][ T3805] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 195.012170][ T3805] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.40 [ 195.041177][ T3805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.070073][ T3805] usb 6-1: config 0 descriptor?? [ 195.124640][ T3805] usbhid 6-1:0.0: can't add hid device: -22 [ 195.130688][ T3805] usbhid: probe of 6-1:0.0 failed with error -22 [ 195.329153][ T2987] usb 6-1: USB disconnect, device number 22 06:20:26 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 06:20:26 executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22044fbd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 06:20:26 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {}, [{}], {}, [{}]}, 0x34, 0x0) 06:20:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)={[{@shortname_win95='shortname=win95'}]}) 06:20:26 executing program 1: syz_usb_connect(0x2, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xbc, 0x4f, 0x59, 0x40, 0xa12, 0x5d10, 0x59e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xa6, 0xf0}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000080)={0xa}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f5fee5b20abe0d92f44a9b8344835bb6"}]}}) 06:20:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) socket$packet(0x11, 0x3, 0x300) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x9, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = accept4$packet(r1, &(0x7f0000000240), &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f00000002c0)={0x1, 'vlan0\x00', {}, 0x7f}) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000552000/0x3000)=nil, 0x3000, 0x2000004, 0x392d6ad36ec0c8b2, 0xffffffffffffffff, 0xba5a9000) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000040)={0x1, 0x3f, 0x61914cdb, 0x5, 0x1, 0x8}) [ 195.950025][ T9342] FAT-fs (loop3): bogus number of reserved sectors [ 195.971774][ T9342] FAT-fs (loop3): Can't find a valid FAT filesystem 06:20:26 executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x22044fbd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 06:20:26 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') [ 196.160983][ T9342] FAT-fs (loop3): bogus number of reserved sectors [ 196.200672][ T9342] FAT-fs (loop3): Can't find a valid FAT filesystem [ 196.226843][ T2987] usb 2-1: new full-speed USB device number 10 using dummy_hcd 06:20:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x9, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x34000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x38) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @multicast2}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x5) syz_mount_image$vfat(0x0, &(0x7f0000000440)='./bus\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='rodir,nnonu', @ANYRESHEX=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c6673636f6e746578743d726f6f742c6673636ffb346e746578743d726f6f742c666f776e7968ea", @ANYRESDEC=0x0, @ANYBLOB]) [ 196.343364][ T3810] usb 6-1: new full-speed USB device number 23 using dummy_hcd 06:20:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:20:27 executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x22044fbd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 196.743385][ T3810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.774091][ T2987] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=59.e5 [ 196.782224][ T3810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.815912][ T2987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.825654][ T3810] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 196.872772][ T9369] FAT-fs (loop3): bogus number of FAT sectors [ 196.897386][ T2987] usb 2-1: Product: syz [ 196.899134][ T3810] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.40 [ 196.910824][ T3810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.920628][ T3810] usb 6-1: config 0 descriptor?? [ 196.934892][ T9369] FAT-fs (loop3): Can't find a valid FAT filesystem [ 196.937945][ T9373] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 06:20:27 executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x22044fbd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 196.957808][ T29] audit: type=1326 audit(1592029227.422:8): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9367 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f8aa code=0x0 [ 196.984656][ T3810] usbhid 6-1:0.0: can't add hid device: -22 [ 196.991015][ T3810] usbhid: probe of 6-1:0.0 failed with error -22 [ 197.003124][ T2987] usb 2-1: Manufacturer: syz [ 197.048239][ T2987] usb 2-1: SerialNumber: syz [ 197.118429][ T2987] usb 2-1: config 0 descriptor?? [ 197.358821][ T2988] usb 6-1: USB disconnect, device number 23 [ 197.460579][ T2987] usb 2-1: USB disconnect, device number 10 [ 197.668106][ T9403] FAT-fs (loop3): bogus number of FAT sectors [ 197.714786][ T29] audit: type=1326 audit(1592029228.202:9): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9367 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f8aa code=0x0 [ 197.773024][ T9403] FAT-fs (loop3): Can't find a valid FAT filesystem 06:20:29 executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22044fbd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 06:20:29 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007fff) r1 = socket(0x2, 0x803, 0xfe) connect$inet(r1, 0x0, 0x0) dup(r1) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/89) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r4}) 06:20:29 executing program 1: syz_usb_connect(0x2, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xbc, 0x4f, 0x59, 0x40, 0xa12, 0x5d10, 0x59e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xa6, 0xf0}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000080)={0xa}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f5fee5b20abe0d92f44a9b8344835bb6"}]}}) 06:20:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x9, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x34000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x38) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @multicast2}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x5) syz_mount_image$vfat(0x0, &(0x7f0000000440)='./bus\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='rodir,nnonu', @ANYRESHEX=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c6673636f6e746578743d726f6f742c6673636ffb346e746578743d726f6f742c666f776e7968ea", @ANYRESDEC=0x0, @ANYBLOB]) [ 198.996028][ T29] audit: type=1804 audit(1592029229.483:10): pid=9424 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir876077468/syzkaller.iNBYAT/48/bus" dev="sda1" ino=16068 res=1 06:20:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x9, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x34000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x38) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @multicast2}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x5) syz_mount_image$vfat(0x0, &(0x7f0000000440)='./bus\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='rodir,nnonu', @ANYRESHEX=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c6673636f6e746578743d726f6f742c6673636ffb346e746578743d726f6f742c666f776e7968ea", @ANYRESDEC=0x0, @ANYBLOB]) [ 199.053628][ T9426] FAT-fs (loop3): bogus number of FAT sectors [ 199.059715][ T9426] FAT-fs (loop3): Can't find a valid FAT filesystem 06:20:29 executing program 4: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xaa53, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write(r0, &(0x7f0000000080)="38851b03c516263ef71e261b4d10421e52accab1150ff7a41f8727ec8f2ff1b042f21aa3cb8869e3b97057bbdbc74fbeb29ba24cdefe7f2796b4bf91906ae3fe43d456e35926a3443147691e7349c90e", 0x50) 06:20:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22044fbd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 199.199465][ T29] audit: type=1804 audit(1592029229.683:11): pid=9432 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir876077468/syzkaller.iNBYAT/48/bus" dev="sda1" ino=16068 res=1 [ 199.232978][ T3805] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 199.241618][ T9435] FAT-fs (loop5): bogus number of FAT sectors 06:20:29 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') tkill(r1, 0x3c) dup3(r2, r0, 0x0) [ 199.299077][ T29] audit: type=1800 audit(1592029229.733:12): pid=9424 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16068 res=0 [ 199.323978][ T9435] FAT-fs (loop5): Can't find a valid FAT filesystem [ 199.437170][ T29] audit: type=1800 audit(1592029229.733:13): pid=9432 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16068 res=0 [ 304.508900][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 304.517091][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): [ 304.517099][ C1] ------------[ cut here ]------------ [ 304.530118][ C1] IRQs not enabled as expected [ 304.535136][ C1] WARNING: CPU: 1 PID: 9446 at kernel/sched/core.c:2675 try_invoke_on_locked_down_task+0x219/0x370 [ 304.545865][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 304.552500][ C1] CPU: 1 PID: 9446 Comm: syz-executor.5 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 304.562304][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.572360][ C1] Call Trace: [ 304.575644][ C1] [ 304.578658][ C1] dump_stack+0x18f/0x20d [ 304.583123][ C1] ? try_invoke_on_locked_down_task+0x1b0/0x370 [ 304.589456][ C1] panic+0x2e3/0x75c [ 304.593374][ C1] ? __warn_printk+0xf3/0xf3 [ 304.598148][ C1] ? __probe_kernel_read+0x188/0x1d0 [ 304.603444][ C1] ? __warn.cold+0x14/0x3a [ 304.607867][ C1] ? __warn+0xd6/0x1b2 [ 304.611960][ C1] ? try_invoke_on_locked_down_task+0x219/0x370 [ 304.618295][ C1] __warn.cold+0x2f/0x3a [ 304.622552][ C1] ? try_invoke_on_locked_down_task+0x219/0x370 [ 304.628799][ C1] report_bug+0x27b/0x2f0 [ 304.633236][ C1] do_error_trap+0x153/0x2b0 [ 304.637856][ C1] ? try_invoke_on_locked_down_task+0x219/0x370 [ 304.644199][ C1] exc_invalid_op+0x37/0x50 [ 304.648713][ C1] ? try_invoke_on_locked_down_task+0x219/0x370 [ 304.655006][ C1] asm_exc_invalid_op+0x12/0x20 [ 304.659966][ C1] RIP: 0010:try_invoke_on_locked_down_task+0x219/0x370 [ 304.666829][ C1] Code: 00 00 85 c9 0f 85 e4 fe ff ff 80 3d a4 d2 58 09 00 0f 85 d7 fe ff ff 48 c7 c7 00 37 4b 88 c6 05 90 d2 58 09 01 e8 c9 28 f4 ff <0f> 0b e9 bd fe ff ff 48 8d 74 24 30 48 89 ef 49 c7 c6 00 7e 03 00 [ 304.686531][ C1] RSP: 0018:ffffc90000da8c20 EFLAGS: 00010086 [ 304.693039][ C1] RAX: 0000000000000000 RBX: 1ffff920001b5186 RCX: 0000000000000000 [ 304.701077][ C1] RDX: 0000000080010001 RSI: ffffffff815c9bf7 RDI: fffff520001b5176 [ 304.709145][ C1] RBP: ffff8880a90360c0 R08: ffff888041506580 R09: ffffed1015ce45fa [ 304.717134][ C1] R10: ffff8880ae722fcb R11: ffffed1015ce45f9 R12: ffffffff816032a0 [ 304.725195][ C1] R13: ffffc90000da8d48 R14: ffff888041506580 R15: dffffc0000000000 [ 304.733241][ C1] ? rcu_accelerate_cbs_unlocked+0xe0/0xe0 [ 304.739152][ C1] ? vprintk_func+0x97/0x1a6 [ 304.743780][ C1] ? cpus_share_cache+0x100/0x100 [ 304.748986][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 304.754550][ C1] rcu_sched_clock_irq.cold+0x928/0xd33 [ 304.760114][ C1] ? rcutree_dead_cpu+0x10/0x10 [ 304.765117][ C1] ? check_preemption_disabled+0x38/0x220 [ 304.770880][ C1] ? trace_hardirqs_off+0x50/0x210 [ 304.776046][ C1] update_process_times+0x25/0x60 [ 304.781119][ C1] tick_sched_handle.isra.0+0x91/0x180 [ 304.786586][ C1] tick_sched_timer+0x50/0x140 [ 304.791400][ C1] __hrtimer_run_queues+0x5ca/0xea0 [ 304.796699][ C1] ? tick_sched_do_timer+0x1a0/0x1a0 [ 304.802015][ C1] ? do_raw_spin_lock+0x120/0x2d0 [ 304.807160][ C1] ? hrtimer_init+0x310/0x310 [ 304.811884][ C1] ? ktime_get_update_offsets_now+0x2d6/0x450 [ 304.817964][ C1] hrtimer_interrupt+0x312/0x770 [ 304.823455][ C1] __sysvec_apic_timer_interrupt+0x142/0x5e0 [ 304.830404][ C1] asm_call_on_stack+0xf/0x20 [ 304.835082][ C1] [ 304.838145][ C1] sysvec_apic_timer_interrupt+0x207/0x260 [ 304.843964][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 304.849995][ C1] RIP: 0010:write_comp_data+0x2e/0x80 [ 304.855376][ C1] Code: 25 00 1f 02 00 65 8b 05 b8 22 8f 7e a9 00 01 ff 00 74 10 f6 c4 01 74 5c 41 8b 80 0c 14 00 00 85 c0 74 51 41 8b 80 e8 13 00 00 <83> f8 03 75 45 49 8b 80 f0 13 00 00 45 8b 80 ec 13 00 00 4c 8b 08 [ 304.875690][ C1] RSP: 0018:ffffc90009527818 EFLAGS: 00000246 [ 304.881771][ C1] RAX: 0000000000000002 RBX: 1ffff920012a4f06 RCX: ffffffff81c35cc9 [ 304.890182][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000005 [ 304.898159][ C1] RBP: ffffc900095278b8 R08: ffff888041506580 R09: 0000000000000001 [ 304.906138][ C1] R10: ffffffff8c588aaf R11: fffffbfff18b1155 R12: 0000000000000001 [ 304.914231][ C1] R13: ffffffff80000000 R14: 000000005ee47096 R15: 000000003ad65c4d [ 304.922304][ C1] ? timestamp_truncate+0x1b9/0x2f0 [ 304.927665][ C1] timestamp_truncate+0x1b9/0x2f0 [ 304.932701][ C1] ? inode_init_owner+0x330/0x330 [ 304.937922][ C1] ? ktime_get_coarse_real_ts64+0x19b/0x280 [ 304.945045][ C1] current_time+0x9d/0x110 [ 304.949591][ C1] ? timestamp_truncate+0x2f0/0x2f0 [ 304.955558][ C1] atime_needs_update+0x299/0x5f0 [ 304.960599][ C1] touch_atime+0xce/0x230 [ 304.965288][ C1] ? atime_needs_update+0x5f0/0x5f0 [ 304.970538][ C1] ? iov_iter_pipe+0xef/0x290 [ 304.975272][ C1] generic_file_splice_read+0x5d6/0x6d0 [ 304.980836][ C1] ? pipe_to_user+0x170/0x170 [ 304.985538][ C1] ? pipe_to_user+0x170/0x170 [ 304.990370][ C1] do_splice_to+0x10b/0x170 [ 304.995476][ C1] splice_direct_to_actor+0x307/0x980 [ 305.001476][ C1] ? do_splice_from+0x110/0x110 [ 305.006339][ C1] ? do_splice_to+0x170/0x170 [ 305.011033][ C1] do_splice_direct+0x1b4/0x280 [ 305.016144][ C1] ? splice_direct_to_actor+0x980/0x980 [ 305.021825][ C1] ? check_preemption_disabled+0x38/0x220 [ 305.027632][ C1] do_sendfile+0x555/0xc50 [ 305.032088][ C1] ? do_compat_pwritev64+0x1b0/0x1b0 [ 305.037421][ C1] ? __might_fault+0x190/0x1d0 [ 305.042206][ C1] __x64_sys_sendfile64+0x149/0x210 [ 305.047502][ C1] ? __ia32_sys_sendfile+0x220/0x220 [ 305.052946][ C1] do_syscall_64+0x60/0xe0 [ 305.057373][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 305.063272][ C1] RIP: 0033:0x45ca69 [ 305.067274][ C1] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 305.086977][ C1] RSP: 002b:00007f5b095adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 305.095483][ C1] RAX: ffffffffffffffda RBX: 00000000004fcec0 RCX: 000000000045ca69 [ 305.103677][ C1] RDX: 00000000200001c0 RSI: 0000000000000006 RDI: 0000000000000006 [ 305.111746][ C1] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 305.119725][ C1] R10: 00008080fffffffe R11: 0000000000000246 R12: 00000000ffffffff [ 305.127794][ C1] R13: 00000000000008f3 R14: 00000000004cbc4a R15: 00007f5b095ae6d4 [ 305.144988][ C1] Kernel Offset: disabled [ 305.149464][ C1] Rebooting in 86400 seconds..